This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC64CF3AE0C611F08AD179B5DAE4EC9C.roa
File:                     AC64CF3AE0C611F08AD179B5DAE4EC9C.roa (raw, json)
Hash identifier:          dpwUMCckWjYbaxjp+IR5NFZIGBL6MhuFn7S13PNNMNc=
Subject key identifier:   3F:F7:63:FB:46:4C:59:FF:CD:9E:65:5A:9B:27:E2:1F:F3:05:41:D9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01917A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC64CF3AE0C611F08AD179B5DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 12:47:15 +0000
ROA not before:           Wed 24 Dec 2025 12:47:10 +0000
ROA not after:            Fri 02 Jan 2026 12:47:10 +0000
asID:                     63139
IP address blocks:        45.197.67.0/24 maxlen: 24
                          45.197.68.0/23 maxlen: 24
                          45.197.68.0/24 maxlen: 24
                          45.197.69.0/24 maxlen: 24
                          45.197.70.0/24 maxlen: 24
                          45.197.71.0/24 maxlen: 24
                          45.197.72.0/24 maxlen: 24
                          45.197.73.0/24 maxlen: 24
                          45.197.74.0/24 maxlen: 24
                          45.197.75.0/24 maxlen: 24
                          45.197.88.0/24 maxlen: 24
                          45.197.89.0/24 maxlen: 24
                          45.197.90.0/24 maxlen: 24
                          45.197.91.0/24 maxlen: 24
                          45.197.92.0/24 maxlen: 24
                          45.197.93.0/24 maxlen: 24
                          45.197.94.0/24 maxlen: 24
                          45.197.95.0/24 maxlen: 24
                          45.197.96.0/24 maxlen: 24
                          45.197.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102778 (0x1917a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 24 12:47:10 2025 GMT
            Not After : Jan  2 12:47:10 2026 GMT
        Subject: CN=694be0d3-2a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2b:b1:14:db:15:8c:2a:4c:9d:4e:3e:ea:34:
                    99:e7:01:86:30:62:6e:e7:30:ed:61:5b:ee:52:cf:
                    72:aa:a8:f0:bc:ed:86:b6:da:a4:98:68:a1:df:62:
                    5e:49:ad:3b:ac:36:bf:b5:46:1a:a1:7a:d6:90:e4:
                    bb:ce:cb:d4:5d:4c:93:e1:06:17:38:63:96:84:f6:
                    27:db:56:41:15:2c:2f:c7:b6:b7:e5:09:76:f6:9d:
                    c1:b0:a7:2e:e9:85:62:84:c6:f7:be:5a:ec:d4:ca:
                    9c:9d:55:02:34:77:d8:91:ec:fe:ae:25:00:15:ae:
                    72:4c:47:cf:65:1a:ca:b1:ac:87:a5:6b:63:68:ba:
                    8d:c2:69:39:84:ae:9f:fd:4b:84:ab:d1:34:ec:c5:
                    33:21:38:ec:8b:f1:68:7d:a0:36:ae:68:a1:10:22:
                    f0:1e:0b:b9:de:e8:05:94:ff:ff:bf:c7:e6:4f:8b:
                    29:23:6b:8c:f9:1c:05:29:8d:88:ea:53:bf:47:fd:
                    9e:c5:c5:bb:38:cc:f5:3c:10:fd:c2:b1:c3:11:9c:
                    85:08:f1:1f:ff:5f:1f:7f:6f:69:76:5d:63:86:3e:
                    67:46:fe:1f:39:8a:69:66:62:b5:7f:69:d8:f9:63:
                    d3:e4:80:74:a4:c2:84:75:67:57:90:24:5e:4a:25:
                    41:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F7:63:FB:46:4C:59:FF:CD:9E:65:5A:9B:27:E2:1F:F3:05:41:D9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC64CF3AE0C611F08AD179B5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.67.0-45.197.75.255
                  45.197.88.0-45.197.97.255

    Signature Algorithm: sha256WithRSAEncryption
         b7:ac:b8:4c:21:e3:19:2f:f2:54:b3:14:6b:0d:1e:77:c0:9d:
         78:c0:31:b9:e4:4c:66:dc:92:49:5f:5a:c6:a5:18:11:28:7b:
         c7:06:f7:c6:56:45:0a:20:44:ca:a2:e9:cc:f5:47:cf:f3:ab:
         b9:cb:17:77:06:29:f1:aa:64:f7:82:53:09:db:9b:a1:be:85:
         39:9f:71:27:77:6e:fe:da:ef:d0:95:91:3f:f3:79:f4:7f:7b:
         74:14:37:fe:8b:92:c0:88:bc:97:5e:3f:67:f8:0b:80:17:f3:
         ec:38:7e:cf:6b:4a:f8:3a:f3:90:66:50:46:5a:16:3b:a8:a4:
         f4:00:0e:70:62:ac:4d:60:92:74:28:ac:3e:2c:ec:de:d3:11:
         91:64:95:ed:e3:5d:8c:89:79:98:99:4d:67:bf:60:47:03:2d:
         ee:25:25:9f:57:b1:f7:29:3d:33:46:92:53:52:b6:e7:65:81:
         49:f7:e4:84:41:5f:ad:a9:f3:8f:7c:87:1f:5a:c8:27:29:73:
         83:10:ac:f1:32:af:88:72:64:27:25:af:be:60:b1:43:b1:92:
         0e:55:6a:6f:29:73:28:de:60:91:fb:d6:88:82:e3:c6:fe:7d:
         81:d1:42:b2:2f:41:bc:49:6f:06:e0:ff:43:36:a1:bd:12:81:
         0d:1d:69:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:41 2025 by rpki-client