This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A164CAB4D0F811F080ECEF99DAE4EC9C.roa
File:                     A164CAB4D0F811F080ECEF99DAE4EC9C.roa (raw, json)
Hash identifier:          9x2dgKaG7Nbw8H4sz32G6gHSibKQ6WbslTZFJwtThFA=
Subject key identifier:   48:E8:96:7A:17:6D:6B:8F:34:BA:C0:36:13:14:63:56:61:DE:C4:30
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018C09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A164CAB4D0F811F080ECEF99DAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 10:04:33 +0000
ROA not before:           Thu 04 Dec 2025 10:04:28 +0000
ROA not after:            Fri 09 Jan 2026 10:04:28 +0000
asID:                     1405
IP address blocks:        45.192.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101385 (0x18c09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  4 10:04:28 2025 GMT
            Not After : Jan  9 10:04:28 2026 GMT
        Subject: CN=69315cb1-7bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b6:66:1a:9c:78:9c:5e:86:e1:41:b7:0c:17:
                    cd:71:05:95:2b:72:57:64:c1:af:29:47:94:b0:f4:
                    c4:8c:5b:1f:7f:1a:7b:7f:42:4b:08:c2:ce:99:94:
                    e4:fc:30:d0:6c:28:89:44:f0:37:f5:23:c0:2d:2c:
                    34:ee:17:0d:0b:53:7a:e0:6a:9a:51:47:93:a3:88:
                    47:a7:f6:e5:ab:55:d2:e0:0a:42:59:4e:0a:dc:44:
                    ef:81:28:b1:a2:1a:e3:96:e8:12:b8:9b:21:58:7c:
                    03:83:80:b5:f0:55:66:78:96:e0:d1:15:f7:98:17:
                    25:3b:1b:9a:16:76:41:f4:3d:c8:08:80:2a:af:13:
                    32:07:07:6b:63:e6:79:77:75:7d:9e:b1:fd:1d:9b:
                    96:69:0a:e2:ad:13:5e:a3:f3:33:32:f7:f1:65:22:
                    13:6e:8f:6c:cd:b2:be:b2:0d:f8:9b:d1:9a:f9:79:
                    2b:0b:b3:bc:e0:34:6a:58:1e:0c:96:32:cf:04:3e:
                    d6:c5:6e:98:65:d6:64:1e:0b:31:09:a1:4d:1c:01:
                    02:1e:e9:91:30:7d:a8:88:fe:d4:33:a3:6a:7f:09:
                    a3:f5:32:0f:e6:13:14:9a:22:04:8c:d1:28:6f:c6:
                    fd:e4:60:4b:47:ee:25:6c:6e:22:90:56:98:44:51:
                    09:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E8:96:7A:17:6D:6B:8F:34:BA:C0:36:13:14:63:56:61:DE:C4:30
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A164CAB4D0F811F080ECEF99DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:92:7a:3f:7d:52:8c:83:e3:ec:5f:ed:8c:70:40:12:e9:98:
         fd:6e:34:72:09:1e:cc:c0:2f:9e:75:a2:93:a2:11:f9:7e:e2:
         08:db:e9:a9:22:89:1c:f8:77:c7:8f:19:29:53:70:42:9e:f3:
         68:29:47:cc:8a:cc:e6:6f:e6:2e:4c:cb:79:f7:06:64:b7:4e:
         02:64:c3:be:5a:35:1e:34:6b:4e:bb:74:29:ce:43:ba:d7:bb:
         36:cf:cf:db:a2:57:e8:56:a7:24:62:68:92:65:33:6b:bd:70:
         c5:22:87:8b:5c:2a:1c:61:6e:b8:df:85:21:8a:43:56:80:79:
         d2:22:cc:5b:06:b6:ca:ca:6d:3f:a6:a3:91:8a:48:04:b6:28:
         9f:a4:fe:d7:0e:24:9f:84:56:f0:9d:c2:47:77:6e:f8:1f:50:
         d9:15:6c:2c:69:7a:36:d3:77:f3:0b:6d:48:19:9f:a6:df:38:
         c9:32:e7:5c:27:89:d3:c3:f6:ae:14:8f:58:da:fc:ea:9c:68:
         e6:ba:30:35:28:73:0d:03:db:ec:5c:da:44:4a:8d:42:41:20:
         5d:6e:56:b7:a2:fb:14:a3:de:20:e1:f0:38:00:36:e9:74:01:
         f5:73:04:bf:fe:3c:3e:52:c2:6d:91:2a:88:5d:e1:2c:44:c3:
         45:77:54:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 10:02:17 2025 by rpki-client