This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/528872BCBF2B11F08B3D898BDAE4EC9C.roa
File:                     528872BCBF2B11F08B3D898BDAE4EC9C.roa (raw, json)
Hash identifier:          Jifsm4K4cukWqzsX56xitC05o+6O+xuwrJ56ShN4mLg=
Subject key identifier:   EE:F5:7D:52:A6:BE:D9:9D:2D:36:D8:5E:A2:ED:B2:27:8F:63:27:A9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0186B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/528872BCBF2B11F08B3D898BDAE4EC9C.roa
Signing time:             Tue 11 Nov 2025 18:22:04 +0000
ROA not before:           Tue 11 Nov 2025 18:21:58 +0000
ROA not after:            Tue 23 Dec 2025 18:21:58 +0000
asID:                     214025
IP address blocks:        45.202.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100022 (0x186b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 11 18:21:58 2025 GMT
            Not After : Dec 23 18:21:58 2025 GMT
        Subject: CN=69137ecc-4a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:06:51:ec:e0:0d:fd:16:79:7b:31:49:a5:b7:
                    6b:70:6d:72:89:e2:09:62:f4:3f:a5:da:4d:e7:06:
                    9c:2c:61:bb:2c:8a:dc:3e:7b:2f:46:8f:4a:41:81:
                    69:65:f3:45:5f:05:76:f5:6c:e6:56:9a:ad:16:a1:
                    1b:e3:1f:c8:0a:50:21:43:db:c7:2f:0c:37:af:18:
                    6b:04:76:7c:dd:2d:47:6a:bf:1c:06:72:43:2d:19:
                    6e:d7:73:4c:bf:7c:57:df:bf:50:ae:bc:ed:c6:50:
                    41:fc:bc:9d:a5:6a:31:e5:a8:2e:b1:9b:4d:6d:fa:
                    32:ef:db:c8:85:9a:37:3b:0a:48:09:63:c8:22:93:
                    c6:f9:24:e6:03:ba:92:d0:92:09:cc:b8:01:56:66:
                    87:7e:6b:81:e2:09:ae:3f:af:d7:d6:ae:69:bb:3a:
                    9e:20:51:e2:5b:2f:c4:b2:7c:30:22:1c:51:56:be:
                    b5:66:5e:b9:b4:4c:57:4f:57:ba:b2:5f:99:36:0a:
                    54:22:3a:fc:79:97:e0:2c:dc:39:20:fa:f2:0f:58:
                    af:24:fd:87:89:7d:38:41:09:77:1a:b3:02:39:46:
                    c5:9c:64:12:5b:91:63:d6:2d:77:40:bf:48:64:18:
                    bd:ca:e9:e6:8b:f8:d9:8d:65:3c:f0:5f:dd:94:91:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F5:7D:52:A6:BE:D9:9D:2D:36:D8:5E:A2:ED:B2:27:8F:63:27:A9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/528872BCBF2B11F08B3D898BDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:df:10:08:12:fc:a0:bd:b7:d6:3f:ef:3c:a8:ea:f8:e9:7d:
         e0:53:a7:1e:f6:21:e1:48:cd:5c:4a:3e:0f:23:d7:9f:59:f7:
         12:a2:6d:e9:eb:00:ef:7d:96:33:05:30:db:5d:8b:c9:f0:ef:
         6d:37:ac:3f:7e:d7:48:ed:88:f4:8a:92:8f:6e:ca:2f:50:03:
         1f:19:da:4f:bb:87:a7:35:eb:01:4c:5f:67:d1:a3:40:51:81:
         59:17:1e:36:6f:47:04:c6:21:f8:68:50:fd:5f:a0:e1:24:01:
         ab:09:e0:51:49:a4:e5:64:3a:8e:95:59:f9:fb:3d:f6:9e:03:
         90:ac:2d:24:66:dc:fc:c3:df:0a:77:04:b0:d8:39:c8:a3:af:
         18:06:74:f9:d9:90:cb:88:ca:68:97:dd:36:aa:84:79:2d:ca:
         c5:4e:5d:c6:84:ed:60:be:35:b3:b4:97:2c:cb:3a:4f:b7:2f:
         56:65:9f:f2:75:f2:8d:ff:2a:b2:61:b4:0a:8a:b0:c5:d4:b7:
         8d:83:62:99:73:d0:7b:ea:a6:46:78:b2:06:36:1f:56:1b:37:
         4d:93:42:dc:e7:4f:f7:fe:29:82:2c:9e:c7:a1:5e:9c:9e:2c:
         c5:08:9a:e2:67:c0:6b:f0:be:fe:2b:d2:17:be:26:56:23:22:
         c0:df:e6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:47:55 2025 by rpki-client