This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD8E9C16D1C711F09AABF6ACDAE4EC9C.roa
File:                     DD8E9C16D1C711F09AABF6ACDAE4EC9C.roa (raw, json)
Hash identifier:          FNZkfG4fz1h6P2OYOjd9eR8PajqbNErjuyWJsj/P6Sg=
Subject key identifier:   97:DD:07:7D:7E:41:50:7C:CE:D2:F2:FB:B9:BD:1F:76:C1:68:2F:3E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018C97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD8E9C16D1C711F09AABF6ACDAE4EC9C.roa
Signing time:             Fri 05 Dec 2025 10:48:00 +0000
ROA not before:           Fri 05 Dec 2025 10:47:54 +0000
ROA not after:            Thu 22 Jan 2026 10:47:54 +0000
asID:                     137899
IP address blocks:        45.205.16.0/20 maxlen: 24
                          45.207.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101527 (0x18c97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  5 10:47:54 2025 GMT
            Not After : Jan 22 10:47:54 2026 GMT
        Subject: CN=6932b860-d506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c7:d6:b8:33:c7:cf:ef:bc:9b:66:87:71:4c:
                    75:4c:19:9a:b1:f5:f4:81:ff:e0:bb:6f:1c:7f:34:
                    75:6e:c2:88:23:9e:ee:e7:3f:17:16:27:30:70:70:
                    fc:76:d7:b9:e9:bb:3f:4e:2b:a9:36:b5:45:45:76:
                    e8:40:1c:a2:55:0f:2d:18:7a:16:50:84:42:4e:f7:
                    f6:38:d9:11:34:b0:b7:e3:3d:de:ec:20:44:09:1a:
                    85:45:f8:9b:02:d5:81:12:a7:dd:93:b5:1b:a5:08:
                    03:a4:bd:ce:42:99:9d:94:69:9c:b2:eb:17:dc:be:
                    52:81:02:f2:ae:27:80:f4:e3:a3:d7:4b:df:45:c2:
                    5a:bc:24:42:df:cb:3b:3f:1c:0c:b6:fe:d0:77:bd:
                    51:ec:8e:00:db:80:30:4b:cb:ff:6d:35:9e:23:eb:
                    55:18:6f:c9:b8:17:c8:03:0d:8f:20:8b:a1:e3:85:
                    41:2f:42:b4:6f:9e:e6:d7:2e:74:95:bf:f1:f6:b1:
                    e5:18:81:5b:4f:85:ce:b2:2e:e7:6c:a3:63:4b:d5:
                    20:2f:cc:be:99:8e:4e:f0:07:66:21:22:2d:26:1f:
                    9d:56:08:c0:7e:02:61:c7:30:63:b0:02:0b:d6:68:
                    19:a8:e8:4f:8f:88:5b:30:5f:14:b1:d5:09:0a:58:
                    d9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:DD:07:7D:7E:41:50:7C:CE:D2:F2:FB:B9:BD:1F:76:C1:68:2F:3E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD8E9C16D1C711F09AABF6ACDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.16.0/20
                  45.207.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         36:50:d7:0a:f3:8e:08:b7:8a:96:51:f2:e3:a5:be:55:54:6e:
         7d:7a:8f:ff:37:85:b7:97:04:21:2d:9e:34:68:5f:1d:5c:0b:
         80:88:9d:71:fa:62:2f:9a:79:3a:1f:09:05:e5:a2:db:02:41:
         83:a6:f2:95:0c:0e:e6:aa:83:df:bb:43:78:4b:eb:1d:1e:48:
         e3:57:6a:d5:ee:40:e5:12:2b:30:90:54:a4:01:2e:d0:da:ad:
         c6:1e:46:ab:e5:3d:a7:ab:57:1b:29:6b:25:42:f0:14:c0:60:
         85:17:eb:45:85:b1:9e:ed:99:93:70:bd:05:11:7e:73:8a:c3:
         e4:4c:30:77:96:c9:e6:9c:5a:db:80:7a:91:fb:17:bc:70:95:
         cd:ee:40:3d:c4:fb:13:e2:0f:4d:66:3a:a2:ab:e2:d4:3b:ff:
         ac:46:a3:21:42:2b:28:1a:52:c9:b3:ec:df:16:99:45:75:6d:
         ce:1c:df:3e:8b:b3:52:b9:df:51:fd:f3:e7:ca:c7:e4:75:73:
         54:58:52:83:0f:b9:7e:cf:93:6e:2c:31:79:3a:ba:ca:b3:3d:
         e0:34:2d:5b:e7:0a:58:39:b4:81:2a:7a:e5:a9:09:d6:6b:9e:
         a9:4f:73:42:c6:c4:84:f8:d3:1a:04:fc:ed:b6:93:88:cb:d3:
         0b:bc:35:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:02:52 2025 by rpki-client