This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F008CD74E0C411F0870F90AADAE4EC9C.roa
File:                     F008CD74E0C411F0870F90AADAE4EC9C.roa (raw, json)
Hash identifier:          MFHnaLa/oiTFjF2SWGqbvx7C38ytS3RHwSBP/VZsTGs=
Subject key identifier:   6B:EC:34:4E:B4:ED:3C:95:F3:E9:F7:6C:1E:4D:4B:D9:55:AE:72:85
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019174
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F008CD74E0C411F0870F90AADAE4EC9C.roa
Signing time:             Wed 24 Dec 2025 12:34:50 +0000
ROA not before:           Wed 24 Dec 2025 12:34:45 +0000
ROA not after:            Tue 13 Jun 2028 12:34:45 +0000
asID:                     17561
IP address blocks:        45.195.42.0/24 maxlen: 24
                          45.195.43.0/24 maxlen: 24
                          45.195.44.0/24 maxlen: 24
                          45.195.45.0/24 maxlen: 24
                          45.195.46.0/24 maxlen: 24
                          45.195.47.0/24 maxlen: 24
                          45.195.48.0/24 maxlen: 24
                          45.195.49.0/24 maxlen: 24
                          45.195.50.0/24 maxlen: 24
                          45.195.51.0/24 maxlen: 24
                          45.196.70.0/24 maxlen: 24
                          45.196.71.0/24 maxlen: 24
                          45.196.72.0/24 maxlen: 24
                          45.196.73.0/24 maxlen: 24
                          45.196.74.0/24 maxlen: 24
                          45.196.75.0/24 maxlen: 24
                          45.196.76.0/24 maxlen: 24
                          45.196.77.0/24 maxlen: 24
                          45.196.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102772 (0x19174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 24 12:34:45 2025 GMT
            Not After : Jun 13 12:34:45 2028 GMT
        Subject: CN=694bddea-f385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:73:ce:7d:1f:b0:a4:86:22:ac:95:4a:13:8f:
                    14:57:b0:c9:07:cf:cf:3a:0e:ae:75:76:da:4e:50:
                    b8:71:c6:47:ad:2b:f6:6d:86:ce:d0:f1:ef:7b:f9:
                    3b:a5:4e:ed:88:39:62:94:1d:4b:c4:2a:1f:9e:3c:
                    ea:a2:dc:96:57:b7:cc:aa:60:a4:03:26:e7:56:af:
                    35:20:ed:ef:dd:f5:be:e3:7e:b0:a4:d3:f7:57:86:
                    f1:83:c5:ad:ef:45:99:f0:cb:c0:68:08:97:e9:9e:
                    8b:30:15:1e:d2:bb:19:bc:67:d7:49:ea:1a:1e:55:
                    e9:0a:c4:76:c0:1b:5e:c2:ba:40:ae:c1:a2:09:5f:
                    35:05:d9:f7:e0:2c:a1:7b:d8:e7:80:9b:0b:61:2b:
                    be:86:04:48:94:1e:fb:80:e7:2e:d8:ba:68:42:ab:
                    a6:ee:33:f9:b2:d4:24:b4:d9:ed:f7:ae:32:86:df:
                    6f:ea:b8:30:ef:2e:93:2a:10:fc:e3:ae:86:46:6a:
                    68:ea:c8:15:f6:6d:cf:02:50:6d:d3:cc:d9:77:37:
                    d0:b1:3f:6d:e1:1b:e6:65:83:e2:f6:d5:92:51:cd:
                    34:24:5e:ef:03:3c:04:3b:2d:17:48:ec:7f:9a:fa:
                    85:34:3b:93:1f:3f:2c:65:b4:86:e4:ef:ba:5b:6f:
                    8e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EC:34:4E:B4:ED:3C:95:F3:E9:F7:6C:1E:4D:4B:D9:55:AE:72:85
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F008CD74E0C411F0870F90AADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.42.0-45.195.51.255
                  45.196.70.0-45.196.78.255

    Signature Algorithm: sha256WithRSAEncryption
         80:ab:2b:42:28:f7:2f:58:3e:52:4f:d0:cb:6c:16:8c:46:d3:
         9d:ea:8a:a3:25:c2:73:1b:48:ba:db:8f:6d:33:2b:75:13:93:
         f1:0f:83:b2:4f:b4:dc:b2:4f:17:52:86:e9:80:41:cf:98:9b:
         93:d3:00:64:2a:be:c9:8d:b4:ab:36:4e:02:f2:79:b7:a4:31:
         2d:18:6e:5a:e6:24:fa:9d:a8:bd:f9:ea:ab:e0:31:d6:d4:11:
         5e:2d:e8:de:04:53:1e:4b:5b:21:11:3f:f3:a2:9c:90:4e:63:
         36:39:c1:c4:0b:5b:e1:5a:74:b0:9b:8d:11:4a:09:6f:73:67:
         b7:f6:04:8c:af:b6:04:14:a7:f2:ce:bf:e1:3f:37:42:e4:6c:
         c7:10:5a:fd:0f:50:22:2c:b0:d7:d4:af:a9:d4:d5:03:1e:92:
         95:38:67:61:a4:d0:31:60:49:db:12:47:7f:9e:74:b5:4f:27:
         17:0a:71:ea:83:ec:45:07:68:23:28:3c:b8:42:c4:a9:58:75:
         17:bf:91:35:2b:02:dc:2d:27:6c:25:7a:3d:72:b8:d2:e5:0c:
         1e:22:36:9c:6a:3c:ec:d6:fc:e6:08:b9:40:19:70:d5:97:4b:
         fe:48:33:06:68:16:da:11:54:4a:99:81:d6:5e:0e:5c:2c:e2:
         75:8e:a9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:27:36 2025 by rpki-client