This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDA3C700D74B11F0BE16EABCDAE4EC9C.roa
File:                     EDA3C700D74B11F0BE16EABCDAE4EC9C.roa (raw, json)
Hash identifier:          Yhe3EqVm2QHa6hMDAPiN6N0YUKqQlfhNhsNYMpjcza0=
Subject key identifier:   26:7A:AF:B3:05:DC:6E:52:C8:5B:F4:93:95:BD:7B:BE:87:0B:D6:2F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018DEC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDA3C700D74B11F0BE16EABCDAE4EC9C.roa
Signing time:             Fri 12 Dec 2025 11:15:57 +0000
ROA not before:           Fri 12 Dec 2025 11:15:50 +0000
ROA not after:            Sat 17 Jan 2026 11:15:50 +0000
asID:                     398823
IP address blocks:        45.200.192.0/18 maxlen: 24
                          45.200.192.0/19 maxlen: 24
                          45.200.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 21 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101868 (0x18dec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 12 11:15:50 2025 GMT
            Not After : Jan 17 11:15:50 2026 GMT
        Subject: CN=693bf96d-7ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:b6:76:2a:54:97:35:3c:7c:83:ea:4f:5e:
                    fe:15:3f:be:d2:0f:2d:0c:ac:89:65:19:d8:84:6a:
                    e5:1f:35:69:dd:35:b1:33:97:d6:5b:ee:2f:01:e2:
                    51:69:2f:6d:5a:f9:4b:87:d6:5e:12:5a:fd:0f:1d:
                    6f:ab:1e:eb:19:b9:75:3b:56:98:98:6f:41:76:df:
                    ee:0f:e1:f6:70:d2:9a:9f:dd:31:0e:8c:94:9c:84:
                    82:04:9f:99:5a:37:83:43:0d:df:00:e5:99:15:78:
                    1b:d8:da:19:f3:a6:0d:27:a8:97:b2:59:15:21:e9:
                    f5:9d:2c:91:e3:4d:bf:39:01:8a:07:5a:d3:26:6f:
                    b5:45:f8:4c:e3:63:dc:fe:e6:43:1d:ea:e9:d2:7b:
                    3e:6a:4a:24:68:88:2e:8b:fb:27:7b:ab:67:52:b7:
                    95:44:95:c7:0c:5c:87:27:7c:c0:50:df:2e:27:81:
                    7f:3e:6e:ba:e5:97:24:b5:3a:a8:e7:d2:ae:f2:92:
                    99:d1:c2:16:db:ab:c9:89:40:fc:14:6c:cb:98:4e:
                    ce:3d:6d:b0:d1:b2:54:cf:9b:74:20:e7:97:88:b0:
                    c8:ff:54:b5:25:47:16:e0:50:f8:9c:55:20:53:69:
                    2c:c1:9b:bc:6b:5d:7d:01:ce:5d:70:e6:c8:ca:ab:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:7A:AF:B3:05:DC:6E:52:C8:5B:F4:93:95:BD:7B:BE:87:0B:D6:2F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDA3C700D74B11F0BE16EABCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         46:63:df:a3:31:b1:33:07:3d:ef:c9:97:67:7b:82:00:64:bb:
         82:80:00:a1:c3:98:2b:63:3d:3a:d0:dd:04:11:7d:81:02:9c:
         c5:ca:5c:4c:c9:7e:71:e2:5f:69:04:44:05:2f:06:27:dd:53:
         2c:b7:bf:10:bf:64:a0:d1:fc:5d:0c:a0:23:40:c5:10:f5:6a:
         b0:56:54:86:68:33:34:a8:c8:09:38:a2:4d:66:31:52:2d:46:
         66:9c:72:d4:c0:df:aa:ec:ef:01:ac:a5:8c:95:8f:2d:58:f2:
         d1:d4:39:1d:b9:cc:0f:76:1e:90:5a:5e:95:74:ca:93:e4:13:
         cf:73:c4:d3:cc:79:f0:52:4d:40:e1:98:0d:9f:4c:22:5d:6e:
         ce:66:5f:bc:fd:d7:85:2d:d7:c8:52:03:6c:0e:62:d7:89:59:
         f4:9b:4b:58:cd:6c:73:e3:67:46:9d:bc:5d:32:f5:87:8a:1c:
         2a:fa:75:d0:9b:48:5f:b3:db:cf:95:d6:a9:00:7b:0c:be:d1:
         db:3e:8f:b5:6c:f6:05:9b:4f:7a:ba:5d:bb:dd:92:a9:c9:7b:
         dc:b5:71:52:96:11:28:f9:2a:15:4c:5c:89:78:16:dd:ff:3a:
         6f:0c:eb:67:e6:4b:1d:f2:dc:da:c5:70:3f:2c:64:2b:4d:9a:
         c2:de:58:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 19:42:22 2025 by rpki-client