This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/865AC284E02811F0815B04CADAE4EC9C.roa
File:                     865AC284E02811F0815B04CADAE4EC9C.roa (raw, json)
Hash identifier:          ylMaqYcI2PHVM1+Qg2EApbSuy+HPQb4LAGApGDzV+ek=
Subject key identifier:   08:83:A6:CB:1B:FA:55:E0:3A:2A:69:92:B0:8C:2F:EF:3A:89:9D:56
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0190EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/865AC284E02811F0815B04CADAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 17:55:12 +0000
ROA not before:           Tue 23 Dec 2025 17:55:01 +0000
ROA not after:            Wed 28 Jan 2026 17:55:01 +0000
asID:                     202656
IP address blocks:        45.195.183.0/24 maxlen: 24
                          45.195.184.0/24 maxlen: 24
                          45.195.185.0/24 maxlen: 24
                          45.195.187.0/24 maxlen: 24
                          45.195.188.0/24 maxlen: 24
                          45.195.191.0/24 maxlen: 24
                          45.199.201.0/24 maxlen: 24
                          45.199.202.0/24 maxlen: 24
                          45.199.203.0/24 maxlen: 24
                          45.199.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102635 (0x190eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 23 17:55:01 2025 GMT
            Not After : Jan 28 17:55:01 2026 GMT
        Subject: CN=694ad780-401e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cd:c8:31:65:40:59:01:dd:0d:84:47:60:ed:
                    62:b6:bb:a0:2f:bd:4d:3a:0d:1f:42:37:4f:d9:61:
                    24:20:60:50:17:7a:9c:ee:94:47:33:e7:3e:29:aa:
                    f3:c8:66:0b:37:2c:e9:10:a4:8c:99:ec:e2:54:32:
                    79:7d:0d:66:27:78:9c:b3:14:4d:1f:5f:61:9a:88:
                    32:c6:92:36:89:a9:da:86:7c:6c:57:2b:dc:08:1c:
                    fd:88:1e:45:53:d1:f1:2e:20:0b:f4:ff:2e:40:42:
                    80:a0:6d:03:21:13:63:b5:4d:8d:f4:d3:b9:5e:54:
                    0c:d4:1a:95:21:6e:de:9b:f3:03:f1:73:da:92:85:
                    b9:9f:84:2b:bc:dc:9a:8c:5f:fc:43:22:52:fb:af:
                    bd:cb:77:3a:b1:a3:56:ca:fa:9d:0e:40:5c:f0:de:
                    8b:01:97:7a:68:d1:3b:ab:ab:b2:de:71:84:b9:52:
                    79:3c:ee:ce:6f:3f:35:5f:8b:22:94:20:31:4e:15:
                    9a:cd:dd:cd:8e:7d:61:7f:b0:34:02:e2:ba:f1:c5:
                    24:95:36:0a:d1:49:22:f6:48:e9:77:bc:0d:4b:fd:
                    3c:a4:e4:7b:d5:a5:37:e8:6a:46:53:bf:56:ec:24:
                    fa:55:15:bb:2c:71:a7:d7:8a:12:a4:18:72:64:40:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:83:A6:CB:1B:FA:55:E0:3A:2A:69:92:B0:8C:2F:EF:3A:89:9D:56
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/865AC284E02811F0815B04CADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.183.0-45.195.185.255
                  45.195.187.0-45.195.188.255
                  45.195.191.0/24
                  45.199.201.0-45.199.204.255

    Signature Algorithm: sha256WithRSAEncryption
         27:40:5c:81:51:cc:d1:f0:cb:be:fa:d3:fe:f1:9b:93:42:b4:
         21:fd:cc:96:a0:00:d6:42:18:ff:a5:fd:ad:d4:35:ef:48:20:
         f1:ec:f5:2e:c0:d3:7e:2a:b2:2e:a5:9c:30:16:83:0d:43:3e:
         96:01:dd:60:1e:cb:64:68:7b:e2:75:ee:fd:d3:7e:11:87:f4:
         10:e1:b4:a1:3b:60:ab:a0:76:4d:14:3d:18:15:ad:52:c7:d8:
         bb:9e:4d:d4:29:3c:77:7e:b0:f7:ce:91:0f:e7:8b:e4:57:26:
         2b:b2:df:1d:bb:88:90:9f:b0:73:28:75:47:19:5f:b4:a4:1c:
         8e:16:6e:fb:e4:6d:b0:22:01:16:61:16:b1:5f:ca:a9:94:7f:
         56:64:34:bb:dc:92:d6:ef:a7:9d:0a:99:cc:e7:41:4b:82:a7:
         fd:56:d7:e3:ed:2d:ad:e2:7b:a0:ed:1d:91:3f:9f:72:0c:88:
         28:b5:f6:35:bd:32:70:ea:cf:fb:96:99:0e:a3:b4:a6:d7:b5:
         f4:33:76:83:18:17:17:55:b1:49:eb:01:89:c0:f4:a8:dc:58:
         93:5e:73:9d:38:79:6c:f8:77:a1:8a:f0:b5:bc:37:5e:c3:b7:
         d1:8d:53:e7:7c:22:85:30:0a:0e:75:d1:63:d6:ac:7b:7a:d9:
         62:41:0a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 08:07:03 2025 by rpki-client