This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3088B48EC6C311F0A385C5F0DAE4EC9C.roa
File:                     3088B48EC6C311F0A385C5F0DAE4EC9C.roa (raw, json)
Hash identifier:          ONCtpyXsC/snCq3ZLVgz38yU+7D5iUn0jzBiAG9Y6Y0=
Subject key identifier:   1F:00:A5:BC:51:74:A3:D7:E9:63:5B:1E:7F:01:F0:B9:CE:0A:C5:B0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0188DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3088B48EC6C311F0A385C5F0DAE4EC9C.roa
Signing time:             Fri 21 Nov 2025 10:16:49 +0000
ROA not before:           Fri 21 Nov 2025 10:16:44 +0000
ROA not after:            Sat 03 Jan 2026 10:16:44 +0000
asID:                     21859
IP address blocks:        45.197.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100570 (0x188da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 21 10:16:44 2025 GMT
            Not After : Jan  3 10:16:44 2026 GMT
        Subject: CN=69203c11-f88d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:b8:a7:fc:77:d2:1f:7a:d9:48:9e:9e:29:
                    e6:09:16:75:be:98:b7:9f:b2:e9:70:2f:e3:2d:fc:
                    e0:8e:42:55:7e:17:b8:e7:9b:5f:e8:ee:35:22:cd:
                    32:83:d4:45:55:72:e1:c6:48:a1:88:91:86:85:2e:
                    b7:61:a8:f7:e8:3a:dc:df:27:27:4e:4d:ff:20:e3:
                    7c:fc:7f:b0:2e:56:a7:99:e1:a7:03:07:04:0e:fe:
                    02:01:7f:9b:1d:98:e6:5f:f2:2c:3d:4c:18:8f:c0:
                    34:b7:8d:9b:d0:23:35:b1:d9:ac:e5:aa:66:11:0b:
                    ca:74:79:96:96:55:1c:17:9f:8f:9e:71:6a:5b:07:
                    61:dd:9c:24:4e:6a:3a:31:34:fb:65:e3:41:b8:5c:
                    5a:e2:c3:0a:4d:bd:66:b8:68:57:3e:4e:2b:a7:4e:
                    fd:b7:7c:5b:5a:98:bf:68:04:eb:10:a7:80:b0:aa:
                    aa:e5:0a:bb:08:b7:ed:30:36:fd:d9:83:58:5e:a1:
                    8e:5a:d7:b0:c0:5b:01:29:ad:97:a3:38:e8:20:83:
                    9b:a1:ab:c7:e4:a9:0f:32:c2:c1:1f:66:33:9d:c6:
                    9a:01:93:b8:85:b7:82:8f:41:b3:06:03:74:87:5d:
                    24:4b:69:09:ab:ae:b2:d2:87:91:c8:54:df:ab:1e:
                    0b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:00:A5:BC:51:74:A3:D7:E9:63:5B:1E:7F:01:F0:B9:CE:0A:C5:B0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3088B48EC6C311F0A385C5F0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:cf:07:d9:43:af:40:e4:d5:1f:dd:a4:74:57:ad:a5:6e:d7:
         78:8c:f4:42:7c:5f:96:7b:08:ed:6a:7b:50:6e:46:79:85:a3:
         a8:88:ee:0d:c0:11:65:e6:d2:18:3a:db:88:6b:ae:65:0d:1a:
         60:7b:7f:b0:be:7a:de:ba:a6:dc:09:4e:e0:19:7b:35:83:5c:
         ab:15:5d:ea:96:07:15:ab:d7:56:8f:42:ff:6e:ba:24:46:5f:
         a5:8c:37:b2:c7:59:fa:5b:61:0f:51:59:9f:69:3f:b1:fe:05:
         7a:ea:99:7c:4b:ba:e2:94:e0:86:08:02:f9:11:27:59:77:f3:
         dc:f0:c2:c7:c0:c3:88:7d:34:16:26:f0:f7:4a:3a:a5:5e:8b:
         2d:92:21:38:a8:6b:d7:fa:8e:a6:33:73:cd:80:d4:dd:e8:54:
         92:4e:0d:3a:2e:58:99:45:74:5a:09:25:6e:08:e3:50:68:d6:
         36:ef:a7:b3:e5:70:26:57:ea:0b:94:cd:be:e0:cd:78:63:69:
         bc:b2:4f:5e:75:2b:68:7b:47:84:8f:38:69:30:28:cb:9c:03:
         18:04:67:9c:32:04:5c:2d:4f:d5:93:94:3a:a4:5c:55:e7:e9:
         b9:f7:04:9b:bc:f9:9c:48:6f:1c:b4:57:53:f1:f1:2c:06:c6:
         37:19:98:97
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYjaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTIxMTAxNjQ0WhcNMjYwMTAzMTAxNjQ0WjAYMRYw
FAYDVQQDEw02OTIwM2MxMS1mODhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzH64p/x30h962UieninmCRZ1vpi3n7LpcC/jLfzgjkJVfhe455tf6O41
Is0yg9RFVXLhxkihiJGGhS63Yaj36Drc3ycnTk3/ION8/H+wLlanmeGnAwcEDv4C
AX+bHZjmX/IsPUwYj8A0t42b0CM1sdms5apmEQvKdHmWllUcF5+PnnFqWwdh3Zwk
Tmo6MTT7ZeNBuFxa4sMKTb1muGhXPk4rp079t3xbWpi/aATrEKeAsKqq5Qq7CLft
MDb92YNYXqGOWtewwFsBKa2XozjoIIOboavH5KkPMsLBH2YzncaaAZO4hbeCj0Gz
BgN0h10kS2kJq66y0oeRyFTfqx4LKwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFB8A
pbxRdKPX6WNbHn8B8LnOCsWwMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMDg4QjQ4RUM2QzMxMUYwQTM4NUM1RjBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcUJMA0GCSqGSIb3DQEBCwUA
A4IBAQCDzwfZQ69A5NUf3aR0V62lbtd4jPRCfF+WewjtantQbkZ5haOoiO4NwBFl
5tIYOtuIa65lDRpge3+wvnreuqbcCU7gGXs1g1yrFV3qlgcVq9dWj0L/brokRl+l
jDeyx1n6W2EPUVmfaT+x/gV66pl8S7rilOCGCAL5ESdZd/Pc8MLHwMOIfTQWJvD3
SjqlXostkiE4qGvX+o6mM3PNgNTd6FSSTg06LliZRXRaCSVuCONQaNY276ez5XAm
V+oLlM2+4M14Y2m8sk9edStoe0eEjzhpMCjLnAMYBGecMgRcLU/Vk5Q6pFxV5+m5
9wSbvPmcSG8ctFdT8fEsBsY3GZiX
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:01 2025 by rpki-client