This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/066473F2C5E511F085E1C27ADAE4EC9C.roa
File:                     066473F2C5E511F085E1C27ADAE4EC9C.roa (raw, json)
Hash identifier:          O3KVsUmkKqmGIfc+EGrLG+T4GVozllIKPRBjKGVdF2Q=
Subject key identifier:   7A:DA:A2:B9:51:5C:60:B6:30:C1:79:B6:0E:62:E3:A3:BD:31:69:99
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01888A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/066473F2C5E511F085E1C27ADAE4EC9C.roa
Signing time:             Thu 20 Nov 2025 07:46:30 +0000
ROA not before:           Thu 20 Nov 2025 07:46:25 +0000
ROA not after:            Thu 12 Nov 2026 07:46:25 +0000
asID:                     133847
IP address blocks:        45.200.64.0/20 maxlen: 24
                          45.200.80.0/23 maxlen: 24
                          45.200.82.0/23 maxlen: 24
                          45.200.84.0/23 maxlen: 24
                          45.200.90.0/23 maxlen: 24
                          45.200.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100490 (0x1888a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 20 07:46:25 2025 GMT
            Not After : Nov 12 07:46:25 2026 GMT
        Subject: CN=691ec756-c83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5a:44:c5:2f:b6:c4:5b:aa:ec:47:c0:c9:92:
                    ca:4e:ca:bc:41:34:4a:08:78:d8:80:e5:9a:a3:d8:
                    ad:21:c6:d6:ec:8e:d2:59:a6:02:ae:7a:c3:7a:0e:
                    bb:64:91:5d:42:b3:d0:48:38:e0:ff:c3:9b:6c:0e:
                    0f:1e:1f:ed:37:69:67:67:2e:23:ab:02:eb:73:34:
                    cb:04:cb:c5:f9:b5:f7:8a:a7:43:c8:33:f1:4f:75:
                    db:51:4a:ac:1c:15:d2:7d:2b:bc:cd:ce:b2:ed:d0:
                    09:c3:09:c0:3e:0c:61:42:21:1e:bb:33:c1:90:06:
                    4f:87:f2:a2:63:58:7d:99:75:29:c0:29:d3:ad:55:
                    ce:3b:9c:1c:7e:8d:b1:14:89:e7:6c:d9:89:6c:ad:
                    55:ac:85:b0:4a:14:de:c9:98:9d:6d:bb:3e:c9:aa:
                    4d:bc:e6:cc:ab:d6:a6:87:a7:11:d7:fa:d3:bb:22:
                    ec:44:d8:1c:24:63:b7:57:7e:67:c1:af:27:aa:de:
                    ea:f7:00:55:95:87:94:15:23:3c:d0:77:03:f3:db:
                    db:29:5b:ab:c2:60:f6:e5:40:3c:3e:b6:ca:ca:40:
                    c6:ce:20:c9:db:9b:6a:5b:95:11:77:59:d2:99:35:
                    31:8c:19:82:7d:02:5c:fe:2a:ae:ad:4c:fa:43:13:
                    9c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DA:A2:B9:51:5C:60:B6:30:C1:79:B6:0E:62:E3:A3:BD:31:69:99
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/066473F2C5E511F085E1C27ADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.64.0-45.200.85.255
                  45.200.90.0-45.200.95.255

    Signature Algorithm: sha256WithRSAEncryption
         9a:83:7f:c0:00:97:41:ec:fb:7a:f3:16:ec:04:46:d4:38:17:
         12:ba:41:6b:97:3a:e8:8b:27:26:6b:0e:2c:76:f7:40:85:8a:
         0b:6b:3e:3e:29:aa:2a:f5:d4:93:24:bc:d1:68:31:4d:38:6d:
         b2:e9:89:fc:d8:ea:e0:f0:eb:46:c5:52:8b:dc:d7:c6:d6:73:
         e2:03:33:05:2b:66:0f:12:e7:f5:7d:61:23:8c:55:71:ba:af:
         eb:47:12:c6:5c:fd:32:8f:7a:b3:70:f7:2e:16:88:4e:b8:1d:
         0d:f3:99:86:be:3f:31:c6:b5:85:cb:95:1b:d3:f3:68:2e:72:
         1c:eb:5d:0d:bf:09:02:2b:90:0f:f3:e2:00:db:0d:94:84:1f:
         92:75:9d:15:d4:95:dc:f8:70:bc:fc:51:98:2e:fb:06:6d:75:
         46:2a:44:22:7e:42:9e:69:7d:eb:88:88:54:2d:ef:fb:0a:e3:
         e2:90:64:72:20:dd:20:a5:d9:8d:09:4f:7a:05:1b:3f:1b:8f:
         80:7b:19:55:04:80:e3:65:ca:cc:c0:5c:43:21:e4:37:97:42:
         75:a3:03:dc:9c:6a:c4:37:80:26:f9:6d:c1:d5:d0:c3:cc:5d:
         ed:a9:6f:76:1d:45:ed:74:61:5e:b7:8c:71:a0:9e:55:c4:bf:
         6e:b1:32:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:21 2025 by rpki-client