This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18AD9500BBB511F08B0AD4B6DAE4EC9C.roa
File:                     18AD9500BBB511F08B0AD4B6DAE4EC9C.roa (raw, json)
Hash identifier:          hOyYvG5rQde51/Ruot/2U5h1ASW/deE8IN3bj7Lw/d4=
Subject key identifier:   EA:C1:9B:03:18:67:D1:23:D3:90:77:AC:96:A1:87:5C:14:35:C2:F5
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01857D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18AD9500BBB511F08B0AD4B6DAE4EC9C.roa
Signing time:             Fri 07 Nov 2025 08:38:13 +0000
ROA not before:           Fri 07 Nov 2025 08:38:06 +0000
ROA not after:            Fri 12 Dec 2025 08:38:06 +0000
asID:                     40605
IP address blocks:        45.201.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99709 (0x1857d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  7 08:38:06 2025 GMT
            Not After : Dec 12 08:38:06 2025 GMT
        Subject: CN=690daff5-733b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:29:7b:97:62:7b:1b:b9:4f:55:55:0e:f4:
                    c0:69:76:cf:2e:94:8c:95:26:72:80:96:30:c7:bd:
                    5d:86:28:1d:9b:ee:1d:d0:e8:46:f9:50:60:c8:b2:
                    5e:84:b6:30:56:16:5f:00:e2:95:4a:b5:cc:20:7f:
                    30:6f:84:c2:31:b0:24:62:17:73:83:69:1f:c7:2d:
                    64:26:73:46:3c:79:14:6f:ef:bd:08:09:0d:1c:f0:
                    37:af:5c:03:b8:0c:51:05:1f:f7:be:a4:ad:d1:4d:
                    f4:17:f9:45:2b:06:07:ab:58:41:5a:9a:b0:d8:e2:
                    1b:5c:19:96:30:21:ec:41:cb:d1:df:d7:a7:22:1c:
                    2a:8e:dd:c9:d4:6d:63:44:97:c3:83:90:f4:29:ea:
                    64:17:95:6f:f9:9c:34:cd:17:4e:de:83:53:d5:12:
                    42:6a:ec:e0:b4:82:dc:96:2f:66:9f:48:7c:f9:a4:
                    04:05:14:44:63:85:d1:87:44:e2:5b:83:b8:8b:69:
                    ca:9c:e9:b0:ba:bf:93:c2:a0:a9:e4:9c:8b:32:e2:
                    9b:49:7b:f3:d1:71:41:aa:f7:b7:a5:f3:0b:32:99:
                    dd:23:db:9d:e0:ae:96:87:f7:df:48:ff:a3:de:c4:
                    09:d9:d7:68:d9:65:cf:6d:d5:d1:a5:b0:7c:e6:44:
                    92:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C1:9B:03:18:67:D1:23:D3:90:77:AC:96:A1:87:5C:14:35:C2:F5
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/18AD9500BBB511F08B0AD4B6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:3c:33:dc:87:fe:10:0e:0f:7b:e6:bd:69:80:06:94:25:81:
         27:d0:8b:af:0f:da:f0:81:f7:94:aa:9c:f8:a2:b0:5b:70:b1:
         2b:23:77:2f:52:64:c7:91:2d:d2:60:bc:dd:32:bb:f8:13:c3:
         51:4f:27:84:87:73:25:c4:71:fc:da:c6:dd:22:d3:c3:6f:bd:
         9e:68:f4:cf:76:81:eb:33:c6:a7:aa:2a:e7:51:48:ef:12:ff:
         7b:8c:a8:6e:1b:9e:ac:14:11:a5:85:ab:f0:90:a1:f5:05:7b:
         94:71:af:3a:6b:9f:2a:bc:57:11:8d:20:96:dc:47:79:46:1c:
         f2:88:be:ac:9b:60:a4:d8:5d:ad:25:44:a1:92:88:7c:38:f9:
         c8:b0:7c:42:93:aa:3b:a2:e2:19:88:a5:78:52:d7:25:ec:11:
         46:df:42:56:77:7c:94:78:8b:fb:7d:44:9c:e3:fd:01:e2:87:
         c0:d5:d2:ee:7e:20:53:66:40:32:61:ae:c4:32:98:07:13:44:
         83:fd:f9:c4:d8:cd:68:d7:e7:22:7b:90:cc:67:fc:b9:fe:e9:
         6f:3a:7e:80:24:ab:e0:6e:30:69:8f:40:03:8d:10:0f:78:a9:
         c6:bf:04:39:8f:9f:78:6d:00:4f:10:c3:d6:6b:f5:5a:1f:ee:
         d9:b8:53:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:09 2025 by rpki-client