This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFAE9FE4E0E411F0A079DEEDDAE4EC9C.roa
File:                     BFAE9FE4E0E411F0A079DEEDDAE4EC9C.roa (raw, json)
Hash identifier:          OsUIZM2SQvZM8tIiPfsY1/3kK6l73217jzC9B2kjBso=
Subject key identifier:   7C:56:28:36:08:0B:E4:3C:92:D5:0E:E9:D4:F3:EC:5D:C9:6A:08:7A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0191C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFAE9FE4E0E411F0A079DEEDDAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 16:22:32 +0000
ROA not before:           Wed 24 Dec 2025 16:22:27 +0000
ROA not after:            Sat 31 Jan 2026 16:22:27 +0000
asID:                     44559
IP address blocks:        45.196.122.0/24 maxlen: 24
                          45.196.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102852 (0x191c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 24 16:22:27 2025 GMT
            Not After : Jan 31 16:22:27 2026 GMT
        Subject: CN=694c1348-d557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3d:4f:89:7d:99:c2:a8:79:5c:9d:fb:6f:4c:
                    32:f2:e8:7e:b3:78:08:8f:26:8a:b4:fe:d6:61:fe:
                    e9:ec:c0:e9:2b:fa:83:0b:c6:e5:ce:f8:83:8f:4e:
                    8a:4c:dd:dc:96:d5:7f:1f:27:38:74:20:67:47:c8:
                    11:51:e3:82:c0:e4:fd:50:d2:5c:de:f9:1b:37:10:
                    ee:a8:37:b5:b5:f0:dd:18:82:c2:fd:72:46:db:51:
                    c6:90:44:e5:ec:19:6a:ce:34:f4:53:17:6b:a0:0b:
                    21:2a:da:6e:43:4a:2e:02:b3:99:b8:9e:04:94:9a:
                    f1:6d:5d:cb:c0:0e:84:c4:9b:30:27:2b:91:12:86:
                    07:bb:ea:5a:b5:c1:19:ba:7b:b5:f1:2e:cb:bd:71:
                    3d:37:ce:f5:70:c4:9e:6e:e6:ef:65:c2:28:7c:26:
                    06:93:e3:72:3f:8e:d7:9f:6e:36:e9:c9:77:12:b1:
                    c9:27:12:53:39:47:a6:60:53:57:8c:f3:69:a8:8c:
                    2b:08:a7:ec:a0:36:61:5a:08:c7:bd:77:42:68:fa:
                    27:5d:bf:8e:3c:5e:59:87:2d:d2:8b:df:86:f3:46:
                    d2:a0:2c:d7:89:20:7e:f9:df:85:9a:cf:37:db:f1:
                    3d:6c:72:fc:fa:30:5a:43:a4:17:6a:a0:f5:81:65:
                    e1:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:56:28:36:08:0B:E4:3C:92:D5:0E:E9:D4:F3:EC:5D:C9:6A:08:7A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFAE9FE4E0E411F0A079DEEDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:7c:ab:da:a9:86:fb:93:83:f0:97:3a:0b:0a:f1:d3:88:b1:
         d1:18:14:1d:ad:ec:0a:5f:95:2b:75:0e:d6:45:26:fb:51:90:
         bf:86:9f:1e:a0:40:4b:ea:3d:a7:84:49:3b:2b:9a:6e:7b:f0:
         75:71:e3:49:d2:02:f9:a0:70:e9:b2:d2:f6:8a:a6:2d:79:a8:
         7d:80:52:ea:c8:0c:9a:8c:42:ec:d5:4b:89:82:f6:69:ea:04:
         6d:c3:63:62:f9:59:f3:89:40:49:9d:1e:78:05:1c:46:8e:e0:
         9d:b4:93:fa:82:67:81:39:1c:77:90:53:b9:dc:74:3d:be:f0:
         f5:d0:df:dc:e6:0b:d1:68:41:d4:8c:c8:da:b0:ac:cb:20:95:
         b2:3f:d7:48:30:41:99:bc:85:0c:c3:80:f9:c9:fc:a7:5c:59:
         22:e4:d6:f5:86:d2:36:19:f3:87:e4:7e:32:89:b8:2a:6d:9e:
         c1:bc:d0:09:8a:64:23:86:83:6f:9b:f4:99:e3:bb:2d:fc:28:
         a1:e9:36:65:86:b1:b7:68:9f:36:3c:a3:dd:1b:ed:be:7d:5e:
         63:1c:98:ac:b0:76:be:84:30:34:50:a4:ae:f5:59:bb:fc:96:
         26:98:8c:38:6f:4a:07:42:04:e6:f7:77:57:ba:38:68:5f:03:
         35:31:80:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:28:24 2025 by rpki-client