This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D94D4C46E05011F08819E4C3DAE4EC9C.roa
File:                     D94D4C46E05011F08819E4C3DAE4EC9C.roa (raw, json)
Hash identifier:          Rf2HBIAftInmOsOJEJYUgDTtPzdVVZZAkuLS6CG9bas=
Subject key identifier:   00:D4:17:74:2E:DD:D5:E8:F8:87:FE:88:ED:70:89:BE:D0:74:9F:90
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019135
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D94D4C46E05011F08819E4C3DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 22:43:51 +0000
ROA not before:           Tue 23 Dec 2025 22:43:45 +0000
ROA not after:            Thu 29 Jan 2026 22:43:45 +0000
asID:                     214143
IP address blocks:        45.197.135.0/24 maxlen: 24
                          45.198.69.0/24 maxlen: 24
                          45.198.75.0/24 maxlen: 24
                          45.198.81.0/24 maxlen: 24
                          45.198.84.0/24 maxlen: 24
                          45.198.86.0/24 maxlen: 24
                          45.198.89.0/24 maxlen: 24
                          45.198.90.0/24 maxlen: 24
                          45.198.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102709 (0x19135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 23 22:43:45 2025 GMT
            Not After : Jan 29 22:43:45 2026 GMT
        Subject: CN=694b1b27-3e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ae:1f:47:fa:f7:89:24:85:33:dc:df:9f:94:
                    b0:38:c9:ee:05:42:27:2e:41:49:e3:70:45:b3:ef:
                    20:d5:9a:a6:80:77:60:24:ef:72:1b:ec:74:2a:aa:
                    3f:99:4c:04:f9:78:f4:2a:ec:bd:a2:5e:e4:eb:8d:
                    0a:49:de:3a:36:b4:98:91:e2:10:11:ea:38:49:e0:
                    93:dc:9b:af:2a:d4:be:6a:b1:97:97:7a:0a:e7:6e:
                    84:d6:7b:bd:f0:b6:18:09:1c:f8:1f:b5:01:c4:e9:
                    01:34:b7:04:94:87:62:36:bf:94:9b:c9:4d:73:4b:
                    15:2b:9f:75:e8:66:57:d5:9a:25:f6:9d:5f:03:a5:
                    9d:75:ed:4e:f2:3d:36:e1:36:58:a1:49:12:c0:bf:
                    92:d8:5b:9f:ef:c7:89:df:72:98:39:06:04:13:64:
                    35:09:98:42:56:74:6e:28:40:d8:d3:0d:a5:e5:8e:
                    e9:76:0e:57:8b:b5:aa:2f:96:81:da:eb:44:21:3b:
                    d3:ce:bf:66:e2:f3:a4:2d:81:33:8f:4d:b9:73:a7:
                    e9:2e:01:c7:d1:58:68:a6:28:38:8b:49:15:51:6d:
                    17:71:c7:c6:b3:c5:88:49:68:04:4b:a0:bf:b7:44:
                    e6:d5:0c:e5:fa:4e:d5:59:36:73:5a:7c:3e:a7:87:
                    91:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D4:17:74:2E:DD:D5:E8:F8:87:FE:88:ED:70:89:BE:D0:74:9F:90
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D94D4C46E05011F08819E4C3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.135.0/24
                  45.198.69.0/24
                  45.198.75.0/24
                  45.198.81.0/24
                  45.198.84.0/24
                  45.198.86.0/24
                  45.198.89.0-45.198.90.255
                  45.198.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:f1:2a:26:5e:e1:ca:50:82:a1:19:b4:86:a3:7e:5d:c6:48:
         b7:ca:a3:e3:53:1a:81:ca:50:0d:e9:38:4c:e4:d5:0f:78:86:
         00:4c:56:7e:b7:1f:39:c9:35:b3:8f:98:2d:15:e4:b9:a5:80:
         8d:5c:91:bf:d1:97:a8:01:f0:87:dd:22:cf:cf:98:60:d3:b5:
         0b:d0:ad:62:32:19:7a:5d:2d:33:51:95:1b:0a:3c:cc:cb:6d:
         a4:39:c7:df:42:96:7c:3c:4f:ef:cd:9f:5d:5a:d9:b3:ed:80:
         8b:7d:69:eb:83:a2:cf:a3:70:c0:ff:77:2f:48:a8:06:07:34:
         63:3f:86:2f:d0:b0:90:8f:6e:5f:27:b5:e7:e9:64:e8:c9:29:
         5f:73:20:34:de:d8:72:b6:63:03:da:38:0d:cd:78:4c:1c:8e:
         c0:8a:ce:c9:6d:9a:5a:63:37:11:73:0e:17:77:c5:f1:e6:35:
         7b:bc:81:93:27:d7:7a:0d:62:60:30:43:13:ea:b2:3c:31:8a:
         9f:3a:64:eb:b0:5d:d3:76:e4:e2:1c:2c:81:e9:d2:d1:f5:61:
         67:02:e8:71:a6:91:a2:dd:df:05:58:cb:be:fd:34:19:86:1e:
         97:12:7b:f5:7e:25:5b:ac:64:f9:87:21:02:c8:68:b1:06:d8:
         22:ca:4f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:28:28 2025 by rpki-client