This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19627F10CB8C11F097A92C96DAE4EC9C.roa
File:                     19627F10CB8C11F097A92C96DAE4EC9C.roa (raw, json)
Hash identifier:          J9u3qsXTOeYiJ6sSeXiSK3GNgABnBntAktBEQ0KvmdU=
Subject key identifier:   2C:77:71:AA:4B:C7:1F:19:BC:71:8D:B8:B2:E8:59:02:7E:48:3F:15
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018A00
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19627F10CB8C11F097A92C96DAE4EC9C.roa
Signing time:             Thu 27 Nov 2025 12:25:03 +0000
ROA not before:           Thu 27 Nov 2025 12:24:58 +0000
ROA not after:            Mon 08 Dec 2025 12:24:58 +0000
asID:                     1405
IP address blocks:        45.192.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100864 (0x18a00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 27 12:24:58 2025 GMT
            Not After : Dec  8 12:24:58 2025 GMT
        Subject: CN=6928431f-b6c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:5c:9a:af:3c:55:7a:81:66:97:eb:d4:1f:
                    bf:f3:8c:5c:1d:08:f7:07:f0:f1:2b:ab:68:36:f5:
                    41:71:28:c9:b7:1e:60:16:47:dc:39:88:c7:b3:1c:
                    c7:9a:2d:f9:8a:67:ff:7c:cb:79:4c:55:3f:bf:2f:
                    f3:42:2b:cd:e0:47:fe:b0:10:db:4c:be:2d:02:4a:
                    96:a9:18:4d:d5:c2:06:ab:9c:81:ec:77:ca:5f:95:
                    3a:7c:66:01:db:8d:e4:67:79:25:47:44:81:1e:27:
                    28:40:ec:84:0f:c8:46:2c:59:1f:50:ad:eb:02:16:
                    e1:a8:72:f4:c7:7f:17:66:c9:a5:1d:cc:da:e4:91:
                    df:e1:ab:6f:e3:d6:c3:1e:42:26:9c:bf:00:91:32:
                    f7:4a:b4:c4:74:24:15:32:ec:2a:e9:d0:82:f8:fc:
                    46:e9:4d:0c:34:21:88:f7:7c:08:e7:d1:c3:8f:f0:
                    91:59:3d:31:e6:dc:97:df:bd:e5:a7:f8:dc:4c:c2:
                    10:27:d0:ec:b3:c5:d0:0d:7d:77:5b:07:a1:42:d8:
                    7b:c7:d5:5c:84:6a:22:f2:80:4a:d9:bd:ea:4c:89:
                    82:9f:27:06:5e:73:c3:10:07:f1:fb:e1:8c:c2:09:
                    8e:f3:20:30:06:fe:e6:0c:cf:03:9f:f8:05:ca:c0:
                    8c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:77:71:AA:4B:C7:1F:19:BC:71:8D:B8:B2:E8:59:02:7E:48:3F:15
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/19627F10CB8C11F097A92C96DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:8b:d7:e7:91:56:ec:c0:cc:a6:d8:da:96:d6:89:c9:df:b7:
         73:c2:00:c0:de:0e:58:77:90:fc:99:26:48:b9:32:5a:54:aa:
         55:1c:8c:bc:c6:6f:d2:15:e2:7d:ee:4e:ee:4c:0f:02:d0:36:
         ca:ba:e6:e0:4f:3b:cc:de:ac:34:cf:21:e9:79:99:ab:46:1e:
         b2:7f:7d:34:e8:c3:05:15:25:80:c6:27:01:3a:1b:db:8b:d3:
         f6:76:f0:d7:0e:c2:e2:8e:09:30:6c:ad:d4:e0:58:8e:0f:c0:
         72:97:fe:11:17:02:2a:1c:2e:bb:a6:28:2e:c0:6a:87:38:57:
         0f:10:8d:1a:3b:25:1f:54:d2:3f:de:2c:0f:2c:84:92:e9:ec:
         c1:62:92:0b:b5:9a:03:56:ca:eb:1d:09:da:16:9c:cf:55:7e:
         60:07:f1:4e:b6:10:a8:0d:b4:40:31:6d:7b:87:40:2a:72:0e:
         bc:93:6e:ef:37:14:b4:67:5a:d5:31:27:ef:a1:30:ae:03:21:
         ce:08:d7:d1:19:78:d6:c9:0e:ab:68:02:6a:c5:8a:c2:c9:0f:
         0e:3f:38:8a:54:38:83:7d:21:aa:ac:ee:bf:b3:72:49:75:32:
         d2:42:64:88:02:38:a2:1d:59:0a:bd:b7:8e:7a:13:45:bc:b1:
         99:f7:a9:89
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYoAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTI3MTIyNDU4WhcNMjUxMjA4MTIyNDU4WjAYMRYw
FAYDVQQDEw02OTI4NDMxZi1iNmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAniZcmq88VXqBZpfr1B+/84xcHQj3B/DxK6toNvVBcSjJtx5gFkfcOYjH
sxzHmi35imf/fMt5TFU/vy/zQivN4Ef+sBDbTL4tAkqWqRhN1cIGq5yB7HfKX5U6
fGYB243kZ3klR0SBHicoQOyED8hGLFkfUK3rAhbhqHL0x38XZsmlHcza5JHf4atv
49bDHkImnL8AkTL3SrTEdCQVMuwq6dCC+PxG6U0MNCGI93wI59HDj/CRWT0x5tyX
373lp/jcTMIQJ9Dss8XQDX13WwehQth7x9VchGoi8oBK2b3qTImCnycGXnPDEAfx
++GMwgmO8yAwBv7mDM8Dn/gFysCMlwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCx3
capLxx8ZvHGNuLLoWQJ+SD8VMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xOTYyN0YxMENCOEMxMUYwOTdBOTJDOTZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcDyMA0GCSqGSIb3DQEBCwUA
A4IBAQBYi9fnkVbswMym2NqW1onJ37dzwgDA3g5Yd5D8mSZIuTJaVKpVHIy8xm/S
FeJ97k7uTA8C0DbKuubgTzvM3qw0zyHpeZmrRh6yf3006MMFFSWAxicBOhvbi9P2
dvDXDsLijgkwbK3U4FiOD8Byl/4RFwIqHC67piguwGqHOFcPEI0aOyUfVNI/3iwP
LISS6ezBYpILtZoDVsrrHQnaFpzPVX5gB/FOthCoDbRAMW17h0Aqcg68k27vNxS0
Z1rVMSfvoTCuAyHOCNfRGXjWyQ6raAJqxYrCyQ8OPziKVDiDfSGqrO6/s3JJdTLS
QmSIAjiiHVkKvbeOehNFvLGZ96mJ
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:14 2025 by rpki-client