This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CA177ACB3DB11F08571B0D1DAE4EC9C.roa
File:                     2CA177ACB3DB11F08571B0D1DAE4EC9C.roa (raw, json)
Hash identifier:          YGhFUmm0u35tw/g6vUNGyNqmmTG8rWutcBFyOeLQ5zY=
Subject key identifier:   CA:20:BD:D8:13:1E:8B:6D:59:8B:B8:00:95:B5:36:2D:D9:A9:C7:A7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01835D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CA177ACB3DB11F08571B0D1DAE4EC9C.roa
Signing time:             Tue 28 Oct 2025 08:50:38 +0000
ROA not before:           Tue 28 Oct 2025 08:50:33 +0000
ROA not after:            Thu 04 Dec 2025 08:50:33 +0000
asID:                     151407
IP address blocks:        45.196.220.0/23 maxlen: 24
                          45.196.220.0/24 maxlen: 24
                          45.196.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 04 Dec 2025 08:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99165 (0x1835d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 28 08:50:33 2025 GMT
            Not After : Dec  4 08:50:33 2025 GMT
        Subject: CN=690083de-cf04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:e3:38:9c:b7:00:78:d5:90:d4:bc:9d:cf:
                    0d:e7:66:68:f7:b8:40:f3:85:67:3f:68:5a:88:59:
                    0f:83:e9:6f:36:a3:c7:28:41:6c:de:6e:96:cb:c2:
                    cd:6c:64:42:3d:7e:5a:db:a4:b5:8a:08:55:01:93:
                    8d:4b:28:10:c3:31:0d:7b:fc:6e:ea:33:5a:eb:1f:
                    9e:e2:9b:b6:0a:57:73:2f:48:d5:ea:50:6e:d7:50:
                    32:b2:78:fc:c0:db:88:a2:33:25:71:dc:d1:03:37:
                    bb:b2:c0:a0:8f:ad:47:7f:43:58:21:ff:93:4a:8e:
                    0c:a8:f6:fd:6e:f4:7c:84:eb:70:c7:19:49:70:47:
                    a1:50:58:e6:60:a6:af:ee:63:20:06:5e:e1:80:e2:
                    87:e8:d3:73:66:5f:bd:fb:92:e3:6f:36:80:51:2d:
                    7a:a5:0b:b3:f3:29:d8:e4:05:68:03:f5:86:a2:65:
                    c1:6a:05:b3:1a:10:ff:8a:97:be:3e:3b:a7:35:c1:
                    0b:f6:45:c8:5d:fa:42:e1:89:69:77:20:2e:a6:de:
                    d3:e6:ef:67:f3:37:00:86:fd:26:b0:14:c4:14:7f:
                    f7:70:d6:12:44:c1:f9:37:6e:68:4e:cb:51:71:d8:
                    1f:7e:46:1e:55:5b:05:4f:8a:7e:bb:d7:2a:68:ae:
                    cc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:20:BD:D8:13:1E:8B:6D:59:8B:B8:00:95:B5:36:2D:D9:A9:C7:A7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CA177ACB3DB11F08571B0D1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:fe:39:89:58:f6:61:13:8a:27:ac:18:20:27:55:c0:ab:01:
         fb:46:a9:e2:7c:1c:ba:f9:cb:40:fa:71:00:f2:0c:20:40:e2:
         1e:76:50:55:ae:5b:40:2c:23:b5:64:60:eb:47:27:3e:bc:bd:
         3b:62:f3:86:30:3d:c7:72:03:d0:e3:09:12:fa:b2:91:45:03:
         93:0d:ed:7e:98:f5:8f:24:27:8a:93:11:1a:55:a7:c5:cb:da:
         df:1d:01:3c:b2:93:1d:3c:c9:04:0e:7d:27:9e:b0:13:30:5d:
         43:ee:75:4b:80:d3:b3:d3:39:43:d2:1f:3d:b2:24:de:26:da:
         25:9c:d4:35:56:40:dd:6c:3e:ce:18:ab:01:29:f3:29:fb:09:
         4c:f2:5d:fb:40:87:5a:7d:89:96:aa:c5:ab:9b:84:64:31:b0:
         34:f0:aa:a4:dd:85:41:54:21:d3:08:ab:5a:46:a1:6e:9b:6a:
         4c:28:aa:b7:be:e2:10:cf:d6:b9:70:e4:af:3f:4f:9a:75:86:
         15:aa:53:ee:19:fa:3f:95:8b:f3:cb:e2:b9:c3:ee:13:4a:8f:
         13:80:e7:6e:56:4b:23:32:31:c7:c9:4b:78:f6:e1:6e:5e:45:
         a3:e6:b0:82:f6:40:a9:76:36:53:28:7b:98:87:ab:99:cc:74:
         96:4d:a2:f1
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYNdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDI4MDg1MDMzWhcNMjUxMjA0MDg1MDMzWjAYMRYw
FAYDVQQDEw02OTAwODNkZS1jZjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvmnjOJy3AHjVkNS8nc8N52Zo97hA84VnP2haiFkPg+lvNqPHKEFs3m6W
y8LNbGRCPX5a26S1ighVAZONSygQwzENe/xu6jNa6x+e4pu2CldzL0jV6lBu11Ay
snj8wNuIojMlcdzRAze7ssCgj61Hf0NYIf+TSo4MqPb9bvR8hOtwxxlJcEehUFjm
YKav7mMgBl7hgOKH6NNzZl+9+5LjbzaAUS16pQuz8ynY5AVoA/WGomXBagWzGhD/
ipe+PjunNcEL9kXIXfpC4YlpdyAupt7T5u9n8zcAhv0msBTEFH/3cNYSRMH5N25o
TstRcdgffkYeVVsFT4p+u9cqaK7MewIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMog
vdgTHottWYu4AJW1Ni3ZqcenMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQ0ExNzdBQ0IzREIxMUYwODU3MUIwRDFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLcTcMA0GCSqGSIb3DQEBCwUA
A4IBAQAB/jmJWPZhE4onrBggJ1XAqwH7RqnifBy6+ctA+nEA8gwgQOIedlBVrltA
LCO1ZGDrRyc+vL07YvOGMD3HcgPQ4wkS+rKRRQOTDe1+mPWPJCeKkxEaVafFy9rf
HQE8spMdPMkEDn0nnrATMF1D7nVLgNOz0zlD0h89siTeJtolnNQ1VkDdbD7OGKsB
KfMp+wlM8l37QIdafYmWqsWrm4RkMbA08Kqk3YVBVCHTCKtaRqFum2pMKKq3vuIQ
z9a5cOSvP0+adYYVqlPuGfo/lYvzy+K5w+4TSo8TgOduVksjMjHHyUt49uFuXkWj
5rCC9kCpdjZTKHuYh6uZzHSWTaLx
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:47:57 2025 by rpki-client