This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/57E99612C13011F0B2D967D4DAE4EC9C.roa
File:                     57E99612C13011F0B2D967D4DAE4EC9C.roa (raw, json)
Hash identifier:          Vn8y4XlwVlQ9G5NZ1jwT9Kup03DVVU6TgxK0ookbgbg=
Subject key identifier:   68:0F:98:65:9B:D9:18:BC:6E:2C:51:65:41:15:D7:8D:78:46:76:50
Certificate issuer:       /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial:       0652
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/57E99612C13011F0B2D967D4DAE4EC9C.roa
Signing time:             Fri 14 Nov 2025 08:03:03 +0000
ROA not before:           Fri 14 Nov 2025 08:02:58 +0000
ROA not after:            Wed 11 Nov 2026 08:02:58 +0000
asID:                     9009
IP address blocks:        45.221.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
                          rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1618 (0x652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
        Validity
            Not Before: Nov 14 08:02:58 2025 GMT
            Not After : Nov 11 08:02:58 2026 GMT
        Subject: CN=6916e237-2e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c9:bc:61:78:ea:37:e0:9b:43:ca:7f:ac:e5:
                    31:45:05:8d:c8:89:ac:da:ba:b3:4d:b8:08:d2:a1:
                    38:51:a4:51:41:28:6a:90:bd:e0:56:08:90:2f:96:
                    8a:36:de:f4:e2:71:6f:fe:bc:1f:09:9f:6d:2d:cc:
                    14:0a:b7:6a:20:9b:c1:03:34:d5:cc:91:d9:96:b4:
                    8a:da:30:f5:95:01:60:b0:5f:51:17:7e:41:db:e0:
                    57:65:fb:a6:fa:de:bc:95:3d:94:aa:5f:88:e2:59:
                    c0:35:39:34:8d:f6:cf:f3:aa:4f:f2:74:34:38:01:
                    37:55:ec:9c:a0:4d:0b:7a:ea:a0:03:da:08:90:d6:
                    49:96:ec:de:d9:84:19:fb:d7:56:2d:1d:42:84:15:
                    57:a7:9a:a3:1c:cd:71:ac:86:9a:b0:72:c8:18:a6:
                    67:04:31:2d:5c:fe:2b:ba:8f:93:be:27:a1:c9:d1:
                    c1:ae:80:f2:28:b7:f7:c2:da:41:c7:4b:47:35:96:
                    ee:0d:d2:f6:9c:ae:53:04:0b:cc:ea:83:57:b5:38:
                    f1:34:4d:c5:22:2e:4c:96:51:aa:0e:08:25:0b:86:
                    42:e6:43:2b:d7:4e:16:13:d0:ab:3b:e9:ee:95:21:
                    f1:89:ae:fe:63:24:25:bd:61:c0:8d:40:77:5c:ae:
                    dc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0F:98:65:9B:D9:18:BC:6E:2C:51:65:41:15:D7:8D:78:46:76:50
            X509v3 Authority Key Identifier:
                keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/57E99612C13011F0B2D967D4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:bf:d8:14:4a:d5:d6:24:46:f1:56:a0:2e:77:c3:00:aa:d0:
         86:4b:2e:ff:d3:78:15:53:00:0c:18:a2:7e:a8:31:a3:b6:91:
         b7:c7:71:9c:98:3e:c4:4f:2f:53:1d:eb:b4:48:43:b2:9c:e5:
         e2:96:1f:76:28:ed:16:d1:72:0c:29:a4:76:67:45:d6:ac:26:
         a7:27:a8:00:67:05:e3:87:55:10:45:c1:f0:aa:71:57:4d:ed:
         5e:e9:19:5a:8e:50:28:36:07:be:cd:cb:e0:82:56:d7:06:b8:
         a2:5d:20:ab:a6:55:91:d5:0a:36:8b:ec:10:a7:a1:a0:71:8c:
         0c:d8:d7:dc:bb:7f:bd:aa:09:a9:5b:6a:42:77:5b:eb:3b:5a:
         e4:cc:e7:b3:f1:59:cc:94:ca:af:82:e3:dc:db:6f:bf:3b:24:
         a1:fc:ae:92:35:8f:06:9e:7c:5a:0e:ed:c0:4a:45:06:3a:bf:
         2e:19:79:8e:b0:fe:80:f9:77:f4:18:70:ee:63:b9:17:3a:be:
         62:bf:ab:68:f3:86:5f:c5:64:23:c2:fb:81:90:e2:c7:e1:82:
         ef:d3:08:c3:70:24:10:f4:af:1f:29:61:6f:4b:7b:a6:be:a5:
         f4:8f:9d:70:96:7a:1f:ee:35:a7:3f:71:55:ac:be:43:8a:ca:
         3f:2c:bf:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:45:24 2025 by rpki-client