This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAE1BE9ED5AC11F080A7C995DAE4EC9C.roa
File:                     BAE1BE9ED5AC11F080A7C995DAE4EC9C.roa (raw, json)
Hash identifier:          /jTV8m3PI1g1BLm46n4TLpm9QaCEurlLzG93ubeumVw=
Subject key identifier:   A0:C7:84:A6:4B:3C:C0:DE:26:B8:6F:ED:1A:A5:D6:56:D3:E3:E3:0F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018D83
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAE1BE9ED5AC11F080A7C995DAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 09:43:50 +0000
ROA not before:           Wed 10 Dec 2025 09:43:44 +0000
ROA not after:            Fri 16 Jan 2026 09:43:44 +0000
asID:                     142032
IP address blocks:        45.192.96.0/20 maxlen: 24
                          45.192.96.0/21 maxlen: 24
                          45.192.96.0/22 maxlen: 24
                          45.192.100.0/22 maxlen: 24
                          45.192.104.0/21 maxlen: 24
                          45.192.104.0/22 maxlen: 24
                          45.192.108.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101763 (0x18d83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 10 09:43:44 2025 GMT
            Not After : Jan 16 09:43:44 2026 GMT
        Subject: CN=693940d6-436b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0a:db:41:82:c1:c2:52:07:20:8d:3c:80:86:
                    2b:a5:68:68:d8:a3:de:1c:3f:61:e0:12:36:21:0b:
                    ca:e8:e2:6d:87:7e:54:75:91:e9:2d:78:ca:0a:98:
                    44:28:31:16:41:49:49:69:97:47:ff:d9:a2:52:51:
                    a0:26:1f:e2:6f:be:b6:60:d9:47:ea:0c:df:35:14:
                    63:49:a1:3d:4b:08:c2:50:65:86:e3:a9:9f:37:42:
                    91:d0:be:7f:82:5e:28:f0:6f:54:18:b1:d3:0b:06:
                    f8:7d:58:ad:fd:02:ce:81:19:d2:61:88:dc:04:3e:
                    c3:53:a5:7e:0d:da:af:9a:1f:c8:ee:66:e0:cf:5d:
                    b1:af:b8:87:b7:55:1e:a0:32:17:c0:fe:82:f5:d5:
                    69:d6:c2:d0:84:07:4c:ec:7f:19:6a:84:25:bd:2b:
                    fb:dd:a9:dd:89:d9:11:55:ef:34:2a:21:ce:7c:be:
                    54:9a:e6:39:04:bf:36:12:68:fc:d1:1e:55:3a:e6:
                    51:93:a3:fb:3d:0d:9d:c0:11:ad:7a:14:f7:c8:f9:
                    7c:38:14:24:ee:dc:06:5c:a0:de:07:12:10:82:be:
                    08:9f:4a:25:04:b9:6f:fa:a6:f5:09:8b:eb:22:6c:
                    77:0c:b1:f5:c3:cf:33:57:40:9e:d7:a0:0f:f1:a1:
                    12:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C7:84:A6:4B:3C:C0:DE:26:B8:6F:ED:1A:A5:D6:56:D3:E3:E3:0F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BAE1BE9ED5AC11F080A7C995DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4f:3b:c0:68:ce:3d:03:f1:c5:ff:20:e3:4b:c4:b1:4d:e4:e9:
         d3:b6:f4:57:a2:a8:c2:97:8c:c2:3e:af:8e:a3:ac:9e:cf:3d:
         ea:7b:f1:50:48:2b:ca:f3:fa:81:12:3e:a7:85:c7:64:51:6c:
         c5:09:5c:b3:80:3b:c6:68:01:12:23:5c:47:b0:3a:ee:46:67:
         7b:d4:55:75:a7:0d:76:e4:01:eb:50:25:16:ab:81:b4:15:48:
         a7:3c:b2:35:3e:81:ec:0d:1c:01:b7:fa:da:5d:9a:71:15:02:
         f3:14:11:62:5c:bc:1d:27:ea:78:7d:95:d8:e7:75:cd:5b:ef:
         c5:07:41:38:fe:ce:c7:59:b0:61:84:9b:dc:5d:0a:61:fa:a7:
         e5:30:f9:02:85:af:40:44:da:e5:fb:0b:5c:9d:3b:06:3a:d8:
         33:10:43:27:ae:84:59:3e:43:4b:16:66:bd:88:51:bc:27:4e:
         44:92:0a:6b:8b:49:ec:30:bc:d2:98:15:fb:e9:6c:bc:37:5b:
         92:d1:4f:4e:91:f3:d5:f6:80:9d:13:5b:a1:a3:f7:be:bb:bb:
         a4:45:9c:1c:2b:2f:c9:1a:7c:0d:f3:31:66:b6:ac:74:0b:98:
         fa:9b:28:1a:8d:95:88:a1:81:c9:3d:51:9b:e4:f9:c6:28:4a:
         10:a8:c4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:34:06 2025 by rpki-client