This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5CE30AAE0BC11F09E9C9DF6DAE4EC9C.roa
File:                     D5CE30AAE0BC11F09E9C9DF6DAE4EC9C.roa (raw, json)
Hash identifier:          r5dz8b3yuSlNoMD+Hv+7pIzeCcF2BMZP48BezNpUWnw=
Subject key identifier:   13:B6:F6:CC:8D:9C:6E:4C:1A:D5:26:EF:57:7E:52:1E:77:2F:92:65
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019168
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5CE30AAE0BC11F09E9C9DF6DAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 11:36:50 +0000
ROA not before:           Wed 24 Dec 2025 11:36:45 +0000
ROA not after:            Fri 30 Jan 2026 11:36:45 +0000
asID:                     135300
IP address blocks:        45.192.136.0/21 maxlen: 24
                          45.192.136.0/24 maxlen: 24
                          45.192.137.0/24 maxlen: 24
                          45.192.138.0/24 maxlen: 24
                          45.192.139.0/24 maxlen: 24
                          45.192.140.0/24 maxlen: 24
                          45.192.141.0/24 maxlen: 24
                          45.192.142.0/24 maxlen: 24
                          45.192.143.0/24 maxlen: 24
                          45.196.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102760 (0x19168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 24 11:36:45 2025 GMT
            Not After : Jan 30 11:36:45 2026 GMT
        Subject: CN=694bd052-0866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:50:52:f2:9a:c3:e3:a4:2c:1f:f9:ba:d5:
                    a6:01:42:29:ec:ba:ec:ad:5f:5f:05:91:c9:f2:9b:
                    8d:46:86:e9:ee:86:cb:66:ac:76:28:58:0a:35:88:
                    cc:45:8b:7b:3c:7e:ce:fa:56:cf:42:ff:b4:6a:46:
                    18:a3:d6:25:8b:4f:3f:a8:dd:51:9b:b4:34:4b:fe:
                    fd:b8:a0:58:3f:47:9e:4f:93:f3:3b:2a:d5:4f:e0:
                    12:88:00:a8:54:c2:a4:89:31:b0:39:5f:5b:82:57:
                    87:bc:5e:41:f9:b9:f8:7a:d2:6a:db:23:f8:a1:87:
                    12:3d:23:87:e8:9d:ae:f9:63:4f:88:a9:2c:21:7a:
                    fa:56:d9:6a:7e:1d:1c:1b:d3:56:d6:4f:50:c4:b0:
                    1b:b4:f6:0f:33:d8:6f:0c:84:25:d8:37:67:54:44:
                    9d:20:14:2f:6f:3a:7b:55:35:69:2f:ad:c5:20:b6:
                    ea:b6:21:5e:c3:0f:ff:19:ad:e5:bf:4b:11:53:8a:
                    b9:b7:a8:0e:34:a9:ee:f0:7e:b0:35:07:a0:76:ed:
                    26:0f:11:36:82:1a:db:c4:16:1e:0f:5a:31:3d:ce:
                    61:d9:53:eb:cd:29:af:5e:1e:74:17:20:c8:b7:72:
                    65:3e:5f:5c:48:d3:9c:b7:4f:f9:7b:a5:5a:f5:0c:
                    85:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B6:F6:CC:8D:9C:6E:4C:1A:D5:26:EF:57:7E:52:1E:77:2F:92:65
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5CE30AAE0BC11F09E9C9DF6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.136.0/21
                  45.196.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:63:70:7a:95:9b:b9:52:e3:0d:31:8f:45:71:02:8d:fe:68:
         e7:21:98:85:ed:86:c6:63:70:f5:5f:1e:ee:ca:8c:00:b3:ac:
         47:b3:23:72:30:6e:18:80:d4:7e:29:eb:1a:ee:b9:85:0d:f9:
         12:4a:3b:c3:54:5b:21:1f:20:c2:d0:aa:78:04:a6:b1:51:22:
         cd:0c:66:88:29:ae:12:ae:a6:8c:e1:14:c0:25:4a:26:a8:50:
         96:40:98:85:5d:63:4f:95:4f:a4:42:7d:0d:9f:83:39:83:44:
         5b:22:3f:00:41:af:15:da:c4:79:cb:ed:66:9b:d0:4c:a6:84:
         a5:a7:85:05:26:d7:99:97:a7:1a:c0:3b:7f:81:88:96:41:c8:
         43:b6:24:ab:15:03:7d:cb:19:54:ed:94:7c:43:72:f2:1f:ef:
         fa:c5:2b:68:ce:da:c4:01:6e:81:6b:be:62:a5:f1:da:5e:0a:
         f4:d7:8c:26:e4:55:a4:76:97:60:f4:ca:e3:8a:b2:a9:52:33:
         93:ee:17:93:71:c1:60:99:f1:fd:93:43:77:db:f2:e0:12:24:
         92:b4:fa:0a:4b:19:ab:89:f4:ee:e9:c0:10:9b:01:3f:50:02:
         41:a2:32:bc:16:81:ae:dd:5a:b1:78:66:9d:b3:13:25:21:30:
         38:56:3d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:36 2025 by rpki-client