This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B879A08AE17E11F0AEF05FBEDAE4EC9C.roa
File:                     B879A08AE17E11F0AEF05FBEDAE4EC9C.roa (raw, json)
Hash identifier:          Ju80hUhsdR/ANt/OuPLKua4VHXVG9Ur+79gnjAA6W3w=
Subject key identifier:   3A:9F:4C:CC:01:67:C3:69:FE:88:51:AF:A3:AE:E1:C5:50:AD:06:7E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01920E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B879A08AE17E11F0AEF05FBEDAE4EC9C.roa
Signing time:             Thu 25 Dec 2025 10:44:43 +0000
ROA not before:           Thu 25 Dec 2025 10:44:37 +0000
ROA not after:            Sat 07 Feb 2026 10:44:37 +0000
asID:                     214049
IP address blocks:        45.194.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102926 (0x1920e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 25 10:44:37 2025 GMT
            Not After : Feb  7 10:44:37 2026 GMT
        Subject: CN=694d159b-8bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:98:81:cd:5a:3f:5e:b6:e3:64:e8:e7:a0:
                    da:b5:94:e2:a6:86:e0:1b:44:90:f9:6d:a1:0d:4d:
                    af:2d:9c:55:1d:77:36:07:e4:a2:80:f3:5a:41:7f:
                    1f:c8:4a:ec:2d:25:50:08:54:e9:f7:aa:00:2c:4e:
                    96:3c:43:cf:d0:04:cf:22:55:7c:f3:07:e4:df:ff:
                    6f:8b:37:6c:ab:17:6a:87:6d:2c:1a:5d:d6:84:b1:
                    d1:8f:47:ab:3b:d8:ee:cf:43:d9:d9:dc:38:bd:31:
                    44:f6:57:fa:33:24:84:1a:fb:63:3e:d7:7d:bd:c5:
                    54:18:49:1b:0d:b9:3c:40:0f:b1:ad:ff:5e:5a:53:
                    c2:65:d4:4a:49:29:e5:01:43:e9:03:f3:c9:12:13:
                    ee:a9:59:e0:0b:dd:75:fd:6e:23:3e:ff:dd:56:00:
                    0b:a2:05:44:4e:7e:f8:9e:3e:f6:98:cd:77:7e:bf:
                    73:a2:cc:84:26:8c:40:19:7f:e2:c7:f9:12:91:6e:
                    93:87:a4:0c:bd:4b:d4:c8:2a:f9:8b:36:cf:0f:8b:
                    2b:6d:58:73:b6:4a:00:fd:74:66:01:cd:f3:94:b5:
                    e8:9f:d6:b2:c1:2c:62:dd:78:8f:8a:2f:a8:4e:37:
                    0c:78:ec:e2:e1:dc:2f:64:ee:b2:72:ee:0e:06:b1:
                    3d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9F:4C:CC:01:67:C3:69:FE:88:51:AF:A3:AE:E1:C5:50:AD:06:7E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B879A08AE17E11F0AEF05FBEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:45:61:02:cb:52:69:88:94:27:f8:87:30:10:a0:d7:58:33:
         e4:fd:b2:9f:a2:77:fc:2d:6a:eb:d0:43:a5:d6:29:05:6d:1f:
         82:58:7b:bc:d1:01:cf:a9:54:1a:a8:7d:8e:25:40:fb:f6:01:
         c8:64:5c:ce:59:a7:8a:8c:8a:79:49:af:4e:28:a8:dd:d9:35:
         24:a5:a6:98:c0:07:0e:19:25:d1:fe:51:7d:fc:e2:e9:e7:c0:
         11:0d:c5:9c:5c:1b:17:50:74:bf:d9:c8:05:73:03:1b:fc:b2:
         f1:b4:fa:64:85:5f:ea:c5:3f:50:a0:e9:82:64:24:9a:a5:23:
         ca:6c:e6:3d:57:aa:94:a9:dc:6b:f8:ca:16:b3:07:50:22:59:
         24:17:98:df:a0:28:49:cd:bd:bd:c6:2f:67:b8:2a:d3:bc:12:
         b4:9e:2f:e6:c1:10:5a:1b:60:18:c2:76:32:e6:f8:90:8b:9d:
         e4:37:c4:b3:aa:fc:9d:f3:c8:fe:7c:18:af:e8:42:a7:b6:4c:
         56:d2:99:04:c5:d8:c8:6a:24:8f:9f:46:88:8c:7a:8d:0a:5e:
         a8:e8:e6:eb:1c:89:01:d3:50:02:74:28:54:85:a9:e5:59:2c:
         f8:af:bd:41:19:2b:91:36:80:12:04:0d:cb:25:47:23:b4:30:
         02:22:2f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:28:33 2025 by rpki-client