This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/26AC02C4C13011F0AD245CD4DAE4EC9C.roa
File:                     26AC02C4C13011F0AD245CD4DAE4EC9C.roa (raw, json)
Hash identifier:          u0Lh1kts6Klj/xzu3HlLhnlo7+9M2EM4nG7HqjHR7ds=
Subject key identifier:   33:63:7D:2D:7C:93:C7:68:4D:EF:23:42:90:35:CF:10:01:5D:EF:B6
Certificate issuer:       /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial:       0650
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/26AC02C4C13011F0AD245CD4DAE4EC9C.roa
Signing time:             Fri 14 Nov 2025 08:01:40 +0000
ROA not before:           Fri 14 Nov 2025 08:01:36 +0000
ROA not after:            Wed 11 Nov 2026 08:01:36 +0000
asID:                     9009
IP address blocks:        45.221.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
                          rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1616 (0x650)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
        Validity
            Not Before: Nov 14 08:01:36 2025 GMT
            Not After : Nov 11 08:01:36 2026 GMT
        Subject: CN=6916e1e4-e84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:80:c8:f3:cd:78:da:60:42:38:d0:15:29:95:
                    cd:fd:fb:f1:a2:9d:3d:34:d3:c9:12:23:58:47:cb:
                    54:50:5d:d9:d5:5b:43:4c:93:78:f8:b5:58:d7:79:
                    28:65:63:6a:92:0f:e6:58:22:74:35:5a:92:89:7c:
                    71:b6:8f:36:27:67:74:37:94:a2:0a:10:41:6c:82:
                    90:3d:cb:34:23:88:9d:e0:4b:e1:ee:b2:01:27:be:
                    4d:98:3a:27:a3:73:97:14:d9:ec:b9:4b:c0:99:47:
                    82:07:6c:e0:40:22:48:2a:0a:33:33:13:0b:48:67:
                    3e:1b:71:27:99:3a:fa:a1:ac:77:3c:17:7e:ac:c2:
                    e1:3c:98:a5:b1:7b:82:c4:f2:9d:26:2d:ca:3c:93:
                    d2:3e:4f:b3:1a:d6:79:c2:2d:6b:0c:fb:0f:65:e6:
                    e1:cf:60:c3:81:22:cc:12:7d:c9:70:78:5b:7d:c6:
                    77:7b:b7:1a:72:42:03:0e:e8:b3:d8:83:d0:17:1c:
                    5c:aa:bd:98:df:0b:5b:4a:8d:a5:8d:19:fe:dc:dc:
                    93:0e:f2:4a:34:a8:2a:36:03:47:47:ba:52:56:71:
                    b4:a9:47:9e:b1:7c:5a:90:46:ac:39:81:7c:09:f2:
                    7e:3d:22:58:2f:9d:1d:e5:59:e0:66:87:a3:58:db:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:63:7D:2D:7C:93:C7:68:4D:EF:23:42:90:35:CF:10:01:5D:EF:B6
            X509v3 Authority Key Identifier:
                keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/26AC02C4C13011F0AD245CD4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:6d:0c:40:17:10:b2:d1:61:90:13:c5:31:89:55:e9:20:5d:
         fa:45:d1:74:d1:89:00:42:78:46:71:83:0f:31:90:f6:b0:32:
         67:39:80:e5:f8:31:cc:e2:c0:65:5e:74:1d:2d:f1:e1:62:b4:
         0d:b4:41:e9:45:3f:14:fa:70:db:ea:2f:68:6a:26:81:63:93:
         fe:57:f2:3d:7b:88:f2:f6:93:30:b9:cd:8b:a9:7e:d0:21:3a:
         aa:d2:56:1f:1d:b4:40:7c:f9:62:d6:2e:cd:37:53:e2:71:64:
         1a:ff:c1:ff:c2:b5:0a:ba:4b:60:e1:74:fd:db:fc:91:45:5b:
         d9:7e:b3:67:f6:b5:dc:04:2a:d2:d4:6b:66:3e:92:53:4a:fd:
         23:52:e6:18:cd:bb:7d:e0:32:c3:20:f2:7f:c2:7c:64:dc:b4:
         d4:4b:5a:c9:14:30:eb:04:a0:16:81:16:d7:a4:25:98:9b:90:
         e6:d2:82:fe:d7:98:5a:02:d9:31:56:53:63:eb:4c:22:fc:84:
         b9:3a:55:e6:9a:09:85:42:6f:4d:78:73:ed:40:70:ff:e0:d8:
         28:3b:0f:79:d2:2f:b6:be:09:a5:a5:59:6b:9e:21:5f:07:42:
         d1:40:a3:4a:98:3a:d2:96:9e:13:e6:5d:fa:0a:fe:09:a3:60:
         42:76:ce:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:45:25 2025 by rpki-client