This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEDB916CD74E11F0A38096CDDAE4EC9C.roa
File:                     AEDB916CD74E11F0A38096CDDAE4EC9C.roa (raw, json)
Hash identifier:          Rq18wmvorj+/IG3hRZd4yw3QaXeHyLT8gJRdsb3/y3Q=
Subject key identifier:   57:3E:35:EA:C2:8C:60:44:B2:A0:F5:02:A7:4A:0B:38:1F:17:30:6F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018DF6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEDB916CD74E11F0A38096CDDAE4EC9C.roa
Signing time:             Fri 12 Dec 2025 11:35:39 +0000
ROA not before:           Fri 12 Dec 2025 11:35:35 +0000
ROA not after:            Sat 17 Jan 2026 11:35:35 +0000
asID:                     394432
IP address blocks:        45.200.192.0/18 maxlen: 24
                          45.200.192.0/19 maxlen: 24
                          45.200.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101878 (0x18df6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 12 11:35:35 2025 GMT
            Not After : Jan 17 11:35:35 2026 GMT
        Subject: CN=693bfe0b-b328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:8d:56:2d:c0:88:ad:c9:9e:d6:5e:b7:3a:
                    1b:a7:aa:b1:29:ec:ef:19:dc:ac:16:51:30:af:ec:
                    88:99:eb:b0:45:3e:1d:e5:65:01:1f:d3:b7:8d:c3:
                    7b:cc:e2:10:91:6f:fa:df:83:52:07:37:48:96:33:
                    0a:3d:ff:21:7d:0a:ff:5a:cb:63:3f:5b:e6:09:98:
                    ed:f7:c5:df:31:76:cc:9b:0f:ed:a2:1e:91:05:89:
                    b0:d7:73:ce:cd:44:40:ad:62:61:b7:6a:be:a3:d4:
                    0a:2d:72:f3:ee:c8:af:29:df:22:7d:dd:cf:4a:8c:
                    61:bb:80:f4:8d:02:b0:96:12:ec:6a:12:11:07:cb:
                    3a:77:cd:14:fd:ff:b3:4f:5f:2e:42:a8:e3:81:ee:
                    08:3a:59:64:c1:71:60:a0:95:ee:a8:01:28:46:2c:
                    ba:b1:d2:c1:2c:7b:73:ae:d3:23:16:2c:54:2b:42:
                    df:03:7f:9d:2d:8e:3d:9a:8a:28:9a:dd:eb:b7:0a:
                    09:72:df:3f:3b:17:00:1a:24:d2:d2:eb:4e:c9:1d:
                    dc:6a:fa:aa:1f:4b:dc:bd:29:ba:25:02:bd:81:a2:
                    e7:b6:db:d5:22:fe:34:30:78:43:bf:73:e8:0a:09:
                    c9:37:25:05:19:15:70:af:e0:7c:b9:7f:9e:8d:44:
                    08:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3E:35:EA:C2:8C:60:44:B2:A0:F5:02:A7:4A:0B:38:1F:17:30:6F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AEDB916CD74E11F0A38096CDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3d:59:d7:dd:93:8d:dd:b6:86:25:09:91:c9:85:13:b0:bf:fd:
         9a:2a:ac:19:0e:dd:2d:e8:74:ed:ef:1c:57:6c:7a:86:43:8f:
         a3:8b:8c:a5:3f:b1:3c:41:ae:3e:b2:34:61:2a:94:6c:c4:fb:
         27:b2:9b:64:b6:7d:12:f4:8c:f6:77:ba:ae:3b:fc:65:f7:a4:
         56:33:aa:a5:7c:33:c1:9d:1d:d1:bd:f4:a8:55:39:44:db:84:
         b3:c2:4b:87:10:52:ca:0e:26:a5:b8:60:25:9c:4f:76:a4:48:
         70:25:aa:9b:d8:c1:f1:ee:74:be:1e:fb:af:52:19:4f:5f:fe:
         89:26:c0:aa:82:77:08:07:c7:4c:d6:74:33:00:e6:ee:95:10:
         d5:2c:92:e8:f6:09:5a:14:e7:69:68:fc:56:fe:b9:35:39:5f:
         3c:2f:cb:9d:62:97:d2:ce:d4:59:26:dd:1d:ea:e1:42:4e:c1:
         ef:15:1f:de:58:01:87:5a:84:d2:ca:92:59:67:cc:19:e8:9b:
         dd:34:25:af:f6:2d:02:86:47:98:70:2b:3a:0f:cc:d5:cc:3f:
         fc:53:c1:9c:01:a9:7c:5a:eb:eb:94:f4:17:ea:5c:79:b7:a4:
         37:97:bb:60:8c:c3:db:ff:fb:a6:87:ee:5e:fe:83:08:a6:6a:
         2b:3b:74:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:34:04 2025 by rpki-client