This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3C105BEDBF911F093201898DAE4EC9C.roa
File:                     A3C105BEDBF911F093201898DAE4EC9C.roa (raw, json)
Hash identifier:          LCB0mKhbyPI7xeNs+T6HkYwHBkbKlILzyTJavc9AjxE=
Subject key identifier:   0A:8C:94:C7:66:0C:08:21:F3:78:EE:F4:D3:76:05:A6:56:6B:AF:AF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018FEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3C105BEDBF911F093201898DAE4EC9C.roa
Signing time:             Thu 18 Dec 2025 10:09:29 +0000
ROA not before:           Thu 18 Dec 2025 10:09:25 +0000
ROA not after:            Sun 25 Jan 2026 10:09:25 +0000
asID:                     140869
IP address blocks:        45.203.213.0/24 maxlen: 24
                          45.203.214.0/24 maxlen: 24
                          45.203.215.0/24 maxlen: 24
                          45.203.216.0/24 maxlen: 24
                          45.203.217.0/24 maxlen: 24
                          45.203.218.0/24 maxlen: 24
                          45.203.219.0/24 maxlen: 24
                          45.203.220.0/24 maxlen: 24
                          45.205.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102379 (0x18feb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 18 10:09:25 2025 GMT
            Not After : Jan 25 10:09:25 2026 GMT
        Subject: CN=6943d2d9-6ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:50:07:9c:44:3a:06:94:d5:b5:bc:b9:b4:5e:
                    de:bc:f4:4a:1e:e9:00:15:eb:76:91:e5:56:27:15:
                    56:d3:91:94:f1:d2:72:03:40:18:b5:04:e6:0e:81:
                    f1:02:38:ce:f5:54:3f:f0:72:c1:12:1b:de:e9:14:
                    05:ac:74:fe:a3:31:fc:04:5b:0d:45:7e:dd:d8:3a:
                    a4:e3:99:d8:a5:44:84:1c:c6:8b:13:75:5b:93:93:
                    c3:f0:eb:42:ed:f7:41:46:36:b6:0a:57:ac:18:1a:
                    d2:3e:ab:ba:0a:28:73:fd:27:7b:78:bd:c8:c1:ee:
                    45:0b:2a:b9:b0:c7:12:d9:69:af:d4:fc:07:d4:09:
                    c4:20:bf:c8:a5:b7:cc:21:0b:04:6c:b9:2a:02:ea:
                    e3:4a:2a:e1:7e:26:3e:37:6b:e2:74:84:e2:92:33:
                    f6:e8:55:e2:2b:8f:ff:94:c9:5d:67:56:a1:f7:ee:
                    eb:f5:71:3b:3e:27:01:c0:a6:82:e1:f4:c1:87:c2:
                    3e:68:9d:c0:82:be:12:e3:0b:3f:21:44:a3:9a:39:
                    40:85:93:d2:f6:4e:a4:5f:a1:c8:15:e1:2c:6e:fa:
                    62:f1:e5:57:b0:09:92:d3:94:06:54:ad:e8:1f:c4:
                    60:39:4b:0e:e2:a1:f7:13:1e:59:59:ab:6f:99:84:
                    78:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:8C:94:C7:66:0C:08:21:F3:78:EE:F4:D3:76:05:A6:56:6B:AF:AF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A3C105BEDBF911F093201898DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.203.213.0-45.203.220.255
                  45.205.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:66:a9:c0:1e:66:06:1e:2d:e6:1f:a9:4a:83:7e:fa:b8:b4:
         4b:d9:59:f2:99:5d:f4:5e:57:03:5f:00:83:a6:c4:db:b8:dd:
         7b:1e:ef:3e:02:a2:f3:8d:7b:ff:00:e2:f2:52:66:ee:44:48:
         8f:e0:a0:58:ea:45:75:7b:73:22:06:7b:bc:ac:dd:26:1f:01:
         1d:ac:95:16:24:d5:ee:39:69:10:9a:b2:c3:89:ac:a7:40:0c:
         56:d5:c3:d5:a9:33:b3:e1:8e:fb:d7:3e:fe:c2:ac:ca:91:52:
         5f:77:ae:2d:30:a9:1e:8a:00:21:f0:80:ba:f1:e1:07:c3:c3:
         16:cb:5d:29:63:56:e3:68:d7:ce:b6:26:de:e5:43:77:a4:49:
         a0:39:dc:93:d0:00:f1:bd:87:bd:18:55:03:1a:2a:d2:a6:7d:
         b2:ae:84:93:f0:16:c1:8a:84:33:39:84:08:88:12:c5:fe:fa:
         11:6a:34:a4:a5:60:46:6f:ab:95:2f:81:5a:b6:fb:2f:7b:73:
         64:b1:ce:ac:33:09:4b:07:dc:50:16:75:22:b4:5e:82:40:80:
         58:9b:8a:84:87:fc:78:af:ff:ed:e9:e2:db:f0:87:03:0a:73:
         b5:64:9f:8c:ae:ae:d8:5d:22:6e:7a:c8:6b:de:ca:a9:a7:94:
         e8:e4:7f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:41:32 2025 by rpki-client