This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/5C48C5E6D59111F0A35986E9DAE4EC9C.roa
File:                     5C48C5E6D59111F0A35986E9DAE4EC9C.roa (raw, json)
Hash identifier:          Q9vbh4IVguIiKXFgG//hRIq3VlksMG3g9OlCGUmxIek=
Subject key identifier:   5F:27:CE:CF:11:28:6D:CC:32:8C:B7:7B:88:28:12:20:3D:EE:AE:D1
Certificate issuer:       /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial:       0425
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/5C48C5E6D59111F0A35986E9DAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 06:27:55 +0000
ROA not before:           Wed 10 Dec 2025 06:27:49 +0000
ROA not after:            Fri 10 Dec 2027 06:27:49 +0000
asID:                     15964
IP address blocks:        165.210.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
                          rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
        Validity
            Not Before: Dec 10 06:27:49 2025 GMT
            Not After : Dec 10 06:27:49 2027 GMT
        Subject: CN=693912eb-06e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f8:90:0d:9e:d9:5c:13:8d:d8:ee:f1:6c:ec:
                    82:2f:eb:d3:ed:e0:3e:3e:a7:b8:cf:79:ff:b3:2b:
                    fd:3f:65:7e:0c:b9:ad:e4:f5:4b:78:39:74:4e:da:
                    b4:47:79:96:a3:66:e7:8e:7a:61:e2:ea:fb:19:c6:
                    60:69:5e:c0:49:41:63:10:9f:72:51:b2:d1:f9:45:
                    20:58:ba:ce:e2:ba:dc:63:05:86:ce:43:ff:a2:08:
                    b2:13:a6:ee:16:ae:e9:b7:a7:ba:20:cf:24:87:af:
                    11:1a:87:68:37:16:94:7b:4d:a7:9e:38:14:5d:c3:
                    a5:9c:22:c6:5d:bc:d0:f5:e7:8b:4f:90:fe:41:f0:
                    22:63:6b:bd:e6:4f:78:91:fe:ab:19:d0:1a:34:65:
                    e2:48:27:d6:e0:8d:68:cc:7f:df:aa:27:d9:4f:8d:
                    40:ca:d7:f9:44:81:3b:ad:91:a7:36:ae:b4:ee:7e:
                    7c:50:17:08:b8:84:3c:27:f2:2c:56:b5:6f:58:88:
                    8a:30:ad:2b:0d:d5:95:0b:c1:82:cf:cb:76:56:8b:
                    bd:bf:b0:42:bc:23:ca:b8:08:92:fe:6b:44:1b:65:
                    44:95:a2:c8:e2:51:71:53:72:f0:d0:12:c9:3a:0f:
                    6f:a9:db:24:b1:57:e9:97:72:35:fd:27:93:8d:f9:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:27:CE:CF:11:28:6D:CC:32:8C:B7:7B:88:28:12:20:3D:EE:AE:D1
            X509v3 Authority Key Identifier:
                keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/5C48C5E6D59111F0A35986E9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.210.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:ca:f1:70:ca:78:3c:07:8f:d3:da:fb:ef:ca:36:ad:45:74:
         8d:c4:d7:b6:df:7d:98:4b:de:05:d9:33:cf:c3:89:a4:4b:66:
         da:f8:c0:10:8b:11:d4:c3:5b:72:d1:2f:80:f0:27:79:1d:0e:
         2a:ab:bd:6d:20:ac:53:f1:c9:6c:c2:13:28:4a:0b:d1:08:93:
         8f:34:f3:76:b7:7e:e3:e5:24:9c:5c:19:0b:c9:d4:66:82:ca:
         26:54:f3:1d:19:af:ac:8d:47:8d:ef:d7:0b:3f:41:ea:ca:d6:
         08:b6:39:fd:09:41:c7:85:66:e9:1f:0f:35:42:bc:aa:79:b8:
         c4:26:71:7b:9b:a4:98:d7:84:05:21:ea:f6:3e:b0:c6:e9:2c:
         3c:ad:94:1b:4b:4d:06:e3:55:1c:c9:68:53:4e:93:c6:53:66:
         09:11:24:60:8e:bf:ad:17:09:77:d0:bb:99:fc:90:c1:6a:76:
         70:0b:b3:64:e7:d8:c8:6a:dd:d9:f4:e6:a8:20:3f:93:dc:df:
         9a:63:e3:e3:26:50:73:fd:4a:01:16:1b:ee:5d:83:5d:e1:d3:
         5c:e5:73:c1:9f:c5:1f:b7:5c:5a:b7:05:b4:1e:d3:5e:c2:56:
         7f:37:3a:4f:6e:77:25:c3:26:e4:b6:ec:b9:6d:21:c9:b2:91:
         56:60:93:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:19:26 2025 by rpki-client