This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C89CC3F4E0F511F0A82A73D7DAE4EC9C.roa
File:                     C89CC3F4E0F511F0A82A73D7DAE4EC9C.roa (raw, json)
Hash identifier:          bsCy5ju0Be2uoTsCKvmIAKFXQnnHcjETpeTjCWHl2Ls=
Subject key identifier:   8C:F8:30:F9:C1:F9:2B:0C:6D:67:5C:2D:A2:9E:F0:60:38:D2:9D:A5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0191E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C89CC3F4E0F511F0A82A73D7DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 18:24:29 +0000
ROA not before:           Wed 24 Dec 2025 18:24:24 +0000
ROA not after:            Sun 24 Jan 2027 18:24:24 +0000
asID:                     140224
IP address blocks:        45.196.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102882 (0x191e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 24 18:24:24 2025 GMT
            Not After : Jan 24 18:24:24 2027 GMT
        Subject: CN=694c2fdd-87da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9c:b8:a7:cc:05:07:1d:8c:a1:fc:c8:d5:5f:
                    aa:be:85:a9:c5:dc:0d:bd:6d:9a:6b:5c:de:46:21:
                    aa:c3:5b:9f:d4:d5:90:c8:e4:16:04:2e:98:4f:36:
                    ef:c1:34:49:38:e4:9c:56:b2:19:16:24:5a:86:a8:
                    b6:3c:cc:23:76:42:66:2a:64:4c:08:9e:20:0d:1d:
                    bc:6d:30:47:76:4c:2c:76:95:82:07:b3:6a:c1:cc:
                    15:90:57:eb:88:d2:29:99:4f:86:41:a4:29:a6:d4:
                    e9:63:20:36:8e:0d:da:5e:88:01:1f:87:bb:e1:52:
                    89:ad:ef:7e:d8:37:cd:c1:b2:47:44:77:fc:47:bf:
                    f0:92:c7:a5:f0:ee:34:c8:fa:19:f2:a4:f9:6e:9d:
                    c7:b9:dc:d3:bf:50:b1:e5:ff:b6:f1:d6:09:0a:30:
                    77:b2:35:ff:03:8c:b9:60:60:e6:39:9c:f7:23:31:
                    e3:e6:82:78:0e:65:3c:bd:f0:7c:0f:26:c0:57:a3:
                    6d:b0:2c:ad:63:e8:4e:5c:7c:10:bb:61:4d:dd:a7:
                    a9:e1:cb:80:db:9b:fd:a8:74:0f:a0:09:4e:b5:8f:
                    eb:a0:0d:12:ca:72:41:69:8f:1d:a1:e3:d5:bc:8e:
                    b4:94:bf:e3:8f:42:ee:56:6a:1f:68:74:a5:fb:97:
                    5a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F8:30:F9:C1:F9:2B:0C:6D:67:5C:2D:A2:9E:F0:60:38:D2:9D:A5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C89CC3F4E0F511F0A82A73D7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:53:59:dc:b1:4c:ea:e4:5b:41:f9:52:89:a0:66:16:9f:d9:
         a0:6f:fa:06:24:13:98:86:32:39:76:6d:86:52:5c:f5:25:4e:
         bc:3d:be:05:5f:d3:36:61:ad:bd:70:0f:e1:89:42:80:fb:71:
         db:74:50:0f:d3:83:73:f6:15:9e:b3:8b:fa:c8:1b:81:09:00:
         3c:e7:17:41:d3:9e:30:64:58:ab:22:c5:d3:89:96:6f:4d:a6:
         6a:a5:90:ec:e7:fd:d3:4b:22:7f:d0:d8:e6:10:34:81:37:2f:
         97:4a:47:d8:22:fa:a0:40:33:27:6b:44:af:20:34:02:81:2f:
         d6:16:98:23:f6:33:94:e6:ac:12:25:16:d1:08:3c:8f:cc:75:
         e4:e5:5a:77:4b:ce:ad:95:49:e0:6c:b7:44:8b:88:79:77:1c:
         b7:45:95:6b:b3:0e:a5:a4:e5:48:03:85:49:ae:82:00:d9:32:
         96:96:24:ce:03:0d:4f:35:ba:87:55:95:e2:36:94:22:0e:ac:
         02:4a:81:25:0e:ed:c7:71:15:3e:01:e2:5e:9c:b8:f0:6c:62:
         43:6e:14:d6:0a:b7:96:cd:41:c9:83:5b:7d:82:32:4b:df:7b:
         bd:ed:95:94:52:d2:7f:29:b8:04:2b:a5:5c:80:36:e1:84:3a:
         9d:c9:8d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:00 2025 by rpki-client