This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F4A6738DB6811F0B715E083DAE4EC9C.roa
File:                     8F4A6738DB6811F0B715E083DAE4EC9C.roa (raw, json)
Hash identifier:          2bDRi8d8/eQZ7jH2YJljHaKFZlNkaOIuA7FplwPUZxw=
Subject key identifier:   40:77:B0:17:68:67:7C:4F:9B:CD:CC:18:CD:B9:A2:33:AD:81:8E:C5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018FA1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F4A6738DB6811F0B715E083DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 16:50:58 +0000
ROA not before:           Wed 17 Dec 2025 16:50:53 +0000
ROA not after:            Sat 27 Dec 2025 16:50:53 +0000
asID:                     54801
IP address blocks:        45.200.20.0/22 maxlen: 24
                          45.200.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102305 (0x18fa1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 17 16:50:53 2025 GMT
            Not After : Dec 27 16:50:53 2025 GMT
        Subject: CN=6942df72-bb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:97:8e:bc:21:1e:3d:75:78:73:cf:14:10:
                    f3:41:87:37:fe:38:19:23:8e:49:d3:64:0f:55:19:
                    6e:d6:d7:80:5c:b2:c9:82:f5:ad:c0:f9:f1:43:ad:
                    5c:0d:87:14:0e:65:b7:df:d1:ae:51:c1:33:ce:19:
                    6a:c8:1d:98:f9:7e:90:f8:bc:4f:8c:53:d0:fb:47:
                    17:ae:e4:99:9f:ad:af:d5:e9:b5:29:c0:e8:39:bc:
                    a8:a7:e9:7e:0a:07:a6:98:cb:5b:41:96:d2:74:2a:
                    3f:b4:3d:dc:36:fb:b4:7e:aa:3b:f9:0f:d6:87:6e:
                    53:3c:6e:f2:ef:2e:a2:99:f5:b4:f3:3f:0f:cc:d9:
                    36:46:3c:5c:1b:34:4e:b0:9a:7b:99:dd:4a:12:58:
                    8a:84:c8:86:93:07:1c:93:41:ef:0b:be:d6:48:49:
                    fc:e7:98:a5:77:3c:b4:93:dd:f7:bf:3e:7d:96:ce:
                    4d:b1:53:bc:60:16:18:d3:97:fe:a5:70:60:ea:f0:
                    54:9f:2f:b2:28:3f:b0:b4:ae:23:a2:a8:ea:55:34:
                    4a:44:7b:24:55:9e:f4:d6:47:51:6a:d5:b1:07:95:
                    49:9e:1c:95:6c:56:a7:20:ef:64:74:66:e0:ae:b2:
                    2a:67:7b:39:38:75:a1:c0:d5:34:f8:48:25:48:d2:
                    c6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:77:B0:17:68:67:7C:4F:9B:CD:CC:18:CD:B9:A2:33:AD:81:8E:C5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F4A6738DB6811F0B715E083DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.20.0-45.200.31.255

    Signature Algorithm: sha256WithRSAEncryption
         25:5a:53:dd:e0:95:59:96:0b:1d:d0:08:49:8d:63:9a:a8:3d:
         45:6d:bf:13:2b:bd:10:1f:ba:d2:3c:87:4e:aa:28:87:a9:19:
         af:f9:65:3f:49:d5:5d:63:8f:d7:75:b6:69:ed:4e:a6:f0:19:
         48:cd:5a:93:b2:51:13:3f:0a:c7:92:48:25:8a:8e:a3:df:87:
         22:f1:d3:e5:9d:a5:3b:ba:3a:a7:28:3a:3e:b9:dc:45:94:94:
         0d:ff:44:e0:da:50:20:70:66:5c:b5:85:52:1f:be:23:67:98:
         d6:15:26:ee:05:a0:dc:b0:1b:ae:f6:ae:9a:59:3d:58:6e:d8:
         1a:10:5c:d6:03:fa:63:0c:f9:32:a6:21:6b:a2:dd:1d:ce:00:
         8d:37:49:b2:6d:59:d2:e6:bc:8b:d5:be:c4:57:70:db:ce:2c:
         ed:a3:b3:eb:d6:86:d9:44:47:26:14:25:dc:a4:f1:e1:02:c1:
         c2:e2:af:07:0c:d1:44:de:b3:2b:08:0d:dc:10:01:b0:af:50:
         b5:64:f9:9e:6f:5a:d0:0a:04:c8:cf:f2:30:43:76:c8:fa:9d:
         36:69:66:80:c1:1f:76:5c:3b:4c:2c:96:b5:2e:d8:e9:e7:a1:
         fb:cd:3f:7b:fa:f4:43:18:82:2d:3e:ec:48:c8:4a:2c:e8:25:
         b9:cd:d1:39
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAY+hMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjE3MTY1MDUzWhcNMjUxMjI3MTY1MDUzWjAYMRYw
FAYDVQQDEw02OTQyZGY3Mi1iYjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxU2XjrwhHj11eHPPFBDzQYc3/jgZI45J02QPVRlu1teAXLLJgvWtwPnx
Q61cDYcUDmW339GuUcEzzhlqyB2Y+X6Q+LxPjFPQ+0cXruSZn62v1em1KcDoObyo
p+l+CgemmMtbQZbSdCo/tD3cNvu0fqo7+Q/Wh25TPG7y7y6imfW08z8PzNk2Rjxc
GzROsJp7md1KEliKhMiGkwcck0HvC77WSEn855ildzy0k933vz59ls5NsVO8YBYY
05f+pXBg6vBUny+yKD+wtK4joqjqVTRKRHskVZ701kdRatWxB5VJnhyVbFanIO9k
dGbgrrIqZ3s5OHWhwNU0+EglSNLGQQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFEB3
sBdoZ3xPm83MGM25ojOtgY7FMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84RjRBNjczOERCNjgxMUYwQjcxNUUwODNEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItyBQDBAUtyAAwDQYJKoZI
hvcNAQELBQADggEBACVaU93glVmWCx3QCEmNY5qoPUVtvxMrvRAfutI8h06qKIep
Ga/5ZT9J1V1jj9d1tmntTqbwGUjNWpOyURM/CseSSCWKjqPfhyLx0+WdpTu6Oqco
Oj653EWUlA3/RODaUCBwZly1hVIfviNnmNYVJu4FoNywG672rppZPVhu2BoQXNYD
+mMM+TKmIWui3R3OAI03SbJtWdLmvIvVvsRXcNvOLO2js+vWhtlERyYUJdyk8eEC
wcLirwcM0UTesysIDdwQAbCvULVk+Z5vWtAKBMjP8jBDdsj6nTZpZoDBH3ZcO0ws
lrUu2OnnofvNP3v69EMYgi0+7EjISizoJbnN0Tk=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:35:14 2025 by rpki-client