This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00B2A98CC93811F08BEA37E5DAE4EC9C.roa
File:                     00B2A98CC93811F08BEA37E5DAE4EC9C.roa (raw, json)
Hash identifier:          s/a8JEiOurbafHBzG4YZSB2FjhAIf8QgbO0eEiTDJbw=
Subject key identifier:   B1:99:E9:F9:8E:FA:5E:6E:2F:A4:75:E4:E1:14:3C:BE:93:D8:99:33
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01895D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00B2A98CC93811F08BEA37E5DAE4EC9C.roa
Signing time:             Mon 24 Nov 2025 13:18:02 +0000
ROA not before:           Mon 24 Nov 2025 13:17:54 +0000
ROA not after:            Tue 30 Dec 2025 13:17:54 +0000
asID:                     398443
IP address blocks:        45.192.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100701 (0x1895d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 24 13:17:54 2025 GMT
            Not After : Dec 30 13:17:54 2025 GMT
        Subject: CN=69245b0a-c608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:98:7d:66:e9:56:b7:fe:82:3e:c4:8f:9a:
                    ff:56:de:40:c8:51:ae:3d:d6:a8:e3:2c:71:1c:90:
                    fd:3b:d1:58:ec:c0:ef:a9:d7:fc:04:66:7c:b1:e5:
                    10:9d:fa:c2:33:41:30:1d:19:cb:67:d9:1a:bc:c1:
                    96:cf:63:5a:74:bb:06:2d:ad:a2:2b:a5:38:d7:41:
                    2f:9e:0c:2c:03:a0:35:b4:fd:20:9f:39:54:df:19:
                    0f:04:7b:d8:32:f6:3b:45:95:82:fd:84:1f:e1:c7:
                    d4:33:f1:01:c1:15:86:25:3e:b3:ab:01:29:ae:0a:
                    48:76:37:73:08:2f:ca:c0:d1:7a:6a:27:58:4d:a0:
                    f8:84:04:47:0c:19:28:36:59:de:77:6f:b6:9d:21:
                    96:7a:46:72:b2:d4:37:ac:11:bc:77:56:c5:e2:53:
                    cd:7d:1f:f0:35:85:c7:d8:40:c8:fa:7e:5c:2b:8d:
                    ca:c8:42:1c:32:50:bc:ee:7f:41:f9:d7:a5:e5:5a:
                    25:f1:a1:96:ee:9e:aa:91:20:51:e0:ca:32:d5:68:
                    d0:bd:45:9d:5f:11:f8:8f:4e:68:ad:4b:35:3b:7c:
                    40:38:75:64:32:8f:b6:e7:19:3e:37:4a:0a:40:2a:
                    2b:be:d9:58:c4:01:78:81:5f:0e:49:7a:3f:38:a9:
                    ac:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:99:E9:F9:8E:FA:5E:6E:2F:A4:75:E4:E1:14:3C:BE:93:D8:99:33
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00B2A98CC93811F08BEA37E5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:d0:62:37:7f:79:7d:75:16:aa:c7:73:fe:8a:c7:ca:f5:44:
         3e:2d:f2:77:ee:b3:8b:f5:de:1b:44:46:a7:8c:35:f8:e6:5b:
         66:1c:a0:8a:aa:30:54:20:b4:2f:5b:b9:34:05:eb:ff:b9:fb:
         d8:3b:e7:58:e8:9e:6b:23:c3:bd:6d:bc:e9:ee:9c:fe:8c:d3:
         25:b2:23:4d:e6:ff:01:5e:5d:c9:9f:f8:1f:db:28:bd:db:9a:
         11:03:27:f8:3d:b6:be:ed:23:b2:58:ad:2b:4f:3d:97:61:ee:
         5c:5e:75:b3:f7:bd:89:39:27:c5:9d:05:3f:ae:79:2c:3c:12:
         d6:2c:09:59:c2:43:ca:13:0d:77:19:fb:9f:a5:a2:e4:9b:8d:
         3a:1e:f5:33:7b:92:8f:9a:b5:67:33:aa:d2:c0:e2:52:0c:be:
         91:bb:30:5d:37:ae:53:fb:85:35:c5:2d:cb:68:44:4c:62:07:
         2d:b0:a3:5d:73:88:44:05:06:75:bf:60:f6:1c:90:9b:e8:f2:
         85:a2:c5:26:45:e0:6c:51:aa:86:89:0a:62:e7:5b:65:70:cb:
         17:ba:15:20:33:92:a0:c3:e0:26:3a:e2:b3:df:78:93:83:6f:
         a6:77:1f:41:72:9e:f6:a6:03:26:73:a9:2f:c7:f9:05:e0:83:
         b4:3a:dd:24
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYldMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTI0MTMxNzU0WhcNMjUxMjMwMTMxNzU0WjAYMRYw
FAYDVQQDEw02OTI0NWIwYS1jNjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtYCYfWbpVrf+gj7Ej5r/Vt5AyFGuPdao4yxxHJD9O9FY7MDvqdf8BGZ8
seUQnfrCM0EwHRnLZ9kavMGWz2NadLsGLa2iK6U410EvngwsA6A1tP0gnzlU3xkP
BHvYMvY7RZWC/YQf4cfUM/EBwRWGJT6zqwEprgpIdjdzCC/KwNF6aidYTaD4hARH
DBkoNlned2+2nSGWekZystQ3rBG8d1bF4lPNfR/wNYXH2EDI+n5cK43KyEIcMlC8
7n9B+del5Vol8aGW7p6qkSBR4Moy1WjQvUWdXxH4j05orUs1O3xAOHVkMo+25xk+
N0oKQCorvtlYxAF4gV8OSXo/OKmsfwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLGZ
6fmO+l5uL6R15OEUPL6T2JkzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMEIyQTk4Q0M5MzgxMUYwOEJFQTM3RTVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcDAMA0GCSqGSIb3DQEBCwUA
A4IBAQCu0GI3f3l9dRaqx3P+isfK9UQ+LfJ37rOL9d4bREanjDX45ltmHKCKqjBU
ILQvW7k0Bev/ufvYO+dY6J5rI8O9bbzp7pz+jNMlsiNN5v8BXl3Jn/gf2yi925oR
Ayf4Pba+7SOyWK0rTz2XYe5cXnWz972JOSfFnQU/rnksPBLWLAlZwkPKEw13Gfuf
paLkm406HvUze5KPmrVnM6rSwOJSDL6RuzBdN65T+4U1xS3LaERMYgctsKNdc4hE
BQZ1v2D2HJCb6PKFosUmReBsUaqGiQpi51tlcMsXuhUgM5Kgw+AmOuKz33iTg2+m
dx9Bcp72pgMmc6kvx/kF4IO0Ot0k
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:54 2025 by rpki-client