This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/4040C74AC52E11F0B05A368DDAE4EC9C.roa
File:                     4040C74AC52E11F0B05A368DDAE4EC9C.roa (raw, json)
Hash identifier:          g29ZcN62OuQIybrymKKsA2XNqXJfFk2KbrGYZddauWU=
Subject key identifier:   1B:A9:87:3D:8D:5F:75:E2:CC:2B:2B:CD:FE:D0:D7:FC:9E:FD:95:DC
Certificate issuer:       /CN=F362D462AR/serialNumber=1E53A9CDBFE5C25263582FBB026B04D0204B6009
Certificate serial:       0B
Authority key identifier: 1E:53:A9:CD:BF:E5:C2:52:63:58:2F:BB:02:6B:04:D0:20:4B:60:09
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/4040C74AC52E11F0B05A368DDAE4EC9C.roa
Signing time:             Wed 19 Nov 2025 09:58:09 +0000
ROA not before:           Wed 19 Nov 2025 09:58:03 +0000
ROA not after:            Mon 19 Nov 2035 09:58:03 +0000
asID:                     37506
IP address blocks:        165.90.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
                          rsync://rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Dec 2025 05:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362D462AR, serialNumber=1E53A9CDBFE5C25263582FBB026B04D0204B6009
        Validity
            Not Before: Nov 19 09:58:03 2025 GMT
            Not After : Nov 19 09:58:03 2035 GMT
        Subject: CN=691d94b1-32dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b0:d8:ec:d1:19:25:75:28:99:84:f2:22:df:
                    15:64:9a:21:3b:42:37:54:86:f8:ae:c5:16:4d:9c:
                    e3:6d:df:d3:e8:44:45:49:59:80:db:6f:fa:bf:23:
                    46:52:e3:e0:21:7a:67:d9:b1:c8:7a:4c:22:63:7d:
                    f3:ea:21:c4:0e:8a:ed:c0:84:7c:88:f7:a5:37:f9:
                    33:ec:4f:97:68:c6:11:ea:bd:e3:db:23:87:9e:ca:
                    fe:dc:18:c4:6b:11:c8:e7:91:6d:84:82:9a:27:69:
                    bf:2b:12:ea:6e:9e:02:df:aa:3b:30:af:d4:b9:31:
                    1d:58:07:3f:f7:fa:d0:49:0d:f7:ab:49:36:c8:ac:
                    22:73:69:75:6a:2e:0f:42:54:0c:fe:36:c3:38:73:
                    29:8c:e3:ef:f1:22:36:23:3b:67:dd:c7:0f:fd:4c:
                    04:40:44:dc:3e:4f:6d:5d:83:65:e3:76:fb:35:9a:
                    04:81:aa:f1:7f:85:a9:6f:5e:a1:dd:ae:fd:e7:6c:
                    44:58:1e:c3:5a:b7:e7:63:c1:01:6d:1c:85:f4:b5:
                    d7:7b:6b:25:0c:83:58:99:04:89:2f:b0:93:3f:b0:
                    80:52:29:19:d6:da:9e:1b:98:64:93:eb:4d:48:cc:
                    61:ee:00:14:27:5f:a5:97:78:02:58:54:d5:df:52:
                    4d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A9:87:3D:8D:5F:75:E2:CC:2B:2B:CD:FE:D0:D7:FC:9E:FD:95:DC
            X509v3 Authority Key Identifier:
                keyid:1E:53:A9:CD:BF:E5:C2:52:63:58:2F:BB:02:6B:04:D0:20:4B:60:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/4040C74AC52E11F0B05A368DDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.90.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:fd:89:ad:e4:61:ca:a4:94:a1:ad:27:4d:1e:63:e1:93:03:
         36:f8:e4:77:3c:d1:64:6c:56:5a:c7:36:a8:0f:c4:90:0c:4f:
         8a:f3:08:96:14:86:ad:7b:e3:6d:02:0c:47:57:39:a7:03:44:
         32:9c:20:0c:cd:33:70:25:40:e1:54:fc:ef:14:f1:d6:1f:d0:
         b7:66:8d:a9:48:ed:80:78:58:56:60:5b:05:99:ba:58:82:cd:
         f7:4c:be:10:23:3e:ee:8c:3c:91:51:ed:ac:e4:3c:f9:7a:91:
         bd:e1:43:10:09:3c:1b:a7:85:71:a8:66:4a:dc:b4:41:88:0c:
         51:c6:4c:60:66:4e:6b:c7:21:73:1d:2a:f8:fa:01:4b:fa:93:
         2e:7a:94:ff:55:9a:b3:2b:9b:a6:88:0d:07:e8:90:b4:2b:75:
         20:67:98:43:04:eb:c6:51:3f:3e:aa:33:fc:19:03:30:32:06:
         f2:c2:39:94:55:f0:84:b5:80:b3:ca:03:ae:1c:f6:ba:ba:da:
         70:b9:3a:64:c9:24:a0:7c:79:27:21:79:11:3d:ac:c7:97:b1:
         f5:b6:63:56:4e:63:31:bb:5c:e3:78:b6:3b:31:2a:6e:fb:34:
         83:cd:2f:ff:71:f9:b0:85:53:7c:f2:9d:07:e8:41:eb:36:dd:
         37:00:bd:84
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBCzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
RDQ2MkFSMTEwLwYDVQQFEygxRTUzQTlDREJGRTVDMjUyNjM1ODJGQkIwMjZCMDRE
MDIwNEI2MDA5MB4XDTI1MTExOTA5NTgwM1oXDTM1MTExOTA5NTgwM1owGDEWMBQG
A1UEAxMNNjkxZDk0YjEtMzJkZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN6w2OzRGSV1KJmE8iLfFWSaITtCN1SG+K7FFk2c423f0+hERUlZgNtv+r8j
RlLj4CF6Z9mxyHpMImN98+ohxA6K7cCEfIj3pTf5M+xPl2jGEeq949sjh57K/twY
xGsRyOeRbYSCmidpvysS6m6eAt+qOzCv1LkxHVgHP/f60EkN96tJNsisInNpdWou
D0JUDP42wzhzKYzj7/EiNiM7Z93HD/1MBEBE3D5PbV2DZeN2+zWaBIGq8X+FqW9e
od2u/edsRFgew1q352PBAW0chfS113trJQyDWJkEiS+wkz+wgFIpGdbanhuYZJPr
TUjMYe4AFCdfpZd4AlhU1d9STTsCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBQbqYc9
jV914swrK83+0Nf8nv2V3DAfBgNVHSMEGDAWgBQeU6nNv+XCUmNYL7sCawTQIEtg
CTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkQ0NjIvQkQ2Njg0MDhDMDYwMTFGMEExNDk3Q0I5REFFNEVDOUMvSGxPcHpi
X2x3bEpqV0MtN0Ftc0UwQ0JMWUFrLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
SGxPcHpiX2x3bEpqV0MtN0Ftc0UwQ0JMWUFrLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MkQ0NjIvQkQ2Njg0MDhDMDYwMTFGMEExNDk3Q0I5REFFNEVD
OUMvNDA0MEM3NEFDNTJFMTFGMEIwNUEzNjhEREFFNEVDOUMucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBKVa8DANBgkqhkiG9w0BAQsFAAOC
AQEAkv2JreRhyqSUoa0nTR5j4ZMDNvjkdzzRZGxWWsc2qA/EkAxPivMIlhSGrXvj
bQIMR1c5pwNEMpwgDM0zcCVA4VT87xTx1h/Qt2aNqUjtgHhYVmBbBZm6WILN90y+
ECM+7ow8kVHtrOQ8+XqRveFDEAk8G6eFcahmSty0QYgMUcZMYGZOa8chcx0q+PoB
S/qTLnqU/1WasyubpogNB+iQtCt1IGeYQwTrxlE/Pqoz/BkDMDIG8sI5lFXwhLWA
s8oDrhz2urracLk6ZMkkoHx5JyF5ET2sx5ex9bZjVk5jMbtc43i2OzEqbvs0g80v
/3H5sIVTfPKdB+hB6zbdNwC9hA==
-----END CERTIFICATE-----
Generated at Fri Dec 5 00:25:01 2025 by rpki-client