This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46C836F8C53711F08A3F58C5DAE4EC9C.roa
File:                     46C836F8C53711F08A3F58C5DAE4EC9C.roa (raw, json)
Hash identifier:          Gg0Sn2xMFWfzput4ZVi9wBH716owUOhBexS8OMDU1j4=
Subject key identifier:   21:7E:2A:21:C2:F4:E1:30:7A:DD:B6:E3:FB:8D:9D:B9:09:79:A2:C9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01887B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46C836F8C53711F08A3F58C5DAE4EC9C.roa
Signing time:             Wed 19 Nov 2025 11:02:45 +0000
ROA not before:           Wed 19 Nov 2025 11:02:40 +0000
ROA not after:            Wed 25 Feb 2026 11:02:40 +0000
asID:                     395839
IP address blocks:        45.202.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100475 (0x1887b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 11:02:40 2025 GMT
            Not After : Feb 25 11:02:40 2026 GMT
        Subject: CN=691da3d5-5e90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:21:4e:36:58:a8:dd:67:30:e0:bb:a9:af:
                    82:0a:26:e7:62:70:49:f3:af:dc:95:61:95:db:97:
                    f3:a0:70:73:b6:32:9b:b3:3f:ff:2d:6e:72:43:7a:
                    ce:72:16:ac:99:77:fe:ff:dd:74:1b:f8:ba:e4:0b:
                    35:cc:41:bf:8a:5e:37:9c:65:af:bc:a3:79:8c:94:
                    f5:6f:26:09:ee:c5:d5:db:aa:5b:14:fa:8a:d1:ce:
                    1c:1d:65:99:b5:d8:40:4d:4d:30:1e:bc:5a:b2:47:
                    0d:f0:dd:1b:55:96:bd:a7:5f:88:65:e7:2a:56:f4:
                    24:02:5d:e7:d3:99:21:98:41:f6:0d:24:38:ec:8f:
                    a9:0b:09:6f:bb:d0:d6:e2:f1:26:41:61:ee:e2:41:
                    b8:52:1b:d1:f1:58:ea:50:93:68:8b:96:e3:9c:d2:
                    6b:bb:d6:5b:6d:ff:b0:47:95:ee:37:67:85:4a:07:
                    92:ac:a3:00:05:c8:53:0a:65:d1:eb:a3:1d:30:75:
                    15:53:a6:11:37:a2:12:1c:bf:aa:20:d9:43:77:1b:
                    56:09:bb:32:97:d2:fd:ff:d2:d5:0c:56:00:dd:0b:
                    e0:40:67:d1:e0:41:9d:e1:91:94:63:92:5f:dd:57:
                    c3:0f:6d:42:66:80:41:74:79:64:da:da:09:f4:98:
                    dc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7E:2A:21:C2:F4:E1:30:7A:DD:B6:E3:FB:8D:9D:B9:09:79:A2:C9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/46C836F8C53711F08A3F58C5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:c4:6d:d6:d4:2d:2e:ae:ac:e6:5c:cd:51:6f:db:40:7f:68:
         79:f8:9e:dd:07:74:27:9e:10:95:7c:2c:44:a6:d2:58:ad:d2:
         72:8a:dd:91:1d:ec:bc:12:18:4d:c4:25:36:9d:94:95:1c:9f:
         7e:bb:5a:d6:79:6c:54:ee:cc:e8:0b:25:96:94:ba:30:71:87:
         d4:18:9e:9e:b5:b4:85:09:69:59:23:3c:c4:13:71:25:5b:ba:
         05:57:9d:fc:40:2c:58:78:52:39:76:fc:08:7b:c8:00:e2:3d:
         b5:b7:dd:d5:96:9e:d4:2a:bc:9e:29:7f:73:18:55:da:be:7c:
         6e:fe:f8:75:82:c6:24:af:4d:c8:0c:7c:6d:75:24:c8:f5:22:
         b6:f7:b7:a6:cf:1d:ac:39:dc:da:69:59:55:7f:65:1d:da:9a:
         f3:14:f6:e0:6c:da:52:8d:d8:1a:07:d5:a0:13:8f:2e:13:8c:
         8e:f5:4f:98:5b:85:0c:44:97:c6:26:9f:98:af:c7:75:95:0b:
         be:9d:a3:18:51:0b:8e:01:e0:22:cd:41:cb:3c:ce:87:81:94:
         0f:6c:e5:ec:74:fe:c7:66:74:f9:41:7f:ad:2b:88:82:11:3c:
         27:42:a9:e0:e6:03:ab:ae:ba:09:ab:d8:0b:d2:93:a3:b8:c4:
         f4:c1:34:e4
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYh7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTE5MTEwMjQwWhcNMjYwMjI1MTEwMjQwWjAYMRYw
FAYDVQQDEw02OTFkYTNkNS01ZTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvRkhTjZYqN1nMOC7qa+CCibnYnBJ86/clWGV25fzoHBztjKbsz//LW5y
Q3rOchasmXf+/910G/i65As1zEG/il43nGWvvKN5jJT1byYJ7sXV26pbFPqK0c4c
HWWZtdhATU0wHrxaskcN8N0bVZa9p1+IZecqVvQkAl3n05khmEH2DSQ47I+pCwlv
u9DW4vEmQWHu4kG4UhvR8VjqUJNoi5bjnNJru9Zbbf+wR5XuN2eFSgeSrKMABchT
CmXR66MdMHUVU6YRN6ISHL+qINlDdxtWCbsyl9L9/9LVDFYA3QvgQGfR4EGd4ZGU
Y5Jf3VfDD21CZoBBdHlk2toJ9JjcDwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCF+
KiHC9OEwet224/uNnbkJeaLJMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NkM4MzZGOEM1MzcxMUYwOEEzRjU4QzVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpxMA0GCSqGSIb3DQEBCwUA
A4IBAQC4xG3W1C0urqzmXM1Rb9tAf2h5+J7dB3QnnhCVfCxEptJYrdJyit2RHey8
EhhNxCU2nZSVHJ9+u1rWeWxU7szoCyWWlLowcYfUGJ6etbSFCWlZIzzEE3ElW7oF
V538QCxYeFI5dvwIe8gA4j21t93Vlp7UKryeKX9zGFXavnxu/vh1gsYkr03IDHxt
dSTI9SK297emzx2sOdzaaVlVf2Ud2przFPbgbNpSjdgaB9WgE48uE4yO9U+YW4UM
RJfGJp+Yr8d1lQu+naMYUQuOAeAizUHLPM6HgZQPbOXsdP7HZnT5QX+tK4iCETwn
Qqng5gOrrroJq9gL0pOjuMT0wTTk
-----END CERTIFICATE-----
Generated at Sat Dec 6 15:41:31 2025 by rpki-client