This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3484EF2DFE611F0ADB4A8B7DAE4EC9C.roa
File:                     B3484EF2DFE611F0ADB4A8B7DAE4EC9C.roa (raw, json)
Hash identifier:          I93eVtjbafGAbGbxuh4WrqyeZcJWGXN5j7RP4hnHdkQ=
Subject key identifier:   C0:F6:A8:C6:C1:8A:FE:E2:43:C9:3F:E6:BD:8F:18:BD:D4:69:07:3E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0190B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3484EF2DFE611F0ADB4A8B7DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 10:03:59 +0000
ROA not before:           Tue 23 Dec 2025 10:03:54 +0000
ROA not after:            Mon 09 Feb 2026 10:03:54 +0000
asID:                     395793
IP address blocks:        45.196.226.0/24 maxlen: 24
                          45.196.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Dec 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102581 (0x190b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 23 10:03:54 2025 GMT
            Not After : Feb  9 10:03:54 2026 GMT
        Subject: CN=694a690f-8432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6d:a6:c3:bb:e2:66:45:1d:e1:73:49:dc:62:
                    68:b5:5a:c5:d4:0b:0e:05:45:b3:eb:e5:d0:a2:33:
                    30:a8:30:77:ba:95:6d:d7:80:3c:fb:8a:fd:6a:38:
                    03:93:a5:0a:cd:2e:8d:62:05:cb:68:b2:53:51:0a:
                    d3:c8:e2:c4:8e:5b:28:b7:e6:f3:d1:c7:33:7d:10:
                    47:31:0b:27:0a:1f:f8:5d:61:b3:e1:7c:36:80:a5:
                    e4:c6:c6:d5:6a:a1:35:80:84:bf:b7:ce:d5:39:cd:
                    7f:03:c2:7e:86:e7:b7:24:c3:aa:74:35:a2:27:73:
                    32:9d:a2:8b:a8:b4:bc:da:67:4d:e9:dc:9f:81:41:
                    fe:1a:79:0a:f4:cf:71:59:9a:ae:42:2a:66:c4:dd:
                    99:ea:6f:f0:b7:67:93:ac:47:40:3b:bf:44:a8:11:
                    02:37:74:87:9f:d5:2c:5c:83:2b:cc:3f:2a:44:c1:
                    c1:ce:eb:7e:d3:75:89:ba:d3:07:01:4e:28:98:86:
                    22:4b:e3:a2:83:ba:f4:6e:45:fd:a6:19:05:1d:9b:
                    c5:94:0b:11:14:d5:6c:e4:72:e1:e5:ee:5e:c3:0f:
                    3b:57:db:d9:f6:f4:27:ea:3d:2c:ab:06:c4:85:36:
                    2b:0f:b1:5d:aa:06:3d:8c:cc:f5:00:13:a3:06:47:
                    d3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F6:A8:C6:C1:8A:FE:E2:43:C9:3F:E6:BD:8F:18:BD:D4:69:07:3E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3484EF2DFE611F0ADB4A8B7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:f1:9e:3b:bb:59:8c:21:e3:70:df:fe:3a:10:a4:c3:b5:80:
         cd:17:0e:f8:4a:4a:29:8d:27:3c:b9:d3:6d:71:51:21:ec:14:
         df:6d:b3:f2:1f:42:15:e5:93:cd:0f:2d:45:4a:d9:02:76:99:
         1c:c3:8a:35:cd:4e:c9:40:24:fb:f2:c1:2d:21:9e:93:81:c1:
         69:2a:24:da:16:d7:b9:aa:aa:9d:70:08:23:73:74:de:de:46:
         d8:2e:fc:ff:3c:9b:ba:ef:e4:5d:a2:ce:22:b4:df:33:29:eb:
         76:10:89:82:82:f5:e1:03:ac:3d:df:e5:2a:d6:a6:f9:91:f6:
         d6:be:50:51:ed:b0:de:67:96:d9:4e:fd:cd:8d:80:c3:9f:26:
         c5:99:82:cf:31:b3:4e:66:b2:22:84:57:a6:21:80:ee:76:b0:
         bb:94:db:2c:fb:a9:4a:ad:64:8b:97:64:42:97:23:fb:83:06:
         ac:98:17:b9:5c:f5:98:7e:5b:ae:9a:03:34:ae:bc:81:ac:51:
         0f:99:3f:69:5b:bb:8d:b7:09:05:ea:18:5e:5a:8e:a3:85:c2:
         64:cf:86:8c:63:5c:ab:69:39:70:21:b0:b0:78:e5:36:ae:89:
         ea:27:a2:57:18:c5:0e:8c:82:0b:19:2b:18:40:c4:42:d2:44:
         3d:10:74:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 23:25:03 2025 by rpki-client