This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/955FA69AD10111F0ADCB59D0DAE4EC9C.roa
File:                     955FA69AD10111F0ADCB59D0DAE4EC9C.roa (raw, json)
Hash identifier:          PbHlMqnTslf5tK5htVFP7yoiCnPSftAX04uJWXAWqiw=
Subject key identifier:   A6:39:8E:9C:39:C3:54:14:37:62:B7:23:F5:DB:AD:5C:B8:62:3E:B9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018C15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/955FA69AD10111F0ADCB59D0DAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 11:08:38 +0000
ROA not before:           Thu 04 Dec 2025 11:08:33 +0000
ROA not after:            Fri 02 Jan 2026 11:08:33 +0000
asID:                     151407
IP address blocks:        45.207.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101397 (0x18c15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  4 11:08:33 2025 GMT
            Not After : Jan  2 11:08:33 2026 GMT
        Subject: CN=69316bb6-6d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:81:54:36:2a:cf:7c:45:28:03:38:18:fa:
                    a6:e2:b5:a5:a2:d6:c6:af:eb:b2:6b:03:ec:ba:4f:
                    cf:0d:dc:ee:d9:1d:2a:86:41:f1:b4:92:76:bb:ca:
                    3d:8f:23:4a:aa:04:22:62:aa:f8:7a:44:c4:94:c6:
                    c4:ff:ef:34:6c:be:57:d1:17:83:aa:f6:4b:16:28:
                    95:68:d5:78:a6:87:43:46:30:11:a4:e9:5b:c0:b0:
                    d1:be:66:e5:fa:0d:6c:70:89:4e:5e:3d:e0:d4:b3:
                    fc:20:06:53:dc:5b:c8:c0:38:f0:64:fd:b7:1e:97:
                    fe:a5:0a:e6:3c:6c:36:68:41:79:50:8e:ab:09:cc:
                    1e:a3:7e:59:81:69:1c:ba:71:1b:02:d8:63:b2:27:
                    52:c6:38:82:4e:d0:86:2c:4b:72:2a:79:80:bc:ba:
                    c2:c4:df:e5:98:f1:71:54:74:e7:ec:b1:b1:06:3e:
                    5a:03:37:16:8d:a4:10:81:ed:37:78:34:af:d6:ae:
                    b7:e3:eb:66:2a:f5:d8:c1:74:ff:ce:87:3b:89:f1:
                    af:b9:7b:d7:bd:b1:85:81:58:85:22:26:5d:08:1e:
                    a0:77:c8:52:a0:80:c1:50:4b:76:ab:d3:55:85:bf:
                    c9:7e:8c:e5:f7:d0:09:dd:c5:4a:ac:53:2e:2e:d5:
                    58:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:39:8E:9C:39:C3:54:14:37:62:B7:23:F5:DB:AD:5C:B8:62:3E:B9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/955FA69AD10111F0ADCB59D0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:77:2e:26:28:30:e7:95:02:bb:c2:41:61:c7:da:3d:f8:8a:
         c9:a7:48:cd:38:dc:89:2a:fe:23:9b:45:a1:2f:8f:c3:e9:da:
         e3:55:79:7e:06:08:65:fc:54:7a:6d:b7:3a:80:e0:10:d8:6e:
         bc:be:06:09:42:e4:76:0b:95:ef:7d:99:42:c2:76:89:97:e1:
         35:b9:46:e8:a8:51:22:17:3e:60:ef:40:1b:38:da:99:0d:67:
         ec:bd:9b:e5:ad:1c:fc:da:b1:86:5f:23:f3:64:46:6f:30:fa:
         c1:50:7a:3f:4c:98:67:6f:4d:d6:f1:57:5a:3d:b5:1d:bc:d5:
         9e:b9:9b:45:6d:40:ed:e3:ce:2d:c0:50:7e:e1:3b:c5:fb:07:
         6b:be:3e:4d:bf:d1:87:50:9f:7d:2b:c6:6d:66:dd:fe:5a:2f:
         ad:88:e2:70:69:9d:e5:1b:d1:79:6a:0a:67:96:32:af:ef:57:
         76:f9:33:3b:43:0e:07:3e:ac:23:4e:0a:11:4c:a1:d6:a0:05:
         fb:e8:30:82:c6:10:67:92:ef:14:b9:a0:f7:7f:6c:db:74:13:
         97:03:15:29:5d:bd:1f:91:7f:6f:1d:5b:00:59:5b:8c:20:76:
         f1:b8:0a:44:af:63:8d:81:2f:78:67:2c:50:2a:37:4e:03:02:
         ce:83:29:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:01:57 2025 by rpki-client