This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29FA58EEC13611F095C52EF6DAE4EC9C.roa
File:                     29FA58EEC13611F095C52EF6DAE4EC9C.roa (raw, json)
Hash identifier:          IUb//QwbSmFwFWFpzqVWCNtXhhLkbKgEUJm7UupJwZo=
Subject key identifier:   9F:C8:90:9F:AE:F3:2D:11:20:93:EE:7C:EF:1E:8E:DF:3A:08:07:46
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01875E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29FA58EEC13611F095C52EF6DAE4EC9C.roa
Signing time:             Fri 14 Nov 2025 08:44:43 +0000
ROA not before:           Fri 14 Nov 2025 08:44:38 +0000
ROA not after:            Tue 16 Dec 2025 08:44:38 +0000
asID:                     134365
IP address blocks:        45.197.144.0/21 maxlen: 24
                          45.197.144.0/24 maxlen: 24
                          45.197.145.0/24 maxlen: 24
                          45.197.146.0/24 maxlen: 24
                          45.197.147.0/24 maxlen: 24
                          45.197.148.0/24 maxlen: 24
                          45.197.149.0/24 maxlen: 24
                          45.197.150.0/24 maxlen: 24
                          45.197.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100190 (0x1875e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 14 08:44:38 2025 GMT
            Not After : Dec 16 08:44:38 2025 GMT
        Subject: CN=6916ebfb-77f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:20:c2:97:75:d3:f6:9a:fb:8b:cc:58:cb:fc:
                    5e:83:22:d8:a3:bb:ec:76:2c:12:0e:82:72:ef:c5:
                    9b:88:7b:35:da:db:61:1a:83:9a:0b:29:c4:ef:03:
                    48:e1:dd:0e:dd:06:f5:60:f8:c8:65:1e:3b:b8:6f:
                    82:d6:f6:b5:38:94:ed:f4:5c:92:37:7c:9a:0b:ba:
                    60:75:18:ac:88:2a:4c:9d:72:91:cc:af:de:db:d4:
                    8c:b4:1f:98:82:cf:0f:65:a8:2f:b9:49:9d:cc:f9:
                    9a:c1:8b:b3:cc:d7:dd:38:c4:fc:65:8b:b8:25:2c:
                    4d:dc:03:d6:be:8b:d3:a2:99:41:9a:a9:df:56:03:
                    bf:74:12:a3:c6:7d:d2:f9:af:1c:24:9b:d0:b9:e3:
                    de:53:11:8f:66:ac:c9:e4:d0:eb:95:a8:04:77:12:
                    d1:30:64:19:37:06:5c:c9:2e:82:a2:e1:45:bb:b8:
                    97:a5:27:90:a1:3c:1e:63:85:88:32:17:9c:57:63:
                    69:5f:36:4e:8a:3c:5e:14:55:a5:2b:c5:0d:5f:bc:
                    88:67:5f:57:f7:b1:10:2d:3a:e9:da:c9:96:a9:34:
                    7d:bd:75:32:f3:7d:5a:5b:05:2d:36:8b:9d:01:95:
                    ca:82:22:1d:52:e6:a2:41:11:ae:70:4d:ab:f7:ce:
                    3b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C8:90:9F:AE:F3:2D:11:20:93:EE:7C:EF:1E:8E:DF:3A:08:07:46
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29FA58EEC13611F095C52EF6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:c0:1f:0f:b3:d1:0e:ad:46:82:a4:3d:8d:6e:f7:a4:b5:a4:
         d6:14:7c:41:81:46:6b:ae:89:66:dd:7e:35:5f:e2:ee:f7:7d:
         65:7f:a0:34:e6:87:b2:cb:2b:8f:17:43:8d:22:18:31:f1:bd:
         3b:61:28:bb:ff:02:20:7c:74:ab:68:2e:4a:f8:08:55:e6:3e:
         cc:73:03:87:32:71:57:f1:3a:a2:09:4e:a6:75:e3:4b:4c:74:
         e0:fd:bf:af:3b:a9:df:b8:f3:c1:e6:6b:e3:58:5a:d8:51:2a:
         76:14:90:de:c0:7b:dd:06:03:b0:cb:eb:32:74:c7:76:ce:b4:
         ef:e7:13:3e:6f:25:7a:ec:ef:60:2a:2c:c3:0f:37:c8:05:2f:
         dd:a5:25:06:cf:7e:bb:56:0a:b9:d8:5f:1d:58:e3:68:69:4f:
         2f:f8:10:93:66:7c:df:79:9d:02:0f:b0:d8:c7:59:29:03:25:
         84:db:43:3f:d2:93:a0:b1:b2:12:60:06:84:56:e6:99:48:ce:
         2d:b4:1e:dc:33:5e:e5:04:10:15:ed:6d:bd:d2:f3:94:da:3e:
         14:c9:a2:8c:3d:2f:c7:f7:7c:41:fa:32:01:d3:23:4b:85:a5:
         4c:1f:26:8c:71:b1:64:28:90:10:08:e2:78:7c:3c:df:ce:ea:
         41:a3:18:bb
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYdeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTE0MDg0NDM4WhcNMjUxMjE2MDg0NDM4WjAYMRYw
FAYDVQQDEw02OTE2ZWJmYi03N2Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmCDCl3XT9pr7i8xYy/xegyLYo7vsdiwSDoJy78WbiHs12tthGoOaCynE
7wNI4d0O3Qb1YPjIZR47uG+C1va1OJTt9FySN3yaC7pgdRisiCpMnXKRzK/e29SM
tB+Ygs8PZagvuUmdzPmawYuzzNfdOMT8ZYu4JSxN3APWvovToplBmqnfVgO/dBKj
xn3S+a8cJJvQuePeUxGPZqzJ5NDrlagEdxLRMGQZNwZcyS6CouFFu7iXpSeQoTwe
Y4WIMhecV2NpXzZOijxeFFWlK8UNX7yIZ19X97EQLTrp2smWqTR9vXUy831aWwUt
NoudAZXKgiIdUuaiQRGucE2r98475QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ/I
kJ+u8y0RIJPufO8ejt86CAdGMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yOUZBNThFRUMxMzYxMUYwOTVDNTJFRjZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLcWQMA0GCSqGSIb3DQEBCwUA
A4IBAQBgwB8Ps9EOrUaCpD2NbvektaTWFHxBgUZrrolm3X41X+Lu931lf6A05oey
yyuPF0ONIhgx8b07YSi7/wIgfHSraC5K+AhV5j7McwOHMnFX8TqiCU6mdeNLTHTg
/b+vO6nfuPPB5mvjWFrYUSp2FJDewHvdBgOwy+sydMd2zrTv5xM+byV67O9gKizD
DzfIBS/dpSUGz367Vgq52F8dWONoaU8v+BCTZnzfeZ0CD7DYx1kpAyWE20M/0pOg
sbISYAaEVuaZSM4ttB7cM17lBBAV7W290vOU2j4UyaKMPS/H93xB+jIB0yNLhaVM
HyaMcbFkKJAQCOJ4fDzfzupBoxi7
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:07 2025 by rpki-client