This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE9E36EAE1A811F0A5EAC1BFDAE4EC9C.roa
File:                     BE9E36EAE1A811F0A5EAC1BFDAE4EC9C.roa (raw, json)
Hash identifier:          YW6WCeRM4FpObPELsCoi4YW5t6Z1PX7yibPKWJ5i9r4=
Subject key identifier:   0E:3E:9D:0B:6F:D9:59:B2:68:17:75:EF:A6:F6:F3:FB:E2:15:F5:08
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019214
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE9E36EAE1A811F0A5EAC1BFDAE4EC9C.roa
Signing time:             Thu 25 Dec 2025 15:45:32 +0000
ROA not before:           Thu 25 Dec 2025 15:45:27 +0000
ROA not after:            Wed 24 Jun 2026 15:45:27 +0000
asID:                     18416
IP address blocks:        45.199.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102932 (0x19214)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 25 15:45:27 2025 GMT
            Not After : Jun 24 15:45:27 2026 GMT
        Subject: CN=694d5c1c-b034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:99:46:83:47:8a:fb:3c:5c:12:e8:ed:2f:9a:
                    3f:b2:ad:d6:c4:36:7a:d5:9f:69:62:12:3c:eb:68:
                    5a:7f:b1:8c:a8:bf:33:9b:df:38:ef:3f:f7:14:41:
                    73:db:2f:b4:37:c8:65:1d:9a:a0:3b:f0:d1:73:85:
                    49:6f:29:b6:42:4e:9d:dd:ee:99:a9:ef:67:ba:65:
                    ce:d3:58:77:49:dd:41:1e:19:ed:7d:e4:e9:ea:e1:
                    74:bb:78:b4:c9:83:03:da:3b:f7:84:dc:76:b1:c7:
                    31:67:3a:19:7e:9b:0d:79:23:3d:8c:f4:2b:fc:5e:
                    16:1f:27:a0:c3:fe:01:97:2f:8b:fc:30:75:da:42:
                    be:a5:e6:90:cc:20:07:a1:9f:1e:5f:79:32:9d:85:
                    cf:7a:27:7b:b4:ba:81:4b:71:9f:36:e3:6c:a2:2a:
                    60:b2:2d:68:98:0c:6b:15:ec:c2:42:4f:b3:ef:1d:
                    82:63:4b:9f:85:17:f6:85:74:1d:b5:73:10:ba:e9:
                    9f:8d:f1:b6:b9:5b:73:80:25:46:7f:dc:1e:72:89:
                    29:61:57:59:60:4a:ac:93:64:22:fb:25:3a:2b:86:
                    12:6d:90:37:1b:5c:7c:f0:10:17:71:e5:fb:f2:52:
                    20:46:0b:06:fb:c8:d0:74:3c:dd:c2:bc:1f:db:48:
                    6c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3E:9D:0B:6F:D9:59:B2:68:17:75:EF:A6:F6:F3:FB:E2:15:F5:08
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE9E36EAE1A811F0A5EAC1BFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:df:45:61:98:97:c8:78:8c:ba:22:00:d7:ca:30:ef:a1:de:
         44:7a:ff:80:c2:5c:e5:c7:57:10:3e:3f:7b:f4:4b:2c:41:2e:
         f6:78:55:e9:e1:03:60:c1:9c:ed:70:d5:4c:22:35:fb:e5:6e:
         9d:a1:f4:5b:30:6e:2a:1e:d1:25:96:46:53:e6:1b:e9:2c:71:
         54:8c:91:1f:ae:3c:42:86:7a:17:06:84:a0:73:63:42:bf:b3:
         3e:5c:5d:17:1a:2c:70:52:63:0c:fe:38:c0:87:1e:7e:43:12:
         0e:e9:72:ed:26:12:8b:2c:a6:e5:51:e8:7c:9e:db:93:5f:10:
         34:af:f4:01:2e:b0:46:55:e8:cc:e6:b7:a4:7b:0b:b8:39:f7:
         d9:47:d0:e4:2a:ad:8a:89:61:4c:94:26:88:a5:08:0e:0b:01:
         ce:6b:72:e3:6c:d2:df:51:ea:17:69:e8:a6:6c:37:72:de:e5:
         d8:1b:0d:1c:69:99:e7:ea:ab:8c:26:c6:b4:0a:64:51:99:c3:
         fe:fd:5a:97:4b:ad:c1:ea:73:0d:f6:a9:d6:1b:55:28:f3:e7:
         a2:7c:1b:d6:84:97:f8:78:f9:5b:81:34:e5:6b:a6:34:0e:8e:
         4c:e5:b9:6c:03:bc:98:61:11:f1:79:2d:bc:94:be:40:b2:79:
         79:85:05:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:28:26 2025 by rpki-client