This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE704CBEDB9211F0B3A1EB86DAE4EC9C.roa
File:                     CE704CBEDB9211F0B3A1EB86DAE4EC9C.roa (raw, json)
Hash identifier:          QXaySavLC+YGIqtBrCY3q0REurpuZ8aq7zJoBS/5U9w=
Subject key identifier:   A3:D6:5B:12:E7:D2:80:FD:66:E9:A2:7C:A4:7F:D7:0E:00:45:26:FD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018FC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE704CBEDB9211F0B3A1EB86DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 21:53:23 +0000
ROA not before:           Wed 17 Dec 2025 21:53:15 +0000
ROA not after:            Wed 24 Dec 2025 21:53:15 +0000
asID:                     214143
IP address blocks:        45.207.128.0/21 maxlen: 24
                          45.207.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102337 (0x18fc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 17 21:53:15 2025 GMT
            Not After : Dec 24 21:53:15 2025 GMT
        Subject: CN=69432653-6671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:f4:6e:ab:ba:3e:d3:c6:d3:38:a4:c0:b1:
                    50:c9:0c:8a:43:f4:e8:46:c2:75:bf:97:1f:e7:61:
                    c4:12:72:73:64:40:cf:0d:47:7a:6d:f2:01:a7:40:
                    3c:1c:13:60:e8:9c:7f:e8:d4:41:8a:08:a7:4b:cd:
                    aa:2c:13:82:1b:50:93:db:1c:83:4e:33:9f:36:3d:
                    89:4e:f2:12:ce:d8:1f:d4:c2:d6:0c:16:d5:ee:da:
                    a7:09:7b:e5:1c:1a:ac:3c:7b:74:36:ab:33:10:b1:
                    25:da:9d:c4:d2:76:bc:dc:68:47:cf:3f:ea:7f:9a:
                    54:4f:89:ca:69:d2:18:68:4a:34:8b:7a:24:6a:32:
                    a3:b5:ec:40:69:db:08:b2:43:96:63:86:de:3f:e5:
                    df:a7:5e:49:2e:14:af:fd:71:60:cf:4d:82:ce:66:
                    d9:32:e0:5f:8e:d4:a5:95:47:b2:49:e2:73:fc:c2:
                    a9:6a:22:ad:eb:a5:b3:72:4e:0e:1c:15:54:9f:7f:
                    a4:66:e0:b9:7e:84:11:ee:ee:19:1d:ba:a9:8f:83:
                    86:fa:cc:07:db:d2:07:70:5b:78:ee:b8:9f:3d:36:
                    ec:46:a4:c9:dc:4a:d5:a0:9d:a2:06:cf:c1:82:4c:
                    76:56:62:71:be:fa:76:7b:8a:93:80:98:bd:74:c1:
                    9f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D6:5B:12:E7:D2:80:FD:66:E9:A2:7C:A4:7F:D7:0E:00:45:26:FD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE704CBEDB9211F0B3A1EB86DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.128.0-45.207.137.255

    Signature Algorithm: sha256WithRSAEncryption
         1f:bf:36:76:40:07:9d:3c:c0:a1:04:22:de:b8:d4:28:e3:f5:
         21:32:cd:ba:98:22:0e:7b:e4:ce:1c:ee:a9:3f:f1:ef:e7:dc:
         fd:ca:7a:a6:1b:9b:2d:e0:1d:47:3e:9a:04:06:e3:ed:7a:7f:
         8c:40:03:8b:7c:68:d8:02:c3:fc:5e:da:4d:f4:61:22:3b:21:
         69:7a:47:f1:0b:9a:61:a9:29:66:d4:85:db:41:58:89:98:e3:
         0a:b6:f3:a7:ae:d5:60:92:6c:35:24:95:d1:4c:b4:0d:10:e2:
         d4:fa:5b:93:54:51:57:48:1c:4a:b1:53:89:d8:ac:11:e2:8b:
         42:ca:e3:f7:2c:33:da:4d:74:d9:e1:e6:f1:b6:85:2e:96:37:
         23:9c:15:a4:b9:1d:85:8a:66:d6:9c:d8:68:dc:76:63:dd:69:
         2e:e3:4b:23:39:43:b3:19:06:2c:31:60:8e:f2:21:b8:59:33:
         7d:60:37:ea:0d:0f:ad:d2:a6:73:4b:e0:ea:aa:d9:bb:14:1d:
         1d:f9:e1:f7:b7:a5:e7:c7:01:df:bf:aa:87:94:71:7f:b4:0a:
         cd:e0:55:fc:b7:3c:3d:6a:23:5d:16:ba:09:4b:73:67:77:24:
         c7:b3:ca:a7:50:b4:c3:cc:06:c9:39:c1:22:ca:87:71:6a:30:
         37:66:8e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 18:43:39 2025 by rpki-client