This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36A7186EBFC611F08314AFE0DAE4EC9C.roa
File:                     36A7186EBFC611F08314AFE0DAE4EC9C.roa (raw, json)
Hash identifier:          CgvbOl03ehh/dX7qU7rsr0/Ch1hdPGnkO+hcSN9IxAk=
Subject key identifier:   75:35:4E:D5:80:D7:95:92:A2:B1:F5:90:11:15:0D:43:85:24:2B:6E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0186DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36A7186EBFC611F08314AFE0DAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 12:50:49 +0000
ROA not before:           Wed 12 Nov 2025 12:50:45 +0000
ROA not after:            Mon 18 May 2026 12:50:45 +0000
asID:                     54600
IP address blocks:        45.195.112.0/21 maxlen: 24
                          45.195.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100059 (0x186db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 12 12:50:45 2025 GMT
            Not After : May 18 12:50:45 2026 GMT
        Subject: CN=691482a9-a9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a7:18:9b:26:6d:f6:d7:2d:93:17:50:56:b7:
                    f9:37:07:87:77:03:70:ff:29:81:28:d9:de:37:4d:
                    f4:61:66:fd:8c:f1:56:f5:f3:af:16:ff:5c:04:d5:
                    e9:8b:19:2f:c7:68:19:93:20:ca:42:94:ae:4d:82:
                    e4:9e:1d:89:c3:0a:5e:a8:84:4b:60:77:16:f9:46:
                    55:50:93:13:8f:96:6e:a1:05:b3:1d:2f:48:fc:eb:
                    18:26:b7:c0:03:6d:d0:76:dc:42:ee:3a:dc:84:df:
                    a1:33:55:cd:15:b4:38:11:7b:df:4b:9b:06:43:ac:
                    92:a5:3c:26:51:08:49:3b:e4:a9:1a:bb:f9:24:a7:
                    82:64:48:9b:39:31:cc:6d:c9:31:15:00:d6:c7:7a:
                    a6:93:c6:90:7a:4c:14:77:6f:6a:87:cf:42:2f:aa:
                    ff:5e:5b:4d:01:62:4b:80:cc:87:72:e7:bc:f7:79:
                    1a:36:03:0c:6b:b7:73:ed:64:96:6c:ce:87:35:bf:
                    4c:14:d7:01:e5:5b:8d:21:30:44:a8:49:58:5a:fc:
                    12:b7:5d:43:c7:21:8d:99:0e:39:dd:62:d7:e5:40:
                    ca:b3:23:c3:c8:5f:a5:fd:56:ab:0d:c2:e4:38:f4:
                    ee:dd:e9:cb:42:9b:8c:c2:15:ef:1b:2b:62:9a:fc:
                    89:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:35:4E:D5:80:D7:95:92:A2:B1:F5:90:11:15:0D:43:85:24:2B:6E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36A7186EBFC611F08314AFE0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:43:7b:e3:94:5c:aa:91:27:6d:5c:cb:f7:e8:25:f0:5c:3f:
         62:b7:ae:9d:2c:cc:7c:42:18:7c:3b:3a:10:47:93:ab:bb:27:
         78:1f:c2:8b:a3:e6:c9:79:94:ab:ce:98:6e:4d:2d:43:bd:23:
         32:50:d4:0c:68:ef:01:d9:4f:f8:c0:54:0d:e0:87:8e:58:86:
         d2:54:6f:37:c8:6b:f2:e7:37:ed:9f:bf:d5:b3:13:89:07:ef:
         7f:f3:24:91:44:fe:f0:51:ac:94:1b:78:e1:2f:1b:70:b6:37:
         8b:da:8c:48:09:58:bc:54:1d:ce:a6:00:44:20:39:b4:08:9c:
         d9:dc:a4:b1:ea:02:8e:b9:ba:cc:b2:d9:7e:ae:93:af:58:db:
         60:15:0b:de:ec:a6:83:a5:59:cc:7a:a9:44:2d:ae:77:0a:cc:
         a7:5c:e0:53:c7:63:ab:08:c9:fb:d0:f7:a2:7f:3b:7f:8d:f2:
         a6:29:9a:10:27:93:2b:79:ea:9d:07:7d:77:53:de:14:83:d8:
         d4:94:40:23:f9:eb:59:eb:22:70:08:2b:fe:db:24:9c:6c:88:
         f4:3c:66:40:be:bc:1f:05:79:ee:8a:9d:c2:bd:87:59:d3:8b:
         70:7e:35:fc:f3:ba:7b:57:8b:97:a0:d9:91:fa:a6:b0:73:72:
         e1:79:a7:3f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYbbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTEyMTI1MDQ1WhcNMjYwNTE4MTI1MDQ1WjAYMRYw
FAYDVQQDEw02OTE0ODJhOS1hOWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1KcYmyZt9tctkxdQVrf5NweHdwNw/ymBKNneN030YWb9jPFW9fOvFv9c
BNXpixkvx2gZkyDKQpSuTYLknh2JwwpeqIRLYHcW+UZVUJMTj5ZuoQWzHS9I/OsY
JrfAA23QdtxC7jrchN+hM1XNFbQ4EXvfS5sGQ6ySpTwmUQhJO+SpGrv5JKeCZEib
OTHMbckxFQDWx3qmk8aQekwUd29qh89CL6r/XltNAWJLgMyHcue893kaNgMMa7dz
7WSWbM6HNb9MFNcB5VuNITBEqElYWvwSt11DxyGNmQ453WLX5UDKsyPDyF+l/Var
DcLkOPTu3enLQpuMwhXvGytimvyJUwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHU1
TtWA15WSorH1kBEVDUOFJCtuMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zNkE3MTg2RUJGQzYxMUYwODMxNEFGRTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcNwMA0GCSqGSIb3DQEBCwUA
A4IBAQAQQ3vjlFyqkSdtXMv36CXwXD9it66dLMx8Qhh8OzoQR5Oruyd4H8KLo+bJ
eZSrzphuTS1DvSMyUNQMaO8B2U/4wFQN4IeOWIbSVG83yGvy5zftn7/VsxOJB+9/
8ySRRP7wUayUG3jhLxtwtjeL2oxICVi8VB3OpgBEIDm0CJzZ3KSx6gKOubrMstl+
rpOvWNtgFQve7KaDpVnMeqlELa53CsynXOBTx2OrCMn70Peifzt/jfKmKZoQJ5Mr
eeqdB313U94Ug9jUlEAj+etZ6yJwCCv+2yScbIj0PGZAvrwfBXnuip3CvYdZ04tw
fjX887p7V4uXoNmR+qawc3Lheac/
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:46 2025 by rpki-client