This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AF957B4BFE411F0B2F2619EDAE4EC9C.roa
File:                     4AF957B4BFE411F0B2F2619EDAE4EC9C.roa (raw, json)
Hash identifier:          mPZR5b7w9rcir9FJy0xTunUyozYjPUxQpxCScSKzJuQ=
Subject key identifier:   9C:E1:C2:D0:9E:9F:A9:F7:12:CB:10:A4:F9:F6:24:79:FF:FC:39:2A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01870D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AF957B4BFE411F0B2F2619EDAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 16:26:08 +0000
ROA not before:           Wed 12 Nov 2025 16:26:04 +0000
ROA not after:            Mon 22 Dec 2025 16:26:04 +0000
asID:                     137899
IP address blocks:        45.205.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100109 (0x1870d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 12 16:26:04 2025 GMT
            Not After : Dec 22 16:26:04 2025 GMT
        Subject: CN=6914b520-a4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3d:95:84:97:a3:36:61:3c:d9:92:37:8a:22:
                    c3:4e:11:78:77:67:81:eb:af:78:2f:bf:1f:9b:b0:
                    db:3f:c8:82:2f:e0:c2:4b:5a:42:44:e7:0f:be:4d:
                    7d:0d:a5:04:79:13:94:18:1e:68:8b:3e:3c:ef:b0:
                    24:82:ff:3e:6e:89:a0:1d:05:e6:df:d0:17:c3:d2:
                    5d:d3:7b:3c:07:9f:21:98:46:06:cf:66:7d:9f:e8:
                    fc:50:db:1f:e2:1f:fe:d9:a1:02:9a:b1:30:d2:4e:
                    be:1a:78:3a:d9:17:99:1f:e8:47:ca:e6:bc:27:4f:
                    f6:0b:19:bf:29:8a:34:7d:e5:c0:98:46:91:a8:8e:
                    94:cf:3c:88:cc:c6:10:19:95:d5:e1:21:86:ec:af:
                    c7:b5:c3:2a:00:13:d3:88:fa:11:ae:5e:42:a5:65:
                    6f:4d:20:5e:6a:37:f9:04:08:4b:8a:3a:27:76:a2:
                    23:30:d8:38:88:b0:87:65:56:78:1c:4f:bd:a3:f5:
                    62:d0:6d:a2:d2:c0:8d:21:7a:a0:39:1f:54:38:e3:
                    68:5e:77:25:19:34:0d:c2:33:9f:dc:92:20:67:b4:
                    2b:1e:c1:92:64:df:50:4d:60:28:9d:38:8b:83:1b:
                    25:b1:e2:97:0e:84:23:19:af:25:97:66:d1:c2:7f:
                    ee:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E1:C2:D0:9E:9F:A9:F7:12:CB:10:A4:F9:F6:24:79:FF:FC:39:2A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4AF957B4BFE411F0B2F2619EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:22:d8:0b:b3:66:3a:d8:28:12:13:3f:e1:55:51:ca:64:56:
         81:dc:fe:e8:8d:d3:df:88:d8:37:6e:67:64:b6:38:21:0a:93:
         39:d9:e4:5c:7d:68:c3:87:ed:26:38:dd:4f:04:f0:43:45:7d:
         9f:0a:b2:ba:f2:55:9c:e6:4d:77:a9:aa:d6:0a:2e:de:3e:97:
         27:11:1d:5f:0e:5c:06:21:f6:cf:55:b7:1e:28:58:f4:b8:ed:
         d0:e8:fc:8b:69:01:ed:4b:23:3a:76:e8:f4:c9:61:a5:23:41:
         9c:bb:d1:1f:96:da:33:ce:b0:3c:a7:fd:e6:c4:40:c0:ff:b7:
         f9:e3:1d:e8:9d:de:8f:4a:39:ff:27:0b:1c:60:65:1f:2a:55:
         03:7e:dc:d0:9b:ad:22:11:f7:43:76:92:ed:81:68:ee:05:4e:
         5e:0c:da:b1:fd:62:db:90:76:b7:0a:ba:a4:5a:61:1e:5b:cd:
         f4:b2:49:81:9f:45:00:df:fc:26:ec:bb:fe:1a:0d:d1:fe:d5:
         97:06:0a:d8:8b:30:e0:8d:7e:21:af:71:6d:d0:c8:47:cf:8a:
         c7:15:d1:ab:b3:5f:e8:4a:66:60:c9:e7:57:f2:7d:bb:5e:bb:
         5e:46:2f:15:a1:8e:38:3a:3d:3f:26:71:aa:89:66:86:2e:d8:
         be:ae:72:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:01 2025 by rpki-client