This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B672990CDB2C11F0911AA794DAE4EC9C.roa
File:                     B672990CDB2C11F0911AA794DAE4EC9C.roa (raw, json)
Hash identifier:          eMdeSGMKry81DnlPqw4j5HW7bACcLb+BS5nA9KZDWd4=
Subject key identifier:   F9:4A:EB:AD:25:CA:B6:4D:86:BB:E2:D7:21:DE:7A:EC:32:E1:8E:98
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018F46
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B672990CDB2C11F0911AA794DAE4EC9C.roa
Signing time:             Wed 17 Dec 2025 09:42:34 +0000
ROA not before:           Wed 17 Dec 2025 09:42:29 +0000
ROA not after:            Wed 04 Feb 2026 09:42:29 +0000
asID:                     204741
IP address blocks:        45.194.65.0/24 maxlen: 24
                          45.195.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102214 (0x18f46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 17 09:42:29 2025 GMT
            Not After : Feb  4 09:42:29 2026 GMT
        Subject: CN=69427b0a-3d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c2:fe:e5:fa:50:46:8c:f0:06:d1:40:1b:62:
                    00:5c:ad:93:76:b9:9f:41:9e:de:61:ca:16:d2:dd:
                    29:78:d4:cb:0e:1c:0f:9a:7f:02:13:8f:5c:96:71:
                    96:ae:9f:c9:70:94:42:d9:76:3a:15:a6:c4:f5:a2:
                    50:f2:8a:a2:ef:a1:f4:ee:6d:b8:c4:13:04:1f:64:
                    d6:37:70:86:8b:5f:1d:4c:f1:36:c4:b1:6a:61:51:
                    84:72:10:61:34:e5:3a:cf:63:ab:b1:f9:0f:a6:33:
                    45:00:39:e4:57:95:95:92:bb:38:e9:1d:ed:56:50:
                    f2:72:0d:25:eb:33:69:b8:0a:60:4f:6c:9b:4d:ae:
                    4a:1f:39:d1:02:79:29:e6:37:bd:fd:b7:12:11:94:
                    5c:6d:6b:6b:a9:7b:5c:1a:4c:9d:c9:4a:f5:29:b4:
                    c4:ee:21:08:3c:61:d6:54:12:1a:a5:5e:87:89:e9:
                    36:b6:17:eb:82:d8:c7:70:c9:04:a5:03:49:08:e3:
                    7b:07:11:bd:70:9d:1b:c6:88:fc:87:dd:71:a8:13:
                    e0:50:d8:2c:3e:a3:fb:e3:fa:ef:46:03:1e:03:7b:
                    e9:af:8e:11:c8:9c:e4:b0:4b:cc:7b:d5:80:43:a9:
                    30:b7:cb:1d:74:d2:71:f8:11:43:c6:93:17:cb:8f:
                    c7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:4A:EB:AD:25:CA:B6:4D:86:BB:E2:D7:21:DE:7A:EC:32:E1:8E:98
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B672990CDB2C11F0911AA794DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.65.0/24
                  45.195.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:db:53:a6:d3:40:9f:a6:62:06:a8:a4:d9:8d:2d:eb:d3:54:
         38:0a:c6:4a:c7:71:ca:ca:72:94:a2:10:08:45:29:98:7b:d1:
         20:5c:d7:40:49:c8:cf:66:10:d4:e2:90:45:e9:e8:24:7f:e4:
         65:d0:4d:06:95:72:d8:24:a3:08:cf:8d:85:29:28:52:77:48:
         bc:65:56:56:ff:c8:65:98:35:56:6b:69:c5:52:c2:73:49:7e:
         77:be:d2:7a:71:ef:ef:67:5f:66:03:e1:f6:8d:5e:fb:65:e8:
         bf:5d:60:5c:84:c3:05:d3:87:fc:cb:29:22:02:b3:c9:d9:99:
         94:93:0f:0e:76:e4:6f:a5:57:32:8c:2a:1b:87:6f:7e:f5:cb:
         4c:37:c9:31:48:0d:93:34:48:9c:c3:26:79:66:11:2d:92:ac:
         6f:d7:39:b8:54:e4:84:e5:86:dc:56:15:b4:28:c1:9c:1b:b8:
         17:89:a4:8c:8f:a1:69:19:9f:1f:25:46:67:42:93:f0:c8:1a:
         93:83:09:6e:f3:de:f3:d4:72:18:5c:56:3e:ee:b5:10:c9:fb:
         9b:90:4b:5a:2b:3f:42:04:c6:df:3e:84:5f:70:12:d8:49:14:
         a6:41:43:fa:2c:3b:d7:2e:6f:3b:2e:1b:47:02:e4:27:61:0d:
         e1:7a:33:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 15:57:30 2025 by rpki-client