This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAED1252D5B311F0954CDDBFDAE4EC9C.roa
File:                     AAED1252D5B311F0954CDDBFDAE4EC9C.roa (raw, json)
Hash identifier:          mQEsaYhTb2+o9xjVVq6CXFJee/gmoa49jXv4/5SpjqQ=
Subject key identifier:   8F:54:98:8B:1A:C5:61:FC:D7:D6:11:BD:C8:82:4C:BB:D1:3F:EB:11
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018D95
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAED1252D5B311F0954CDDBFDAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 10:33:29 +0000
ROA not before:           Wed 10 Dec 2025 10:33:25 +0000
ROA not after:            Sat 10 Jan 2026 10:33:25 +0000
asID:                     61112
IP address blocks:        45.192.246.0/23 maxlen: 24
                          45.192.246.0/24 maxlen: 24
                          45.192.247.0/24 maxlen: 24
                          45.192.248.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Dec 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101781 (0x18d95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 10 10:33:25 2025 GMT
            Not After : Jan 10 10:33:25 2026 GMT
        Subject: CN=69394c79-b447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c9:06:cf:1e:4c:5e:0b:92:4f:ef:29:9e:e6:
                    92:a5:7a:7c:a8:1f:fa:c5:ed:46:0d:0e:a4:38:b0:
                    bb:73:86:b0:41:e1:68:2b:23:ce:53:cc:18:11:24:
                    07:de:11:71:5c:6e:15:de:7d:ea:5c:e3:07:ae:d2:
                    7d:9b:87:c9:55:68:0b:fa:a1:70:f6:f2:86:7f:44:
                    d1:43:6a:ec:25:8a:17:c0:88:85:06:8b:c4:a7:c3:
                    45:ca:1c:6e:23:88:ed:15:c8:d6:97:3d:19:dc:e4:
                    bf:75:fa:c1:0c:f9:77:4e:55:b5:61:1b:d7:24:c6:
                    df:02:aa:8d:1f:c5:68:fb:82:01:e3:ef:f6:e5:93:
                    bf:97:81:72:96:36:d1:f7:fc:c9:ba:13:2c:51:fa:
                    8b:31:3e:d9:17:b9:2b:a5:d4:2a:55:70:b2:1c:62:
                    60:3b:b5:27:59:f8:3f:66:ff:db:27:56:d5:ee:b3:
                    9a:c1:fc:91:a1:c0:5d:e2:fb:c6:2d:2c:27:92:50:
                    f4:01:3a:5b:78:8a:95:c2:70:21:f4:d4:c9:9c:7b:
                    7b:5b:d8:08:e6:a5:7a:40:3c:15:56:3b:c7:77:fe:
                    20:8a:a1:f6:6e:21:fd:79:0b:09:99:08:5b:b2:f0:
                    76:ee:9c:1d:74:4c:61:fc:9f:9c:98:ae:1c:ae:b3:
                    64:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:54:98:8B:1A:C5:61:FC:D7:D6:11:BD:C8:82:4C:BB:D1:3F:EB:11
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAED1252D5B311F0954CDDBFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.246.0-45.192.249.255

    Signature Algorithm: sha256WithRSAEncryption
         8f:3f:4b:e4:1a:c0:e7:58:51:ff:1e:b7:2f:7e:0c:7d:ee:71:
         a0:ef:15:68:32:03:ba:c4:ed:1e:62:47:b1:3f:be:84:88:61:
         c8:c5:bd:60:46:a8:55:80:73:c5:33:43:9d:85:3b:2f:69:85:
         ef:11:a8:5b:f8:be:05:a2:43:08:7a:f6:3b:08:65:79:4a:81:
         3c:15:19:cb:bd:21:c1:51:bc:d6:fd:d3:4b:01:52:65:6f:33:
         bc:55:e0:1f:85:7f:91:7a:81:cd:85:9e:c9:36:f2:63:b0:ea:
         93:dd:0e:a5:9e:cf:0a:d2:4c:65:3b:cb:8f:b5:43:5b:8d:e5:
         72:ac:4f:79:2a:c1:d5:40:00:0d:49:ec:ec:47:e8:5d:d5:48:
         53:f2:a7:92:af:7a:ef:4a:5d:72:f5:c8:fe:82:da:b3:d4:ad:
         af:47:a0:52:dd:da:a6:24:f7:dc:1a:77:1e:67:b8:45:21:14:
         62:f1:53:24:8f:ba:6c:a0:03:91:75:e7:03:94:62:6a:d4:18:
         19:72:80:69:29:0b:b6:7b:9d:02:2a:45:3d:1f:0f:2e:a1:52:
         22:f5:0b:e3:4d:fa:bb:61:2b:1f:58:6f:ec:0e:8f:42:ef:c2:
         7f:c3:d8:92:fb:38:5a:b8:fe:9c:e1:3e:aa:17:f4:cc:7a:cd:
         fc:85:43:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 00:20:23 2025 by rpki-client