This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/FFB43CD6C12F11F0B1BF6FD2DAE4EC9C.roa
File:                     FFB43CD6C12F11F0B1BF6FD2DAE4EC9C.roa (raw, json)
Hash identifier:          wI6mOXgsUe2gJc2Q30NC9HX0R+2hs9HzpmgjwHUdZUQ=
Subject key identifier:   8B:7E:28:0A:40:24:FC:EC:F5:53:07:0E:BE:C1:70:FA:1F:06:21:A5
Certificate issuer:       /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial:       064E
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/FFB43CD6C12F11F0B1BF6FD2DAE4EC9C.roa
Signing time:             Fri 14 Nov 2025 08:00:35 +0000
ROA not before:           Fri 14 Nov 2025 08:00:30 +0000
ROA not after:            Wed 11 Nov 2026 08:00:30 +0000
asID:                     9009
IP address blocks:        45.221.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
                          rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
        Validity
            Not Before: Nov 14 08:00:30 2025 GMT
            Not After : Nov 11 08:00:30 2026 GMT
        Subject: CN=6916e1a3-47b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:c2:e3:52:e8:c5:49:d8:37:46:55:08:d8:
                    5a:0b:43:83:10:bd:6d:b8:6a:ef:27:5a:71:84:17:
                    82:19:f3:66:23:4a:00:95:ec:65:a6:fd:47:17:41:
                    31:76:ad:6c:d9:b2:26:6d:85:1c:10:12:bb:56:8c:
                    da:0b:9c:51:19:fb:1d:7f:86:9b:da:9d:ce:dc:e4:
                    a5:84:1d:c5:26:8d:dc:5a:34:cd:1e:b7:5b:0e:81:
                    5e:47:f6:55:df:26:aa:a2:aa:88:09:7e:b1:f7:a9:
                    bd:9b:cd:96:68:bd:cb:ae:7e:53:52:8c:28:16:1e:
                    c2:e0:70:d4:c2:46:94:0c:28:bb:76:f3:a4:cb:66:
                    b9:72:9b:c9:c0:c2:c4:1e:d0:12:d7:b1:07:6f:f8:
                    da:5f:75:fd:96:e2:71:0f:f9:25:6d:b8:25:42:18:
                    bc:88:12:e1:d6:91:a1:79:8f:0e:92:7d:c5:86:97:
                    b1:61:26:e1:73:14:01:72:41:11:59:c4:47:f1:46:
                    1c:36:0c:20:ef:ce:5c:25:c3:40:b9:45:69:e2:48:
                    27:1e:20:29:ce:af:ce:ae:d8:89:8e:54:f5:67:6d:
                    b6:bc:bc:62:e5:af:6b:3f:67:ae:0b:b1:c2:f8:2f:
                    23:07:11:07:5a:35:94:4e:90:d7:43:bf:81:0a:93:
                    b5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:7E:28:0A:40:24:FC:EC:F5:53:07:0E:BE:C1:70:FA:1F:06:21:A5
            X509v3 Authority Key Identifier:
                keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/FFB43CD6C12F11F0B1BF6FD2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:46:de:b3:69:08:98:3d:25:3f:bb:72:8f:f4:cc:63:76:c0:
         0d:be:b9:51:70:64:95:34:fc:73:a0:cc:43:df:a7:50:c9:df:
         67:63:1b:d8:52:4f:65:1d:39:66:08:f1:47:00:7b:12:15:1c:
         99:87:71:72:2c:fa:14:5e:e3:1d:b9:e7:7c:71:de:f3:32:d0:
         41:38:d1:32:26:f7:dc:5f:7a:c3:f3:54:c2:17:14:79:bf:6d:
         0a:7c:1b:36:e8:96:cc:20:a5:0a:dd:05:65:71:d3:c1:a9:30:
         ef:7c:b2:44:ed:77:db:84:a5:7a:e0:72:39:6c:5c:09:62:fd:
         c5:56:a5:e6:72:da:79:90:90:e0:6c:fa:e6:b8:d0:e1:85:53:
         77:36:30:79:8c:4e:a3:60:97:93:f4:57:1b:1e:cc:f3:83:f5:
         ef:f6:7f:de:02:5a:d9:df:ef:1a:58:cd:96:99:f7:f3:a6:86:
         29:28:1c:a8:b2:bd:0c:4f:b7:23:49:a5:4c:04:28:13:1a:dc:
         7f:02:6c:0d:f6:7f:80:2d:a3:ba:f8:ab:d9:bb:16:55:29:41:
         f5:f3:fe:a5:2b:30:05:c2:af:3a:d4:67:af:6c:37:ca:79:7f:
         1c:70:71:09:e5:29:ec:1c:82:8e:c3:ff:d5:91:86:84:6a:49:
         f0:db:91:bc
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBUjExMC8GA1UEBRMoNjAwQzZDOTU4MkUxNEYzNzlGRDVBNUIyQjE4RDgy
MkUzNjUxQUYyRTAeFw0yNTExMTQwODAwMzBaFw0yNjExMTEwODAwMzBaMBgxFjAU
BgNVBAMTDTY5MTZlMWEzLTQ3YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5YMLjUujFSdg3RlUI2FoLQ4MQvW24au8nWnGEF4IZ82YjSgCV7GWm/UcX
QTF2rWzZsiZthRwQErtWjNoLnFEZ+x1/hpvanc7c5KWEHcUmjdxaNM0et1sOgV5H
9lXfJqqiqogJfrH3qb2bzZZovcuuflNSjCgWHsLgcNTCRpQMKLt286TLZrlym8nA
wsQe0BLXsQdv+Npfdf2W4nEP+SVtuCVCGLyIEuHWkaF5jw6SfcWGl7FhJuFzFAFy
QRFZxEfxRhw2DCDvzlwlw0C5RWniSCceICnOr86u2ImOVPVnbba8vGLlr2s/Z64L
scL4LyMHEQdaNZROkNdDv4EKk7WBAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUi34o
CkAk/Oz1UwcOvsFw+h8GIaUwHwYDVR0jBBgwFoAUYAxslYLhTzef1aWysY2CLjZR
ry4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3L1lBeHNs
WUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lBeHNsWUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBE
NTc3L0ZGQjQzQ0Q2QzEyRjExRjBCMUJGNkZEMkRBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAt3UMwDQYJKoZIhvcNAQELBQAD
ggEBAK5G3rNpCJg9JT+7co/0zGN2wA2+uVFwZJU0/HOgzEPfp1DJ32djG9hST2Ud
OWYI8UcAexIVHJmHcXIs+hRe4x2553xx3vMy0EE40TIm99xfesPzVMIXFHm/bQp8
GzbolswgpQrdBWVx08GpMO98skTtd9uEpXrgcjlsXAli/cVWpeZy2nmQkOBs+ua4
0OGFU3c2MHmMTqNgl5P0VxsezPOD9e/2f94CWtnf7xpYzZaZ9/OmhikoHKiyvQxP
tyNJpUwEKBMa3H8CbA32f4Ato7r4q9m7FlUpQfXz/qUrMAXCrzrUZ69sN8p5fxxw
cQnlKewcgo7D/9WRhoRqSfDbkbw=
-----END CERTIFICATE-----
Generated at Wed Dec 3 11:45:25 2025 by rpki-client