This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28393624D73411F08D27E8ABDAE4EC9C.roa
File:                     28393624D73411F08D27E8ABDAE4EC9C.roa (raw, json)
Hash identifier:          viRaUEomsYxFgnSeysFjx/65dv988hriq02qTbiEPCg=
Subject key identifier:   D2:8A:62:35:16:63:93:74:0C:7F:14:46:C9:59:24:76:73:EE:92:47
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018DE0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28393624D73411F08D27E8ABDAE4EC9C.roa
Signing time:             Fri 12 Dec 2025 08:25:46 +0000
ROA not before:           Fri 12 Dec 2025 08:25:37 +0000
ROA not after:            Tue 20 Jan 2026 08:25:37 +0000
asID:                     25198
IP address blocks:        45.195.159.0/24 maxlen: 24
                          45.201.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101856 (0x18de0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 12 08:25:37 2025 GMT
            Not After : Jan 20 08:25:37 2026 GMT
        Subject: CN=693bd18a-61e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:da:16:0d:c7:55:3f:a8:87:e2:14:90:7b:ae:
                    20:be:0c:c4:f8:a0:6e:39:70:4c:05:f0:24:76:bd:
                    a6:70:03:51:35:cf:c2:0e:26:45:f3:2d:7a:41:8a:
                    6e:d6:14:17:e3:29:98:e8:31:fb:30:e9:47:58:f8:
                    54:03:b4:cd:1b:8d:a0:e7:15:55:78:1c:51:dc:09:
                    78:1b:61:75:2c:fc:33:80:2f:0f:38:44:e5:d8:96:
                    ab:ff:ca:f8:a6:df:6d:9b:ab:75:93:9c:ee:51:85:
                    8a:e8:1d:44:e1:bc:30:6d:2b:4d:24:fb:03:3e:82:
                    3e:84:91:a8:34:cc:d5:ee:fc:5d:be:8e:82:89:db:
                    d0:14:c3:95:37:ff:5b:9d:ab:e1:09:be:4a:93:c8:
                    1b:6d:45:b9:19:ab:50:cf:23:13:66:4a:ca:3e:59:
                    f4:66:f6:e3:9d:6d:4f:b4:ca:5c:d3:99:19:4f:ed:
                    dd:b3:b4:fb:d9:4d:e2:44:f1:9d:67:8f:b7:bc:02:
                    58:3d:73:33:fe:34:74:6f:01:bc:03:fe:91:f5:cd:
                    2f:e9:3a:0d:64:db:57:ca:ac:25:72:ba:e1:df:da:
                    65:c3:3d:72:59:68:8d:11:5e:1d:f6:c5:54:a2:a9:
                    0e:51:89:cc:0a:f2:fa:2d:c5:b6:85:39:94:5b:d1:
                    d5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8A:62:35:16:63:93:74:0C:7F:14:46:C9:59:24:76:73:EE:92:47
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/28393624D73411F08D27E8ABDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.159.0/24
                  45.201.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:f6:5f:db:f8:c6:d1:03:e5:4d:55:b1:58:dd:a5:cc:60:15:
         65:5a:5d:b4:80:dd:3a:90:f6:7d:ab:d8:0b:c2:f0:96:c9:94:
         3d:d6:c1:25:04:e8:91:13:12:c6:9f:8e:22:98:36:34:05:a1:
         cd:7c:42:87:51:dd:a8:ee:5e:c4:ce:aa:99:7a:b6:69:d2:a8:
         a7:1f:b9:c3:34:c1:a2:3d:10:cc:9a:68:66:f9:eb:0b:ff:fc:
         4a:c8:a1:e0:a3:46:22:5d:23:21:02:51:d6:63:e4:88:c6:b9:
         1a:bb:d3:1e:57:d5:b2:b8:88:06:0a:64:c4:58:ea:ca:85:70:
         32:aa:1f:82:71:a8:01:de:7a:d7:e6:13:95:3b:5f:86:82:41:
         24:6d:1f:bc:0a:74:fd:fc:b4:60:ca:e8:9c:2d:e4:e6:95:7a:
         88:13:2d:46:ce:b7:1f:b4:1e:ed:c3:6d:a2:7d:a8:bc:4c:ac:
         22:ca:9a:ab:82:60:c1:c7:7b:37:25:87:5d:3a:90:8a:48:4f:
         ae:11:f1:10:8d:9f:46:7d:f3:2f:2c:14:8b:a6:bb:73:ab:52:
         b0:84:92:47:c9:bd:12:7e:81:75:6d:fd:07:1b:71:f6:18:30:
         5a:d2:27:37:5a:3d:0d:89:36:5f:5f:47:cb:13:fc:ea:0b:ad:
         cd:5d:ed:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 01:13:50 2025 by rpki-client