This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCE9DDE6D73711F0A897CBC2DAE4EC9C.roa
File:                     DCE9DDE6D73711F0A897CBC2DAE4EC9C.roa (raw, json)
Hash identifier:          y7vPrf3gHYc6qtth1xCURALBCdyxiwaZdgiQ7aJdkf0=
Subject key identifier:   D3:ED:F9:EC:AD:D7:DB:59:63:02:0E:18:D0:6B:67:ED:AC:13:C8:CF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018DEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCE9DDE6D73711F0A897CBC2DAE4EC9C.roa
Signing time:             Fri 12 Dec 2025 08:52:18 +0000
ROA not before:           Fri 12 Dec 2025 08:52:13 +0000
ROA not after:            Thu 22 Jan 2026 08:52:13 +0000
asID:                     273986
IP address blocks:        45.194.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101866 (0x18dea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 12 08:52:13 2025 GMT
            Not After : Jan 22 08:52:13 2026 GMT
        Subject: CN=693bd7c2-0051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:c5:71:22:ee:8c:d8:96:8d:43:38:e0:03:
                    b4:21:3d:3c:9f:0c:72:fa:fe:b2:e1:aa:f5:64:09:
                    96:71:2a:4e:84:34:ab:ff:d1:af:71:f1:7a:ac:20:
                    05:92:a8:19:5e:b6:9b:53:b4:9b:50:25:bd:9e:1e:
                    97:6b:98:20:c5:36:38:8a:3c:9e:7f:7f:28:1e:84:
                    26:fd:c0:db:fd:d7:5c:9a:76:ef:5e:c1:33:91:c5:
                    04:d6:8d:6b:ff:21:aa:74:40:1d:ef:16:35:1f:41:
                    61:09:cd:c2:44:d4:00:02:3d:2f:d8:1b:8c:47:6f:
                    9a:33:42:cb:31:4b:11:17:ff:60:49:94:26:1f:bb:
                    4e:9d:fc:68:cb:90:fc:9e:86:f5:70:b7:e7:97:81:
                    df:5d:00:a8:91:f0:7a:c8:b1:10:0b:a3:f3:e8:32:
                    f5:f3:07:02:91:3d:d1:c1:d9:98:44:8e:7f:57:a0:
                    72:59:e4:58:b8:eb:b0:de:3b:3a:23:a3:5c:0c:23:
                    9c:5c:89:2b:82:40:bb:15:64:10:be:40:67:5d:07:
                    5d:78:d1:a8:a2:30:6c:32:90:35:d2:90:eb:f6:2a:
                    5e:0e:d3:73:4f:19:3e:d9:e8:ea:0d:16:4c:28:57:
                    36:68:2a:7f:11:b4:27:dc:1f:8a:41:5e:e5:ad:dd:
                    79:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:ED:F9:EC:AD:D7:DB:59:63:02:0E:18:D0:6B:67:ED:AC:13:C8:CF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DCE9DDE6D73711F0A897CBC2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:22:78:f3:97:2d:f5:b4:8a:bf:97:c3:f5:cc:91:2e:ce:9e:
         44:d5:71:5e:85:2b:96:94:57:9c:c2:55:3e:c2:ec:ac:96:ec:
         5a:0a:b6:6b:61:78:4c:2d:1e:b9:6b:4f:bf:dc:21:b4:59:cc:
         10:4c:4c:fb:b5:61:40:4c:7f:76:d6:15:fd:fb:b1:30:b8:1e:
         dc:7a:5d:25:ae:49:67:7f:a5:9a:df:d2:78:93:9c:88:1e:49:
         08:ab:93:e4:47:23:27:01:fb:94:10:4a:9d:ef:fd:8f:e3:cc:
         f9:0c:ed:d3:18:5c:00:72:35:1d:ba:45:6b:6f:27:a1:4f:53:
         38:0c:9c:9b:a7:9c:17:5c:ee:a4:c0:c1:71:ea:96:ac:cc:e2:
         4a:b5:6c:21:18:d5:6b:21:69:cd:2a:57:76:c2:1e:e1:40:a1:
         3f:99:33:7b:c8:33:06:0f:79:26:be:93:d1:ed:6e:cc:75:5c:
         9f:cd:5d:b5:f0:b1:50:68:31:f4:04:fc:a9:f9:1f:c3:04:11:
         e0:47:21:df:9b:7a:73:a6:35:90:9d:30:35:08:51:b0:b9:fd:
         df:ed:24:51:0c:ac:32:20:c0:a0:02:55:57:ed:37:c5:9d:90:
         18:3b:6d:92:24:81:78:fe:21:bd:2a:ae:85:62:2b:ba:5c:7b:
         11:81:b5:f4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAY3qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjEyMDg1MjEzWhcNMjYwMTIyMDg1MjEzWjAYMRYw
FAYDVQQDEw02OTNiZDdjMi0wMDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxFrFcSLujNiWjUM44AO0IT08nwxy+v6y4ar1ZAmWcSpOhDSr/9GvcfF6
rCAFkqgZXrabU7SbUCW9nh6Xa5ggxTY4ijyef38oHoQm/cDb/ddcmnbvXsEzkcUE
1o1r/yGqdEAd7xY1H0FhCc3CRNQAAj0v2BuMR2+aM0LLMUsRF/9gSZQmH7tOnfxo
y5D8nob1cLfnl4HfXQCokfB6yLEQC6Pz6DL18wcCkT3RwdmYRI5/V6ByWeRYuOuw
3js6I6NcDCOcXIkrgkC7FWQQvkBnXQddeNGoojBsMpA10pDr9ipeDtNzTxk+2ejq
DRZMKFc2aCp/EbQn3B+KQV7lrd15wwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFNPt
+eyt19tZYwIOGNBrZ+2sE8jPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EQ0U5RERFNkQ3MzcxMUYwQTg5N0NCQzJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcJ3MA0GCSqGSIb3DQEBCwUA
A4IBAQCQInjzly31tIq/l8P1zJEuzp5E1XFehSuWlFecwlU+wuysluxaCrZrYXhM
LR65a0+/3CG0WcwQTEz7tWFATH921hX9+7EwuB7cel0lrklnf6Wa39J4k5yIHkkI
q5PkRyMnAfuUEEqd7/2P48z5DO3TGFwAcjUdukVrbyehT1M4DJybp5wXXO6kwMFx
6paszOJKtWwhGNVrIWnNKld2wh7hQKE/mTN7yDMGD3kmvpPR7W7MdVyfzV218LFQ
aDH0BPyp+R/DBBHgRyHfm3pzpjWQnTA1CFGwuf3f7SRRDKwyIMCgAlVX7TfFnZAY
O22SJIF4/iG9Kq6FYiu6XHsRgbX0
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:34:11 2025 by rpki-client