This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFFC8C30D04811F0BA23FDC4DAE4EC9C.roa
File:                     EFFC8C30D04811F0BA23FDC4DAE4EC9C.roa (raw, json)
Hash identifier:          0x9u7BlcNr0RJD9YIJeQv1U7jkTpmPirfAuZKDyVwlY=
Subject key identifier:   B8:AA:97:BE:9A:5B:4F:64:6D:E2:31:5B:11:E9:25:1B:C9:08:36:DA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018BA9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFFC8C30D04811F0BA23FDC4DAE4EC9C.roa
Signing time:             Wed 03 Dec 2025 13:06:53 +0000
ROA not before:           Wed 03 Dec 2025 13:06:48 +0000
ROA not after:            Sun 19 Nov 2028 13:06:48 +0000
asID:                     17561
IP address blocks:        45.192.146.0/24 maxlen: 24
                          45.192.147.0/24 maxlen: 24
                          45.192.148.0/24 maxlen: 24
                          45.192.149.0/24 maxlen: 24
                          45.192.150.0/24 maxlen: 24
                          45.192.151.0/24 maxlen: 24
                          45.192.152.0/24 maxlen: 24
                          45.192.153.0/24 maxlen: 24
                          45.192.154.0/24 maxlen: 24
                          45.192.155.0/24 maxlen: 24
                          45.192.156.0/24 maxlen: 24
                          45.192.157.0/24 maxlen: 24
                          45.192.158.0/24 maxlen: 24
                          45.192.159.0/24 maxlen: 24
                          45.194.64.0/24 maxlen: 24
                          45.196.160.0/24 maxlen: 24
                          45.196.161.0/24 maxlen: 24
                          45.196.162.0/24 maxlen: 24
                          45.196.163.0/24 maxlen: 24
                          45.196.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101289 (0x18ba9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  3 13:06:48 2025 GMT
            Not After : Nov 19 13:06:48 2028 GMT
        Subject: CN=693035ed-352d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:be:f2:36:1e:f0:22:a7:28:84:34:4f:cc:fb:
                    bf:ec:61:4f:6d:bb:53:ab:50:6b:96:f8:e8:27:47:
                    06:d9:77:ca:9b:92:8e:a2:54:70:a5:2b:73:48:e4:
                    fd:85:48:f7:00:c9:a0:09:81:50:d3:99:d5:fb:a1:
                    d6:e7:e7:15:32:67:75:70:c3:e4:ef:3f:bf:bc:2f:
                    6e:ed:c8:90:54:f7:ad:df:59:8c:4d:fc:d0:08:67:
                    72:ae:c9:41:85:0f:dd:05:67:8e:dd:67:f3:99:e5:
                    38:b6:46:09:2a:6f:7f:7a:87:c7:8d:87:2f:3e:27:
                    92:7f:1a:19:c4:0e:b2:d9:9a:53:16:00:7b:9c:26:
                    8b:cb:03:71:74:8b:bd:4f:80:0f:c1:fa:15:f4:e7:
                    2e:55:2b:86:8c:6b:17:9e:da:e0:9e:58:30:0b:09:
                    20:19:74:3c:ad:3c:30:6f:57:f6:1c:e4:c1:e0:dc:
                    39:37:85:13:cb:c9:f4:1d:90:47:6e:30:85:96:a0:
                    7c:12:51:03:db:bb:22:a7:96:2d:ba:6f:2e:3d:c1:
                    6a:15:7b:cb:28:99:5c:ce:c3:64:e5:ac:79:21:d2:
                    6b:aa:81:6b:4a:44:13:ed:78:2e:72:a3:a6:23:ec:
                    09:5f:f1:65:93:12:7c:15:5e:67:4f:1b:93:30:9f:
                    20:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:AA:97:BE:9A:5B:4F:64:6D:E2:31:5B:11:E9:25:1B:C9:08:36:DA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFFC8C30D04811F0BA23FDC4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.146.0-45.192.159.255
                  45.194.64.0/24
                  45.196.160.0-45.196.164.255

    Signature Algorithm: sha256WithRSAEncryption
         5e:45:0f:46:07:b4:a8:5b:d9:81:49:2b:33:6c:70:95:3f:44:
         a3:17:d0:a2:ee:70:d0:d7:ef:b1:f0:2e:96:80:aa:83:a2:e2:
         12:57:65:5c:9a:44:fb:07:8e:d9:b4:92:45:b7:55:eb:e8:80:
         e0:f0:f4:5b:f4:77:05:10:34:0c:80:d1:b3:88:c9:80:22:1e:
         dc:09:a4:6c:b5:0c:62:18:d0:37:73:e8:79:15:1a:a7:4f:11:
         79:99:d9:74:25:09:40:37:a3:29:b7:85:23:a1:37:93:11:ee:
         3b:5d:c8:3d:26:64:15:28:96:13:19:97:27:02:ee:7e:9d:d2:
         33:1f:22:ff:58:3b:28:4a:a8:23:87:d2:bb:db:45:72:c2:f0:
         ca:c9:87:27:92:49:71:fd:50:42:93:97:1b:ab:8b:e8:65:1e:
         76:81:48:c5:a4:69:03:6b:c1:f3:d3:70:c6:a9:e6:f3:8c:b1:
         37:f7:36:f5:b7:c5:5c:d8:7e:3b:8c:8f:c6:ce:77:08:67:9d:
         dc:ba:56:18:29:67:1c:48:4e:5b:32:84:4f:4c:0d:5a:e7:49:
         96:c4:d4:fd:89:d4:a2:64:e0:ee:17:55:69:0c:a4:78:b1:5f:
         e2:da:46:1b:cd:20:f0:5c:92:6b:3f:b9:5d:f4:ad:46:b3:e4:
         5e:a7:11:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 09:54:40 2025 by rpki-client