This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9731CEAED1E611F0BB756FE8DAE4EC9C.roa
File:                     9731CEAED1E611F0BB756FE8DAE4EC9C.roa (raw, json)
Hash identifier:          nyIAhQ5AIgRkW3RyKIHk8KSD2xqIaBmZuiUC6wPINjM=
Subject key identifier:   F2:AC:9D:AA:9A:B4:84:4D:60:01:B7:9F:B4:35:09:C6:27:7F:E4:46
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018CCB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9731CEAED1E611F0BB756FE8DAE4EC9C.roa
Signing time:             Fri 05 Dec 2025 14:27:56 +0000
ROA not before:           Fri 05 Dec 2025 14:27:51 +0000
ROA not after:            Sun 14 Dec 2025 14:27:51 +0000
asID:                     215618
IP address blocks:        45.195.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101579 (0x18ccb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  5 14:27:51 2025 GMT
            Not After : Dec 14 14:27:51 2025 GMT
        Subject: CN=6932ebec-66e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f6:90:cd:1f:43:1b:35:b8:fe:90:2e:20:4f:
                    35:05:5d:a6:e9:fc:2f:8a:63:0a:1a:f5:3f:9e:56:
                    cf:f5:42:82:0d:4b:14:7c:67:7f:a8:ec:a4:71:be:
                    ac:8c:2e:c4:43:b8:e8:46:5b:3a:4a:ea:da:6e:8c:
                    94:66:d2:ff:c2:5f:c1:2e:ae:2f:9c:82:c1:dc:dd:
                    f0:5d:3e:8f:f2:13:b5:35:81:bd:6f:12:e3:c8:2d:
                    42:32:17:2f:b8:6d:98:e9:9a:28:88:77:ce:63:01:
                    f3:b6:f1:3f:86:7a:d7:30:20:9d:f9:33:b6:d2:3e:
                    ae:fd:6b:50:04:17:cf:4d:7e:4d:ae:f2:82:7c:6d:
                    52:46:7f:bd:79:74:69:2e:8b:d4:e6:da:83:e0:cc:
                    85:ac:d4:b7:ab:f8:62:e0:be:fa:3f:a0:ee:d5:35:
                    12:15:c3:74:62:40:8d:e6:e8:f7:3f:c5:91:a1:3f:
                    b3:17:59:7e:54:c8:fe:88:d4:2f:6e:27:04:c4:2a:
                    81:2c:10:0f:ed:f3:45:01:a9:48:bf:af:40:10:dd:
                    68:8c:39:05:70:ed:e0:75:27:ba:e3:85:4f:c4:5e:
                    06:88:47:89:bc:83:36:35:02:de:df:f7:a1:7c:1b:
                    b0:eb:70:54:e7:0b:d2:4e:60:d1:0d:b0:26:d0:aa:
                    9d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AC:9D:AA:9A:B4:84:4D:60:01:B7:9F:B4:35:09:C6:27:7F:E4:46
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9731CEAED1E611F0BB756FE8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:28:93:a6:b5:23:6b:30:3a:12:94:62:e5:ba:b2:87:2b:8f:
         e8:05:81:ed:0d:7f:71:c8:99:65:da:d5:c1:f0:5d:ea:53:bc:
         f8:e8:69:a7:74:ae:09:5e:71:e4:b8:99:12:3c:c4:b4:ae:10:
         da:ca:44:80:a8:a0:b7:81:67:b9:90:59:ca:81:24:5b:25:a9:
         6b:2d:4a:39:54:27:2b:3a:bf:d7:59:c2:a0:22:e5:36:81:be:
         54:71:e9:2d:67:d7:d3:35:25:43:d2:e8:0c:5c:0e:39:2f:4e:
         90:01:3a:37:bd:ed:df:8c:10:e1:5a:b0:96:96:34:c9:94:1b:
         2d:ce:5f:12:d1:23:0d:a3:89:83:c8:2b:2e:7a:fa:84:66:ed:
         d7:69:8b:0c:90:ee:af:7a:3d:ae:65:72:14:f0:61:42:2e:fd:
         a7:d6:2d:42:9c:b3:46:ec:3d:86:22:c8:4b:df:d3:96:75:87:
         e8:8b:6d:6b:e6:bb:f2:c7:5e:27:2a:45:d4:c2:67:3c:bc:38:
         53:9a:ff:6f:e1:ff:79:75:9f:39:f2:77:64:9a:87:50:33:92:
         10:f4:61:12:f3:35:12:59:0e:7f:99:43:6d:4a:c8:5a:08:1a:
         b4:2f:6c:7f:63:d8:d3:85:33:e8:2f:82:59:df:0a:0f:59:f5:
         e0:be:18:4f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYzLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjA1MTQyNzUxWhcNMjUxMjE0MTQyNzUxWjAYMRYw
FAYDVQQDEw02OTMyZWJlYy02NmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEApvaQzR9DGzW4/pAuIE81BV2m6fwvimMKGvU/nlbP9UKCDUsUfGd/qOyk
cb6sjC7EQ7joRls6SuraboyUZtL/wl/BLq4vnILB3N3wXT6P8hO1NYG9bxLjyC1C
MhcvuG2Y6ZooiHfOYwHztvE/hnrXMCCd+TO20j6u/WtQBBfPTX5NrvKCfG1SRn+9
eXRpLovU5tqD4MyFrNS3q/hi4L76P6Du1TUSFcN0YkCN5uj3P8WRoT+zF1l+VMj+
iNQvbicExCqBLBAP7fNFAalIv69AEN1ojDkFcO3gdSe644VPxF4GiEeJvIM2NQLe
3/ehfBuw63BU5wvSTmDRDbAm0Kqd8QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPKs
naqatIRNYAG3n7Q1CcYnf+RGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NzMxQ0VBRUQxRTYxMUYwQkI3NTZGRThEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOQMA0GCSqGSIb3DQEBCwUA
A4IBAQBJKJOmtSNrMDoSlGLlurKHK4/oBYHtDX9xyJll2tXB8F3qU7z46GmndK4J
XnHkuJkSPMS0rhDaykSAqKC3gWe5kFnKgSRbJalrLUo5VCcrOr/XWcKgIuU2gb5U
cektZ9fTNSVD0ugMXA45L06QATo3ve3fjBDhWrCWljTJlBstzl8S0SMNo4mDyCsu
evqEZu3XaYsMkO6vej2uZXIU8GFCLv2n1i1CnLNG7D2GIshL39OWdYfoi21r5rvy
x14nKkXUwmc8vDhTmv9v4f95dZ858ndkmodQM5IQ9GES8zUSWQ5/mUNtSshaCBq0
L2x/Y9jThTPoL4JZ3woPWfXgvhhP
-----END CERTIFICATE-----
Generated at Sat Dec 6 17:19:41 2025 by rpki-client