This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/564C1BEAD04E11F098365DE6DAE4EC9C.roa
File:                     564C1BEAD04E11F098365DE6DAE4EC9C.roa (raw, json)
Hash identifier:          to5IHiUe/PhBNI2/33JF8oCXkTvg0e4XotJ10Zr3jWQ=
Subject key identifier:   B2:D2:59:9C:62:05:C0:F5:AD:47:0E:8B:25:AD:71:9F:26:E2:2D:2A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018BB3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/564C1BEAD04E11F098365DE6DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 13:45:33 +0000
ROA not before:           Wed 03 Dec 2025 13:45:27 +0000
ROA not after:            Wed 29 Nov 2028 13:45:27 +0000
asID:                     17561
IP address blocks:        45.198.194.0/24 maxlen: 24
                          45.198.195.0/24 maxlen: 24
                          45.198.196.0/24 maxlen: 24
                          45.198.197.0/24 maxlen: 24
                          45.198.198.0/24 maxlen: 24
                          45.198.199.0/24 maxlen: 24
                          45.198.200.0/24 maxlen: 24
                          45.198.201.0/24 maxlen: 24
                          45.198.202.0/24 maxlen: 24
                          45.198.203.0/24 maxlen: 24
                          45.198.204.0/24 maxlen: 24
                          45.198.205.0/24 maxlen: 24
                          45.198.206.0/24 maxlen: 24
                          45.198.207.0/24 maxlen: 24
                          45.198.208.0/24 maxlen: 24
                          45.198.209.0/24 maxlen: 24
                          45.198.210.0/24 maxlen: 24
                          45.198.211.0/24 maxlen: 24
                          45.198.212.0/24 maxlen: 24
                          45.198.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101299 (0x18bb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  3 13:45:27 2025 GMT
            Not After : Nov 29 13:45:27 2028 GMT
        Subject: CN=69303efc-be73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:be:c9:6e:51:47:9e:e4:9e:07:ea:38:d8:46:
                    50:a3:5a:aa:7e:aa:31:3e:55:08:72:cf:c4:dd:fb:
                    e4:c7:e2:bb:7b:81:0d:d1:94:2f:6e:e4:57:52:22:
                    a7:3c:e9:48:c0:c8:d0:29:28:6c:23:b3:22:44:aa:
                    6e:1d:64:58:71:59:83:be:23:ff:c1:d7:ed:36:f9:
                    7a:50:3c:b7:08:32:5e:61:db:92:2a:18:e7:2d:0c:
                    ad:cc:77:36:05:1e:1a:1a:96:de:cc:a4:b5:aa:a7:
                    32:4b:46:90:d7:9e:2d:87:d9:a6:5f:c3:dd:fe:04:
                    69:fb:b2:73:ab:76:99:fe:9f:06:5a:52:4a:1b:44:
                    3a:2d:87:29:4f:46:fa:a4:1c:b2:d3:b7:ce:3b:02:
                    35:5e:bd:fe:29:6a:fe:63:02:19:82:dc:49:b6:1d:
                    35:f9:60:10:af:92:59:51:dc:7f:0c:87:d4:08:45:
                    d1:e0:eb:42:76:80:45:98:ed:29:30:48:93:6a:5d:
                    27:bb:87:2a:fa:a5:f6:34:36:9f:1c:13:ec:46:df:
                    0f:54:a8:04:a0:68:4c:77:73:03:a0:b8:03:ca:ce:
                    5a:f5:41:10:71:dd:9f:83:13:70:4e:f2:08:7e:d2:
                    39:16:14:ca:33:fd:c1:b3:16:e6:d8:bf:ea:09:b8:
                    4d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D2:59:9C:62:05:C0:F5:AD:47:0E:8B:25:AD:71:9F:26:E2:2D:2A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/564C1BEAD04E11F098365DE6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.194.0-45.198.213.255

    Signature Algorithm: sha256WithRSAEncryption
         9b:71:5c:6f:9b:0d:2b:04:e6:f2:23:c3:84:a5:08:6e:b4:0c:
         84:96:6d:18:fb:8f:7c:b6:55:8c:d7:59:66:bc:d9:88:73:fa:
         3d:2c:d9:c7:4d:5e:a7:4a:18:39:32:dd:df:ee:2e:3b:66:a3:
         ed:2a:19:5f:65:f0:be:60:8e:86:82:6f:a1:f7:d9:39:cd:ae:
         e7:a2:16:34:44:fe:ad:e3:ad:72:be:00:84:26:f0:18:3f:76:
         ac:66:a4:c3:67:8f:62:df:3c:ea:29:0e:cc:a0:e5:b7:4f:5b:
         a0:a9:f1:82:cb:e9:31:d3:d0:95:e0:6c:d4:4c:05:0c:b1:0e:
         87:8a:68:0d:35:d9:08:fb:48:82:2c:14:7e:52:81:0f:85:00:
         da:63:6e:ea:bf:f6:6f:7c:11:be:99:92:ec:5c:be:bc:f6:0e:
         2e:d8:3f:25:c6:96:9c:a0:51:f1:42:6d:81:a6:e5:63:9a:ac:
         87:39:e8:9a:67:17:81:76:35:9e:f6:11:95:50:04:79:6a:8f:
         1f:60:06:5e:19:4b:cf:8a:a4:38:27:20:a0:88:13:4b:ae:0b:
         f5:e6:9a:22:85:29:c5:e0:a9:c5:e7:51:26:70:55:c4:4e:41:
         e5:55:a7:de:4a:e0:ab:f3:8c:0a:42:e8:99:72:9b:aa:13:62:
         f9:3d:a2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:36:13 2025 by rpki-client