This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9B49D9EDA6611F0981EE3B8DAE4EC9C.roa
File:                     A9B49D9EDA6611F0981EE3B8DAE4EC9C.roa (raw, json)
Hash identifier:          aFBiL5VNBvb3Cv3Lmc8ayaT4lE0sFopdjSeG1swKdy4=
Subject key identifier:   95:D4:FE:9B:61:CA:17:C8:B8:25:F3:7F:06:90:25:4A:0A:FD:1F:68
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018EDA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9B49D9EDA6611F0981EE3B8DAE4EC9C.roa
Signing time:             Tue 16 Dec 2025 10:04:52 +0000
ROA not before:           Tue 16 Dec 2025 10:04:47 +0000
ROA not after:            Wed 04 Feb 2026 10:04:47 +0000
asID:                     204741
IP address blocks:        45.194.65.0/24 maxlen: 24
                          45.195.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102106 (0x18eda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 16 10:04:47 2025 GMT
            Not After : Feb  4 10:04:47 2026 GMT
        Subject: CN=69412ec4-75e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7f:65:d0:7b:26:2f:f2:61:7a:a7:84:fc:28:
                    c3:20:a8:91:d3:e5:f4:b7:e3:2f:98:bc:5d:e8:92:
                    0d:6c:7b:c6:22:68:f8:d5:34:26:6b:5d:30:40:70:
                    3e:f5:55:7a:69:74:ef:b5:2a:32:51:a6:c6:51:8a:
                    e8:7a:1b:23:91:0a:82:d9:89:5b:0f:4e:d6:8b:15:
                    9d:28:fb:7c:d7:a5:bf:44:d3:33:14:86:3a:aa:ed:
                    ae:26:f6:fa:8d:2f:6c:84:60:11:fe:ba:12:96:65:
                    41:01:a8:d8:c8:b5:e4:e1:16:2c:54:d5:64:5d:c6:
                    41:90:35:6f:91:bd:c5:cd:e8:51:73:ea:f4:54:38:
                    c3:c7:9b:83:e5:ce:14:d2:df:b5:14:9e:5e:3a:db:
                    a6:08:b3:15:19:4b:88:c8:0a:5a:91:e6:e2:07:fb:
                    3b:99:9c:db:8a:34:c7:46:be:9d:c3:f0:46:93:07:
                    df:1f:d1:b3:5c:09:4e:63:2d:2d:f7:d3:53:03:50:
                    a4:c1:77:04:6b:c8:b9:d3:5e:b0:92:f4:1f:35:3e:
                    3a:ba:fa:01:8c:a7:25:d2:5d:ab:ac:dd:fc:fd:89:
                    de:42:97:c2:61:78:2a:3b:6b:32:5b:f7:ff:bc:e9:
                    e1:68:d0:c9:a5:c2:3a:ad:34:6e:a0:e9:76:a9:7f:
                    96:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D4:FE:9B:61:CA:17:C8:B8:25:F3:7F:06:90:25:4A:0A:FD:1F:68
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9B49D9EDA6611F0981EE3B8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.65.0/24
                  45.195.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:b1:53:75:9c:f6:39:8d:0e:e5:08:bb:0a:cc:e7:34:6a:2f:
         23:93:04:cc:33:8d:bf:34:98:73:a2:1a:15:59:b0:d5:54:eb:
         0a:62:29:31:1c:93:89:70:3d:e7:8e:c0:c2:4e:80:ae:75:63:
         f5:a3:78:b4:c3:32:61:71:55:17:b7:a7:f7:c8:e1:f8:cb:94:
         5c:7b:55:7a:da:5b:dc:8a:f7:55:38:4f:cc:3e:95:fc:e7:ff:
         38:3c:31:52:47:36:e8:cd:f6:16:fb:13:35:a8:36:e4:9b:70:
         4f:82:6e:ad:a3:85:6c:74:f7:04:1c:a9:3b:76:14:a1:e1:8b:
         58:62:f9:be:18:a8:f3:b1:d4:33:d6:2d:71:3b:cf:2e:d6:63:
         ab:74:54:d7:1d:bf:5e:7b:a2:a4:f2:18:b2:62:34:38:86:ce:
         fb:47:15:7c:fb:a5:27:68:a2:60:a5:68:14:5f:9a:e1:87:d6:
         78:fa:f4:86:ae:b1:cf:ac:fc:3a:97:c4:48:07:05:ff:92:ff:
         44:40:a9:74:62:61:6b:a0:b7:46:0d:16:31:5e:5f:3c:96:48:
         37:69:3d:62:45:90:7f:c3:ae:f7:56:39:c6:55:e3:c9:52:a4:
         2b:31:51:f0:17:bb:ec:4a:ec:da:94:d9:54:1c:22:a4:26:3a:
         5b:57:c3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 15:56:54 2025 by rpki-client