This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/424A226ABF2611F08ED229EADAE4EC9C.roa
File:                     424A226ABF2611F08ED229EADAE4EC9C.roa (raw, json)
Hash identifier:          JIOdkzlXMzgv42LGgLitCvo5C5b6DlzCTAxuvGUG9/0=
Subject key identifier:   7E:77:CF:9E:5A:1B:C0:F8:6D:FB:28:49:65:3E:06:EE:9F:48:1C:9D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0186A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/424A226ABF2611F08ED229EADAE4EC9C.roa
Signing time:             Tue 11 Nov 2025 17:45:49 +0000
ROA not before:           Tue 11 Nov 2025 17:45:45 +0000
ROA not after:            Sat 20 Dec 2025 17:45:45 +0000
asID:                     151407
IP address blocks:        45.196.236.0/23 maxlen: 24
                          45.196.236.0/24 maxlen: 24
                          45.196.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100008 (0x186a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 11 17:45:45 2025 GMT
            Not After : Dec 20 17:45:45 2025 GMT
        Subject: CN=6913764d-dc1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c3:07:a4:f8:5b:9d:a2:49:7c:ed:36:4e:e0:
                    fe:2a:86:ac:70:46:b5:c9:48:40:a8:de:7b:0b:01:
                    7a:a7:3c:21:e5:86:2d:8c:f3:0a:9e:f3:d4:d8:9b:
                    f5:8c:0d:09:68:7e:99:1d:0d:69:2d:6d:9a:cc:d8:
                    32:47:0d:67:e5:6d:86:91:b3:9c:9f:b1:2b:13:73:
                    86:83:b0:75:9a:33:fd:a2:3c:b1:28:ba:31:31:53:
                    60:e7:eb:88:3f:69:87:03:56:53:33:0d:84:46:8b:
                    13:04:0c:62:f7:35:dc:ef:66:24:2b:ab:7c:7e:69:
                    2a:ad:04:e0:d3:6a:20:60:5f:e1:2a:26:b0:09:26:
                    e7:7c:12:d3:62:20:d1:94:4c:70:ce:88:31:83:9f:
                    14:9a:12:21:3a:4b:d0:6a:2a:1c:9c:8a:04:3d:05:
                    19:35:17:46:6f:29:51:67:41:6a:f9:ee:c1:41:8f:
                    c1:f1:7b:14:fb:1c:df:76:72:e3:0d:97:22:d1:4f:
                    70:c9:fe:cd:22:e9:32:7b:ff:ca:e7:a2:e9:23:59:
                    23:24:09:6e:97:03:aa:b3:78:f4:a5:95:38:03:9c:
                    1d:46:32:32:23:8b:7a:c9:e1:f3:84:86:70:80:0f:
                    b0:ab:44:a5:6d:a8:6b:70:5d:62:77:a6:68:ea:82:
                    24:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:77:CF:9E:5A:1B:C0:F8:6D:FB:28:49:65:3E:06:EE:9F:48:1C:9D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/424A226ABF2611F08ED229EADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:8a:c8:75:5c:47:93:88:5b:f5:4c:ec:a1:d1:2b:2e:98:92:
         3d:d9:a5:26:d1:c7:41:ec:14:a6:ad:a6:08:d3:e5:7e:dd:ea:
         ba:6b:e2:aa:02:29:60:eb:d7:bf:27:d3:6c:5c:c3:9a:7d:a7:
         80:42:be:b7:85:fd:10:a8:33:d6:64:e2:e3:98:2d:c7:8c:2c:
         1a:fa:9e:01:82:47:69:eb:f3:86:19:95:36:eb:55:dd:ec:df:
         94:db:93:26:8b:27:a5:42:e2:74:c7:65:41:4b:dc:f2:d4:c9:
         94:77:8b:ee:32:08:fe:2a:9a:8a:cf:b6:cb:32:f7:49:59:20:
         c9:8d:d3:5f:d8:a9:13:b3:f4:5f:f2:92:a8:7f:53:b2:b1:4d:
         0c:a0:ea:04:a4:ba:53:d7:58:12:20:ce:df:42:0d:40:69:d5:
         35:a1:e9:0b:fe:19:5f:fe:81:66:d6:5b:86:f0:51:d5:31:57:
         90:19:aa:76:cb:37:64:11:18:dd:30:ee:9b:a2:f3:30:b8:4c:
         7b:57:8d:41:53:50:92:41:6a:df:b3:f5:e3:f2:cf:37:b6:e1:
         4f:7b:16:60:42:7b:74:70:2f:5d:fe:db:2e:d1:5a:fe:3b:a5:
         fb:dc:84:94:9f:b1:7d:9b:aa:6d:5d:3b:9e:98:06:85:08:2a:
         96:61:1f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:01 2025 by rpki-client