This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/D2850916C12F11F0A0F31DD0DAE4EC9C.roa
File:                     D2850916C12F11F0A0F31DD0DAE4EC9C.roa (raw, json)
Hash identifier:          6W/cPWLgvTMT6I3ecK1eJNgVGXnfCwAFeWVlnM7ADSw=
Subject key identifier:   2E:66:84:6E:65:03:1E:CC:AC:A4:03:CE:07:BC:0D:9A:D8:18:FE:58
Certificate issuer:       /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial:       064A
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/D2850916C12F11F0A0F31DD0DAE4EC9C.roa
Signing time:             Fri 14 Nov 2025 07:59:19 +0000
ROA not before:           Fri 14 Nov 2025 07:59:10 +0000
ROA not after:            Wed 11 Nov 2026 07:59:10 +0000
asID:                     9009
IP address blocks:        45.221.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
                          rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1610 (0x64a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
        Validity
            Not Before: Nov 14 07:59:10 2025 GMT
            Not After : Nov 11 07:59:10 2026 GMT
        Subject: CN=6916e157-ff34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fa:94:8f:71:4d:c7:aa:06:3a:1c:35:12:87:
                    92:c7:c7:60:e9:99:f4:18:94:9b:d2:b3:06:7c:00:
                    fe:15:0f:4b:b1:59:87:76:b0:c2:63:6d:5e:79:a3:
                    7b:32:38:b7:62:bc:fd:b8:75:04:e9:8a:cb:6e:78:
                    7c:ba:14:fb:e0:37:dd:ed:c3:5c:af:6d:81:83:6f:
                    62:64:e1:41:51:37:2e:ee:a1:40:d3:19:0a:16:0c:
                    44:e7:0a:51:22:93:66:e7:04:87:d0:7d:b3:8a:86:
                    d5:1c:ed:bc:5d:15:04:5c:e7:a6:05:0a:d4:2b:ae:
                    7c:cf:12:c2:9f:22:47:3e:ea:b4:eb:67:5d:55:d7:
                    51:4f:4f:81:09:38:f3:4b:26:f7:9f:87:64:ba:0a:
                    e8:ea:3c:53:96:66:54:05:20:cf:9b:60:18:55:85:
                    89:15:d5:34:6c:b5:89:63:4f:b3:80:74:18:48:ba:
                    62:af:58:7a:c8:bb:f5:4a:bb:39:fc:29:c4:d0:65:
                    a6:7d:73:a7:38:5f:77:a5:26:38:91:df:47:6b:37:
                    7b:8b:6b:3b:60:1c:1b:2d:c4:5f:01:7f:90:61:28:
                    29:9a:ce:93:c7:8f:5a:e1:f1:15:9b:38:f4:5b:01:
                    62:c2:ee:ee:e5:54:9c:2c:cf:65:db:e9:d8:0d:3f:
                    e5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:66:84:6E:65:03:1E:CC:AC:A4:03:CE:07:BC:0D:9A:D8:18:FE:58
            X509v3 Authority Key Identifier:
                keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/D2850916C12F11F0A0F31DD0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:4b:3f:4b:2c:3b:e9:95:22:1f:34:85:76:69:ef:e0:1a:14:
         b9:02:60:25:39:8a:2d:5b:04:84:c0:b8:84:8a:ad:24:c7:d7:
         1e:11:0a:1a:99:e6:c1:52:c2:7b:f8:64:d6:ad:11:56:63:91:
         3b:6a:e6:cb:38:38:c4:85:db:84:fb:80:1a:2c:a8:c4:e4:9e:
         e3:b4:14:12:3f:cc:ac:97:8e:ae:4a:3d:be:d5:27:41:01:c1:
         e0:61:a1:cf:6f:1f:42:31:6c:2d:a3:eb:a7:66:b2:a6:0c:b8:
         76:6a:3b:a7:f4:42:20:d9:1e:fd:b2:93:21:30:c5:eb:f9:85:
         ec:56:0c:f0:24:3a:7d:04:24:2c:f1:65:5f:19:84:70:d4:11:
         a6:4a:29:0e:35:97:4b:46:7d:4d:71:78:20:ce:59:49:bd:24:
         70:5f:7f:70:19:ff:3e:10:26:99:4e:8a:6d:3a:65:ce:92:08:
         55:6b:91:b4:a2:ac:b3:7b:54:04:70:c5:9f:39:f1:6e:2a:90:
         ad:e1:9a:95:2f:5e:81:33:ef:bb:9e:dc:25:b4:e6:d6:ea:aa:
         d5:31:85:33:00:6a:d6:23:27:cf:6f:54:58:22:f1:62:9b:e0:
         dd:19:d8:20:1d:68:dc:61:3c:46:e2:46:3f:0a:d2:b7:9b:a2:
         1a:f8:55:7c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBkowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBUjExMC8GA1UEBRMoNjAwQzZDOTU4MkUxNEYzNzlGRDVBNUIyQjE4RDgy
MkUzNjUxQUYyRTAeFw0yNTExMTQwNzU5MTBaFw0yNjExMTEwNzU5MTBaMBgxFjAU
BgNVBAMTDTY5MTZlMTU3LWZmMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDG+pSPcU3HqgY6HDUSh5LHx2DpmfQYlJvSswZ8AP4VD0uxWYd2sMJjbV55
o3syOLdivP24dQTpistueHy6FPvgN93tw1yvbYGDb2Jk4UFRNy7uoUDTGQoWDETn
ClEik2bnBIfQfbOKhtUc7bxdFQRc56YFCtQrrnzPEsKfIkc+6rTrZ11V11FPT4EJ
OPNLJvefh2S6CujqPFOWZlQFIM+bYBhVhYkV1TRstYljT7OAdBhIumKvWHrIu/VK
uzn8KcTQZaZ9c6c4X3elJjiR30drN3uLaztgHBstxF8Bf5BhKCmazpPHj1rh8RWb
OPRbAWLC7u7lVJwsz2Xb6dgNP+XtAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQULmaE
bmUDHsyspAPOB7wNmtgY/lgwHwYDVR0jBBgwFoAUYAxslYLhTzef1aWysY2CLjZR
ry4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3L1lBeHNs
WUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lBeHNsWUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBE
NTc3L0QyODUwOTE2QzEyRjExRjBBMEYzMUREMERBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt3UAwDQYJKoZIhvcNAQELBQAD
ggEBACBLP0ssO+mVIh80hXZp7+AaFLkCYCU5ii1bBITAuISKrSTH1x4RChqZ5sFS
wnv4ZNatEVZjkTtq5ss4OMSF24T7gBosqMTknuO0FBI/zKyXjq5KPb7VJ0EBweBh
oc9vH0IxbC2j66dmsqYMuHZqO6f0QiDZHv2ykyEwxev5hexWDPAkOn0EJCzxZV8Z
hHDUEaZKKQ41l0tGfU1xeCDOWUm9JHBff3AZ/z4QJplOim06Zc6SCFVrkbSirLN7
VARwxZ858W4qkK3hmpUvXoEz77ue3CW05tbqqtUxhTMAatYjJ89vVFgi8WKb4N0Z
2CAdaNxhPEbiRj8K0rebohr4VXw=
-----END CERTIFICATE-----
Generated at Wed Dec 3 11:45:22 2025 by rpki-client