This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1E5F55ED11411F0A63BC0C4DAE4EC9C.roa
File:                     B1E5F55ED11411F0A63BC0C4DAE4EC9C.roa (raw, json)
Hash identifier:          7zC13uXW0oEIpf4o59YQF3mAJUCcZLMzuTdNzthbkEM=
Subject key identifier:   9F:F8:26:23:70:28:1C:25:5E:04:53:38:4B:16:13:02:BF:01:3E:2D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018C1D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1E5F55ED11411F0A63BC0C4DAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 13:25:27 +0000
ROA not before:           Thu 04 Dec 2025 13:25:21 +0000
ROA not after:            Tue 06 Jan 2026 13:25:21 +0000
asID:                     204044
IP address blocks:        45.206.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101405 (0x18c1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  4 13:25:21 2025 GMT
            Not After : Jan  6 13:25:21 2026 GMT
        Subject: CN=69318bc6-8cde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:3d:9a:d6:8c:a4:63:42:dd:ed:98:02:60:
                    c4:2f:32:f8:c2:32:60:ae:15:7c:18:bb:4e:1a:bc:
                    08:f5:7a:33:0d:cf:66:a4:fe:ed:ab:55:6a:ed:cc:
                    d3:52:20:11:0d:4b:2f:2f:3a:8e:78:b5:63:05:70:
                    65:57:83:8f:3c:f8:0a:0d:a1:4f:e1:06:c8:ce:38:
                    0d:63:f3:6f:f7:ee:34:71:00:be:8d:cd:0d:ca:11:
                    da:1d:a7:71:9b:2a:96:36:83:1a:36:1c:26:a7:36:
                    ce:96:b0:c5:bc:2f:cf:18:a7:d5:7e:dc:72:73:fa:
                    cb:b8:e2:32:18:8e:48:d6:0c:da:72:fc:07:51:a3:
                    e6:bf:46:b0:e2:3d:07:5d:13:95:b6:82:d8:bf:78:
                    cc:af:9d:27:50:c5:d2:e4:89:ff:38:a2:78:27:69:
                    1b:ce:a3:e8:6b:6d:13:c9:84:79:01:2e:f7:99:17:
                    04:d6:64:00:2f:9d:65:9c:89:4a:d7:f6:59:02:a7:
                    bc:27:3a:bd:a8:a5:54:e2:c8:e9:50:9f:f1:da:7e:
                    8b:a8:55:c8:46:07:b2:7d:79:f9:6a:db:89:68:56:
                    44:7c:11:12:b5:6d:f4:d2:30:65:3e:29:d3:a6:7f:
                    77:a1:c0:0d:86:13:de:79:0c:79:ce:6f:9c:36:cd:
                    b6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F8:26:23:70:28:1C:25:5E:04:53:38:4B:16:13:02:BF:01:3E:2D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1E5F55ED11411F0A63BC0C4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:e8:d2:63:9b:39:bf:88:88:4c:1b:29:54:39:a2:5c:71:a5:
         d8:a7:fd:a8:dc:49:cb:05:13:05:fb:b3:c9:35:9b:34:f3:e7:
         7b:1e:f0:12:eb:ed:b5:9e:e8:43:d1:b3:e4:e5:50:c0:fd:4a:
         48:01:e3:9c:18:b0:9e:09:11:c7:bd:d5:06:17:15:ea:28:6f:
         14:34:63:1c:6e:e2:15:99:0a:97:67:e5:98:83:3d:6e:2f:bf:
         cd:51:00:f3:23:ea:75:3f:45:3d:f0:d8:35:49:a8:0b:8c:28:
         f2:b5:3a:c7:ac:eb:20:c2:90:92:0e:1a:23:24:9b:a4:fe:32:
         70:42:95:08:76:39:8b:d2:ca:1d:46:77:4b:1b:97:35:6f:ae:
         f0:00:cd:bf:dd:d7:2c:1e:bf:b2:20:d7:40:2f:b2:4a:f6:bf:
         4a:fb:ae:48:68:33:c0:d9:73:65:c3:bc:51:14:59:fc:ee:f9:
         7e:a7:cb:f5:f9:4a:21:57:39:f1:79:6e:ef:b8:7c:ab:0a:83:
         eb:f1:b5:81:1a:6c:a7:e0:9c:55:b2:53:79:81:3d:c5:1c:56:
         35:d7:32:e5:ad:51:57:18:95:86:8e:fb:e4:2b:1a:17:03:a3:
         fc:e7:af:f1:d8:2f:a3:8c:d3:ef:f5:63:15:41:4a:dc:a3:24:
         ff:ff:2f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 13:47:04 2025 by rpki-client