This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89E34270E16611F085ECA0A8DAE4EC9C.roa
File:                     89E34270E16611F085ECA0A8DAE4EC9C.roa (raw, json)
Hash identifier:          /D6RQo67s2mZXXawUOKAYICGziiFW58q5aQ6IhHVv24=
Subject key identifier:   44:AA:24:A6:58:F4:CB:50:63:A6:4F:2F:E1:CD:C4:8F:4D:01:70:10
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0191F5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89E34270E16611F085ECA0A8DAE4EC9C.roa
Signing time:             Thu 25 Dec 2025 07:51:37 +0000
ROA not before:           Thu 25 Dec 2025 07:51:32 +0000
ROA not after:            Fri 30 Jan 2026 07:51:32 +0000
asID:                     266811
IP address blocks:        45.196.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 31 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102901 (0x191f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 25 07:51:32 2025 GMT
            Not After : Jan 30 07:51:32 2026 GMT
        Subject: CN=694ced09-0baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:7a:86:ce:41:7a:85:c7:23:06:20:cc:d9:
                    3f:c2:f6:37:43:29:1b:4a:95:3c:a4:64:91:36:34:
                    f0:6a:c4:94:8e:61:2e:72:15:b9:5a:b7:02:55:31:
                    c6:c4:10:24:17:75:ce:aa:8c:fd:d6:ec:6b:30:eb:
                    97:55:6c:47:d8:9c:8f:de:43:d6:94:81:23:4a:8f:
                    dc:74:ee:81:19:61:1f:07:72:a2:ed:d5:c2:63:65:
                    05:d0:13:bf:96:80:1f:81:4b:8f:a3:7d:e5:c1:e4:
                    21:37:dc:ee:b4:39:0d:c2:bb:f9:80:dc:d3:af:ac:
                    1a:0d:38:25:c7:ff:53:9a:7c:06:0d:bb:f7:86:63:
                    f2:8f:08:ef:bc:df:b5:ee:e0:5f:ff:fa:51:ff:1e:
                    85:a3:17:9d:21:c0:b5:1e:cc:78:f8:c2:26:3a:1e:
                    34:a0:31:e4:3a:7d:e8:79:43:71:b3:4a:e5:40:9a:
                    b9:71:c0:18:18:5f:c5:56:bb:fb:7e:64:6b:18:c8:
                    fb:15:a9:8d:4e:4f:c5:ef:a6:ca:d5:aa:a9:3a:7f:
                    4a:16:5e:8b:fe:93:00:8f:74:3f:00:ee:1d:1c:bd:
                    2e:d8:df:ea:2a:1f:7a:b9:0d:2c:89:13:90:4d:83:
                    e5:bc:a5:94:22:dd:00:cd:27:10:6e:ce:75:36:6c:
                    c5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AA:24:A6:58:F4:CB:50:63:A6:4F:2F:E1:CD:C4:8F:4D:01:70:10
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89E34270E16611F085ECA0A8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:8a:17:93:f9:97:53:1f:68:e2:68:dd:62:90:20:fa:1b:48:
         41:8e:ce:f7:f1:b5:15:9a:d5:c3:be:f0:59:52:96:34:97:6b:
         18:2d:65:2a:55:c3:de:eb:43:d6:3d:bb:38:a5:05:6b:f1:b8:
         01:cf:f2:e4:6f:00:39:aa:80:62:e2:5d:a2:7c:ae:e9:32:be:
         f8:c4:08:cf:4c:34:ba:ac:0c:45:28:0c:50:ed:ed:2f:63:9a:
         98:dc:3f:02:9a:0b:77:ed:74:f0:04:d2:f1:07:22:e2:39:08:
         e8:9b:b7:d2:e7:cb:b9:02:e0:8b:7a:f4:ee:0b:81:56:f4:f3:
         39:db:b4:87:86:5c:52:81:97:ca:a5:93:87:b8:8b:a3:ad:f7:
         48:af:75:81:2b:a7:ba:c5:65:f8:e2:18:b6:5d:6b:10:da:52:
         32:f3:1a:20:ff:cf:0d:1e:b1:24:90:ed:5a:76:c8:cd:34:b5:
         c4:ab:36:3d:f9:1b:46:72:74:d3:e7:d4:f5:c9:85:f3:17:61:
         35:fa:08:b8:d6:f5:48:16:71:55:12:3f:5f:dd:63:63:04:b9:
         d3:e8:f7:11:a8:77:9b:ba:4a:4d:24:d9:c1:fd:24:05:c0:c1:
         05:12:9d:87:bd:a6:c6:50:61:bb:2a:dc:4e:0b:7d:e4:61:69:
         5c:6c:36:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 11:48:59 2025 by rpki-client