This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45E1A836BFDE11F08CF730F5DAE4EC9C.roa
File:                     45E1A836BFDE11F08CF730F5DAE4EC9C.roa (raw, json)
Hash identifier:          OwAAhCHAugbDwjMhI/IGm2TKawCjc2EszPmeInsx9Wk=
Subject key identifier:   D1:DB:21:F8:59:EC:FC:38:F6:D1:67:93:61:EE:EC:5C:A5:1D:92:15
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018701
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45E1A836BFDE11F08CF730F5DAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 15:43:03 +0000
ROA not before:           Wed 12 Nov 2025 15:42:58 +0000
ROA not after:            Sat 20 Dec 2025 15:42:58 +0000
asID:                     25198
IP address blocks:        45.195.159.0/24 maxlen: 24
                          45.197.0.0/24 maxlen: 24
                          45.201.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100097 (0x18701)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 12 15:42:58 2025 GMT
            Not After : Dec 20 15:42:58 2025 GMT
        Subject: CN=6914ab07-c8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:dc:cf:60:71:de:13:0f:61:b4:56:61:2b:79:
                    8f:55:4e:ea:6c:9a:c7:72:30:51:32:fb:80:cf:54:
                    98:c0:db:2a:4e:f6:2e:39:50:a3:e5:8e:ae:11:9d:
                    52:7b:d0:a8:1f:2c:e6:9e:28:7d:51:84:06:0c:57:
                    ca:86:b8:4f:08:13:7e:b4:11:53:ee:78:6d:bd:ae:
                    a8:80:5d:74:16:ad:8b:3a:8e:13:3f:cf:d1:f9:d8:
                    7f:dd:0f:f0:c0:f9:06:60:69:f2:3c:e1:0d:b0:9e:
                    ce:17:e4:8f:aa:cc:66:38:f8:dc:56:c4:56:8e:8f:
                    2c:8a:74:b4:87:98:f0:99:6f:63:a1:ee:8e:ac:b0:
                    4c:1e:83:f5:5a:e1:06:dc:9d:f4:4c:84:e7:37:f3:
                    49:71:df:11:39:5d:79:ef:f2:88:04:8e:b4:44:bd:
                    2d:7b:d1:f8:f9:48:a2:28:ed:de:88:1e:fd:04:22:
                    89:97:03:55:b3:17:92:8b:0e:1a:1f:8a:00:d4:e4:
                    f5:d5:55:ba:66:db:ed:c3:c4:df:7e:07:12:00:1c:
                    17:c6:fa:4f:e7:4b:60:18:66:07:73:94:43:29:3c:
                    cb:8b:c8:da:84:e2:40:34:19:c7:e2:01:f7:56:ce:
                    f8:1c:27:9c:da:d4:48:c5:0b:c0:e9:e7:87:fa:f5:
                    18:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DB:21:F8:59:EC:FC:38:F6:D1:67:93:61:EE:EC:5C:A5:1D:92:15
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45E1A836BFDE11F08CF730F5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.159.0/24
                  45.197.0.0/24
                  45.201.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:5a:37:79:42:b3:d4:aa:5b:10:ad:a7:40:40:c8:8c:ea:50:
         ba:de:ac:b6:59:34:4a:79:f3:1d:9a:20:87:14:d4:1c:6f:7c:
         63:e3:32:b5:b6:3d:b1:95:ad:fc:30:df:16:0e:66:69:e7:96:
         47:09:e4:8c:da:1b:69:71:5b:d5:dc:39:55:ed:3f:94:71:c0:
         14:4d:31:b6:d6:8f:56:9a:a0:ca:a4:1b:62:5f:c6:97:4d:82:
         29:62:90:aa:e5:95:92:4b:e1:b5:fe:e1:1b:b9:de:3f:53:4c:
         ac:e7:a1:95:33:f6:cd:db:11:e7:99:a1:b4:0f:ff:7f:db:9f:
         d8:66:96:a4:9b:02:4a:32:fd:35:8b:dd:29:6f:17:bd:f7:fa:
         01:17:e4:d4:7c:34:cf:77:84:90:17:33:83:e0:7c:8b:cb:bf:
         16:54:a1:7e:c7:ec:a2:34:b0:5e:02:3e:b1:c8:fc:28:ec:22:
         6d:21:bd:84:d1:fb:ef:12:11:8e:a2:c3:ae:37:6b:d7:db:05:
         4d:be:51:5f:32:9f:3e:76:86:fe:c3:b1:52:17:c3:ee:1a:08:
         d9:81:46:dd:9f:40:2f:38:91:91:94:28:33:5b:18:5d:1a:d2:
         f6:dd:ca:d8:8f:2f:1c:a5:76:c5:5c:36:47:89:c1:53:03:d0:
         7d:dd:2d:d3
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAYcBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTEyMTU0MjU4WhcNMjUxMjIwMTU0MjU4WjAYMRYw
FAYDVQQDEw02OTE0YWIwNy1jOGVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzdzPYHHeEw9htFZhK3mPVU7qbJrHcjBRMvuAz1SYwNsqTvYuOVCj5Y6u
EZ1Se9CoHyzmnih9UYQGDFfKhrhPCBN+tBFT7nhtva6ogF10Fq2LOo4TP8/R+dh/
3Q/wwPkGYGnyPOENsJ7OF+SPqsxmOPjcVsRWjo8sinS0h5jwmW9joe6OrLBMHoP1
WuEG3J30TITnN/NJcd8ROV157/KIBI60RL0te9H4+UiiKO3eiB79BCKJlwNVsxeS
iw4aH4oA1OT11VW6Ztvtw8TffgcSABwXxvpP50tgGGYHc5RDKTzLi8jahOJANBnH
4gH3Vs74HCec2tRIxQvA6eeH+vUYFwIDAQABo4ICrjCCAqowHQYDVR0OBBYEFNHb
IfhZ7Pw49tFnk2Hu7FylHZIVMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NUUxQTgzNkJGREUxMUYwOENGNzMwRjVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALcOfAwQALcUAAwQALckIMA0G
CSqGSIb3DQEBCwUAA4IBAQAQWjd5QrPUqlsQradAQMiM6lC63qy2WTRKefMdmiCH
FNQcb3xj4zK1tj2xla38MN8WDmZp55ZHCeSM2htpcVvV3DlV7T+UccAUTTG21o9W
mqDKpBtiX8aXTYIpYpCq5ZWSS+G1/uEbud4/U0ys56GVM/bN2xHnmaG0D/9/25/Y
ZpakmwJKMv01i90pbxe99/oBF+TUfDTPd4SQFzOD4HyLy78WVKF+x+yiNLBeAj6x
yPwo7CJtIb2E0fvvEhGOosOuN2vX2wVNvlFfMp8+dob+w7FSF8PuGgjZgUbdn0Av
OJGRlCgzWxhdGtL23crYjy8cpXbFXDZHicFTA9B93S3T
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:13 2025 by rpki-client