This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/655B4ED2D12811F0B88173BDDAE4EC9C.roa
File:                     655B4ED2D12811F0B88173BDDAE4EC9C.roa (raw, json)
Hash identifier:          upyeb4fs75Y+ZeLlAIh5WkKwZL+6S6Pl91CNnKMfo4I=
Subject key identifier:   2D:95:85:12:FF:55:3C:1F:16:E0:2D:3F:64:DA:6E:3D:BE:91:1A:BA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018C41
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/655B4ED2D12811F0B88173BDDAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 15:46:28 +0000
ROA not before:           Thu 04 Dec 2025 15:46:23 +0000
ROA not after:            Sat 27 Dec 2025 15:46:23 +0000
asID:                     152599
IP address blocks:        45.196.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101441 (0x18c41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  4 15:46:23 2025 GMT
            Not After : Dec 27 15:46:23 2025 GMT
        Subject: CN=6931acd4-b2b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:25:cc:20:3d:9a:e1:1a:a6:da:17:f1:2e:78:
                    a0:0a:5c:8f:60:35:25:54:b4:37:36:d8:3f:e1:2a:
                    8c:7c:02:e3:6c:52:df:b6:05:1c:65:11:c7:8f:62:
                    15:6f:88:b5:4c:9c:4e:0e:f1:b5:fc:2d:45:6d:c8:
                    ab:2f:14:33:c1:24:d6:85:c1:59:0d:8e:93:03:a7:
                    02:30:b9:f4:82:6f:fe:a2:0a:e2:18:69:6d:49:42:
                    3a:d8:e9:d8:bd:ef:26:6a:de:eb:34:31:87:70:22:
                    16:b2:a0:e7:97:45:05:18:21:d0:4b:e3:f7:51:67:
                    d0:81:85:01:80:30:f6:dc:f9:a5:18:ee:4e:ff:63:
                    f8:4e:ad:2a:b1:ac:15:8d:c3:61:b6:d7:66:ef:7c:
                    84:4e:fd:da:79:cd:6a:4b:ce:7e:de:48:23:86:3f:
                    87:cc:e5:f2:af:e5:54:6a:ad:43:b1:05:b1:39:81:
                    62:38:dd:e8:77:ba:1e:22:d5:b0:25:6c:9a:46:ad:
                    ff:18:cd:a6:2b:10:5c:99:c8:36:af:9f:b9:db:54:
                    82:80:a0:a4:4f:78:7d:16:10:25:37:64:82:52:06:
                    26:8b:d8:84:fb:27:bc:ea:4f:a0:4f:76:e1:b6:c9:
                    4b:11:d8:4a:c9:ab:30:df:b8:04:84:3d:14:0a:24:
                    2b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:95:85:12:FF:55:3C:1F:16:E0:2D:3F:64:DA:6E:3D:BE:91:1A:BA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/655B4ED2D12811F0B88173BDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:79:95:be:97:05:ba:48:61:b1:74:c6:67:e2:58:d8:7e:ce:
         33:63:a8:55:52:a7:2e:0e:36:f2:e1:77:70:9e:03:c2:11:5c:
         5e:82:7f:3c:13:9a:87:20:7b:e5:6f:9c:c5:b0:48:76:46:21:
         b1:51:93:48:a8:b9:0c:08:cf:c5:6c:78:e4:94:99:a3:ac:c0:
         7d:34:ed:9a:3b:fe:44:f4:65:c4:29:7e:04:f0:d2:bd:a3:c3:
         ad:5d:78:72:53:77:49:51:e4:c7:4e:99:63:50:a5:e5:34:2a:
         94:e4:8f:11:61:27:ce:2e:15:7e:1e:86:95:ef:e5:88:45:59:
         62:b1:b4:68:9c:54:1d:c4:5c:aa:68:95:14:fa:7e:63:c8:fe:
         f5:a2:a7:62:01:47:da:e0:46:25:96:f9:2f:64:2c:f9:85:b0:
         61:23:68:d8:e9:3c:e1:dd:86:92:2a:80:a8:b1:53:28:fe:3d:
         c2:85:31:bc:d3:31:21:02:f9:75:c1:c6:ec:ae:0d:03:91:ef:
         72:a5:fd:74:00:b1:35:33:e4:78:39:b6:f4:f5:60:d2:f6:d5:
         9a:39:d8:9b:97:d8:f7:3b:f9:f2:27:3b:7b:83:71:d8:93:46:
         3d:4b:4f:20:d4:9a:06:bd:e3:97:47:7f:f5:1c:ba:80:a2:01:
         02:a0:39:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 17:18:13 2025 by rpki-client