This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB32D470E31611F08B9AA0C1DAE4EC9C.roa
File:                     FB32D470E31611F08B9AA0C1DAE4EC9C.roa (raw, json)
Hash identifier:          OsY7ceGqSo67TMuuChFbClFQRUdSHdrRvT1mCFIDfFY=
Subject key identifier:   C1:24:EE:DE:63:59:CA:0C:2C:A3:DE:35:C3:E0:19:1C:B1:72:B8:DD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01926F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB32D470E31611F08B9AA0C1DAE4EC9C.roa
Signing time:             Sat 27 Dec 2025 11:27:09 +0000
ROA not before:           Sat 27 Dec 2025 11:27:05 +0000
ROA not after:            Sun 04 Jan 2026 11:27:05 +0000
asID:                     131471
IP address blocks:        45.195.130.0/24 maxlen: 24
                          45.195.131.0/24 maxlen: 24
                          45.195.194.0/24 maxlen: 24
                          45.195.195.0/24 maxlen: 24
                          45.195.210.0/24 maxlen: 24
                          45.195.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Jan 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103023 (0x1926f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 27 11:27:05 2025 GMT
            Not After : Jan  4 11:27:05 2026 GMT
        Subject: CN=694fc28d-be48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:ae:ad:71:b2:97:a7:75:3f:6d:d1:b4:b9:
                    a0:d2:95:d9:76:3d:a9:c4:30:5c:21:12:b2:3a:09:
                    1d:c1:4c:49:68:5f:85:43:d2:9d:30:a3:5f:64:fd:
                    c5:e2:f4:92:3e:f2:99:44:5e:36:37:1d:ad:74:e5:
                    97:ea:49:de:ef:d2:73:26:33:e3:a7:a1:15:03:b2:
                    a3:35:7b:42:02:30:de:84:2f:3e:47:30:a0:7e:68:
                    3f:3b:fa:be:95:89:a3:21:de:37:c0:27:a6:fe:cb:
                    e3:76:77:3d:98:a1:c6:42:f1:5a:eb:92:54:3a:10:
                    15:79:72:3b:43:af:0b:bb:5d:6f:e0:39:5a:79:00:
                    20:94:b5:7a:69:8b:58:f0:6f:91:f8:b5:5b:5b:f9:
                    c8:dd:17:b2:00:0c:58:32:88:d8:bb:88:e9:fb:4d:
                    34:cc:09:66:29:2c:bb:84:ee:79:7a:cb:f2:9e:28:
                    45:f6:a2:c7:b1:d2:75:b4:e2:71:50:bc:35:14:34:
                    7f:c3:43:c1:d6:05:49:6b:73:a1:aa:92:d9:21:50:
                    57:72:bc:68:8c:a8:93:a2:e7:38:19:f6:76:34:7c:
                    da:95:cf:76:4f:39:16:70:83:6e:4a:d5:60:dd:d3:
                    0f:c5:ad:bc:85:3c:78:98:14:28:7e:1e:14:3f:f2:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:24:EE:DE:63:59:CA:0C:2C:A3:DE:35:C3:E0:19:1C:B1:72:B8:DD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB32D470E31611F08B9AA0C1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.130.0/23
                  45.195.194.0/23
                  45.195.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:d0:df:4a:0a:4d:73:70:91:c1:fc:75:d9:4b:4f:b1:8d:1a:
         e6:9f:39:fd:cd:20:6e:47:f0:48:d1:34:92:80:a1:58:d9:02:
         6a:7f:d4:52:cd:c0:3c:4c:c2:98:40:19:5f:fd:b7:fc:ca:a3:
         59:41:b6:0b:10:4b:76:79:0e:95:8a:a2:67:d3:78:84:a0:25:
         23:57:1f:1a:c0:b4:ac:d1:3f:da:bc:58:db:96:d0:46:24:84:
         aa:f3:9e:de:0f:f0:99:fe:58:c8:3e:ec:e9:72:b6:53:6d:c2:
         d1:31:38:c6:b4:9f:c2:d6:97:a1:0b:ff:f2:49:3f:9e:e5:c4:
         af:69:b0:c4:56:5e:52:f6:de:39:f1:c3:5f:ce:12:49:7f:35:
         91:c2:4f:4d:aa:90:f0:44:7f:f1:a4:1f:23:1a:56:b6:4b:5d:
         b1:71:2e:c4:db:07:e1:ea:56:3f:c1:05:01:9f:0a:d9:c6:fe:
         32:4e:47:0c:62:f8:b8:32:e3:9e:b2:98:b0:e4:bc:3b:19:74:
         f0:02:25:ee:bf:1a:74:c6:4a:1c:c5:7c:87:9b:47:67:e7:98:
         e9:a9:04:97:fa:38:e7:39:ad:77:1c:3c:68:94:f6:eb:29:b3:
         4c:4b:ec:d7:e3:7b:32:ce:0e:5f:8b:2c:d3:e7:34:a3:23:b0:
         17:dd:59:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 12:28:25 2025 by rpki-client