This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/496536BEBFE111F0B8874C88DAE4EC9C.roa
File:                     496536BEBFE111F0B8874C88DAE4EC9C.roa (raw, json)
Hash identifier:          jVxJsOCF96BwLakJrLVNQKx+WWAm9dN40OlvL3lEilE=
Subject key identifier:   60:42:4E:9A:91:96:F9:17:A8:3C:89:32:5B:2F:EA:A4:8C:D6:45:9D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018707
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/496536BEBFE111F0B8874C88DAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 16:04:37 +0000
ROA not before:           Wed 12 Nov 2025 16:04:32 +0000
ROA not after:            Sun 04 Jan 2026 16:04:32 +0000
asID:                     20326
IP address blocks:        45.202.89.0/24 maxlen: 24
                          45.202.115.0/24 maxlen: 24
                          45.202.118.0/24 maxlen: 24
                          45.202.126.0/24 maxlen: 24
                          45.207.25.0/24 maxlen: 24
                          45.207.28.0/24 maxlen: 24
                          45.207.30.0/24 maxlen: 24
                          45.207.44.0/24 maxlen: 24
                          45.207.47.0/24 maxlen: 24
                          45.207.56.0/24 maxlen: 24
                          45.207.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100103 (0x18707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 12 16:04:32 2025 GMT
            Not After : Jan  4 16:04:32 2026 GMT
        Subject: CN=6914b015-e22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:43:3c:2d:5d:f3:70:20:df:3f:19:7f:c9:ae:
                    4b:a8:da:5f:65:e8:35:47:55:df:7b:72:7e:26:bf:
                    b2:59:08:6f:62:44:56:d8:74:b3:74:25:b5:75:ca:
                    0f:1c:f3:d8:0d:12:1f:6c:af:4d:3c:15:cb:14:b8:
                    5a:38:65:43:56:76:ee:35:41:1d:39:d7:46:82:78:
                    3f:95:d9:8d:c1:d7:97:71:ab:99:95:4e:cb:52:57:
                    81:96:17:73:7c:73:9c:42:db:8b:7d:b7:be:27:8c:
                    d8:14:89:d9:75:b4:64:21:5b:c2:a2:8c:1f:c3:10:
                    56:33:42:db:48:15:54:93:5a:8c:6b:db:64:e0:ad:
                    3b:1a:6f:6a:76:61:2b:c8:e3:0a:c2:ff:1f:bb:ff:
                    5e:16:8e:54:ed:c4:47:46:2d:d2:01:7e:ed:5b:5e:
                    a0:c1:6d:55:b1:a3:ac:8e:f6:9c:fc:09:27:f8:53:
                    d0:d5:a4:33:ee:67:1e:8f:8b:ca:20:c3:0f:19:92:
                    13:bf:a3:0a:1d:a8:b4:a4:35:97:4f:f3:43:c8:5f:
                    46:93:d4:f3:36:3b:20:22:5b:a8:5c:85:1d:9d:5e:
                    39:82:86:38:4f:40:c9:02:cb:d9:8a:7e:b6:6e:3c:
                    92:b9:50:a8:9f:73:58:22:e7:99:85:9a:63:6a:c1:
                    1b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:42:4E:9A:91:96:F9:17:A8:3C:89:32:5B:2F:EA:A4:8C:D6:45:9D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/496536BEBFE111F0B8874C88DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.89.0/24
                  45.202.115.0/24
                  45.202.118.0/24
                  45.202.126.0/24
                  45.207.25.0/24
                  45.207.28.0/24
                  45.207.30.0/24
                  45.207.44.0/24
                  45.207.47.0/24
                  45.207.56.0/24
                  45.207.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:f3:f5:7e:f0:96:7a:ac:24:d7:80:08:68:09:9b:0f:5e:26:
         54:bb:fc:b2:8b:cd:ac:a5:f9:c0:5b:08:a5:dd:0e:f8:df:ef:
         de:05:c1:2c:67:d9:c6:eb:60:81:9c:6a:c8:31:77:e6:a9:67:
         e4:17:f5:4c:37:ee:2f:f0:13:95:c3:22:e8:57:43:7f:22:2d:
         9b:ca:ff:f6:6e:f8:5a:49:f8:e6:05:ca:29:88:a8:15:15:bb:
         60:ec:46:22:1c:4a:e3:93:d9:99:32:5c:7c:37:b8:d2:b6:56:
         15:4c:ca:a4:c4:a5:1b:4d:f6:b1:d2:0b:a5:af:20:2b:a3:ae:
         a8:b5:6f:c4:ce:31:a8:f8:2a:9e:bd:5f:3a:0f:63:09:79:f4:
         ec:b7:59:f9:24:1a:b8:67:20:b8:f2:23:a4:dc:d9:10:ad:9a:
         93:02:87:34:8b:65:13:5e:5c:6a:51:cd:a2:ba:d9:5c:09:6c:
         ac:26:c0:e1:30:25:59:1a:f5:e2:94:99:7a:88:59:70:8d:bf:
         71:a0:23:39:d0:df:c9:cd:61:4c:10:80:0b:83:1c:92:79:5b:
         a8:22:12:18:69:b2:2b:09:25:9c:37:b1:9a:d1:c8:90:75:b2:
         98:d0:52:cc:38:85:ce:75:5d:01:21:4e:9a:0b:78:a4:e3:e9:
         a2:42:66:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:49 2025 by rpki-client