This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/5FC96F7EC13011F0A21D6CD4DAE4EC9C.roa
File:                     5FC96F7EC13011F0A21D6CD4DAE4EC9C.roa (raw, json)
Hash identifier:          dQ971VQTWIqZxPg8adrMUiZRuphTXggTy8pdhT2Schk=
Subject key identifier:   21:B0:8B:0A:3B:6F:D9:ED:38:E9:98:D6:A0:7E:9C:F0:F9:1C:1D:50
Certificate issuer:       /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial:       0654
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/5FC96F7EC13011F0A21D6CD4DAE4EC9C.roa
Signing time:             Fri 14 Nov 2025 08:03:16 +0000
ROA not before:           Fri 14 Nov 2025 08:03:11 +0000
ROA not after:            Wed 11 Nov 2026 08:03:11 +0000
asID:                     9009
IP address blocks:        45.221.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
                          rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620 (0x654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
        Validity
            Not Before: Nov 14 08:03:11 2025 GMT
            Not After : Nov 11 08:03:11 2026 GMT
        Subject: CN=6916e244-a35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:d5:c1:35:d3:73:95:76:4d:38:86:d9:ae:
                    f2:2b:48:c5:1a:b6:ed:dd:27:4f:38:d6:c2:a1:14:
                    fb:51:3f:30:26:e3:3c:d2:27:38:7e:8f:67:56:54:
                    ed:fd:79:e4:0c:89:54:0d:97:9d:05:db:e2:66:24:
                    6a:db:d3:24:6c:c6:0a:bf:f5:4e:9d:4f:31:83:e9:
                    11:ac:48:6a:d9:ca:c5:d2:64:e2:63:d4:44:59:10:
                    b6:f9:83:4f:d7:b1:4d:2a:a5:03:d8:e9:4d:88:e6:
                    c9:b5:8d:71:70:38:48:90:ee:54:f2:fd:f1:bb:27:
                    ea:1e:a7:d4:d4:a5:ed:31:62:11:07:cb:9e:63:90:
                    dc:56:17:0d:be:91:a1:5f:e5:32:96:20:f2:1f:ec:
                    0d:d3:01:f8:12:65:d4:fb:93:ca:17:03:52:51:1a:
                    57:a1:91:1e:bb:dc:ce:c7:15:46:65:d0:e8:41:db:
                    c7:6e:9e:ba:b4:56:75:11:64:76:79:88:b1:01:30:
                    87:a0:d1:c2:08:14:6e:1d:bb:46:52:2d:ab:d7:72:
                    c6:e4:d9:fa:89:a3:05:4f:51:0a:f7:44:26:2e:dd:
                    95:66:92:0f:8c:55:5c:24:e7:d9:a1:8a:ee:df:8a:
                    1d:e5:03:6b:21:32:6d:5c:b7:96:f4:14:3f:45:ee:
                    02:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B0:8B:0A:3B:6F:D9:ED:38:E9:98:D6:A0:7E:9C:F0:F9:1C:1D:50
            X509v3 Authority Key Identifier:
                keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/5FC96F7EC13011F0A21D6CD4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:82:d0:69:74:18:52:07:be:2d:bd:db:b4:79:94:92:d1:d6:
         f7:dd:7f:f8:27:29:87:19:b0:36:db:40:dd:01:3c:43:4a:7f:
         49:d0:f6:9e:f7:5a:27:8f:d4:87:27:df:51:9b:67:31:e0:0e:
         67:67:6a:09:72:87:06:cc:50:3a:75:f9:32:9c:8b:66:a8:9c:
         f1:67:aa:d0:43:18:05:ea:4a:4d:b8:12:4d:0d:c4:e9:4d:5d:
         f8:10:f4:62:fd:bd:39:51:e0:84:ed:14:1a:d9:75:09:cc:0e:
         02:66:a3:36:0f:76:44:62:6f:4c:a0:06:3a:b2:29:dd:81:e2:
         60:0a:b7:eb:79:8d:0d:10:39:42:2b:71:ea:c8:f4:ff:e9:37:
         57:c2:ee:c6:b3:c8:2f:38:10:44:5e:de:45:fa:10:f7:53:ad:
         3d:29:84:9c:a8:a5:04:f0:9d:69:74:cd:6c:c2:0b:79:4d:d5:
         92:38:cf:cc:e5:ab:1e:a7:c6:61:6c:83:f3:52:e7:ea:6e:04:
         56:fd:9c:e3:25:7d:05:ea:e1:c1:74:e2:1e:68:11:43:10:8e:
         0e:57:b3:e0:08:f8:22:7a:9b:ad:36:8e:5e:64:ae:15:44:5d:
         76:8a:03:bc:10:0f:8d:f3:cb:92:9f:f4:cb:f6:e1:0c:b0:e4:
         ed:fb:b7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:45:24 2025 by rpki-client