This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/544F931EBBC511F09A81519CDAE4EC9C.roa
File:                     544F931EBBC511F09A81519CDAE4EC9C.roa (raw, json)
Hash identifier:          +q6iNbfn/lhiJSOq/YR2sHl/g9fICAc/diJjtUu/66Q=
Subject key identifier:   40:73:8E:1A:07:D4:0D:62:47:D0:5A:E6:42:42:43:AE:6B:40:05:E2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01859D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/544F931EBBC511F09A81519CDAE4EC9C.roa
Signing time:             Fri 07 Nov 2025 10:34:25 +0000
ROA not before:           Fri 07 Nov 2025 10:34:20 +0000
ROA not after:            Mon 22 Dec 2025 10:34:20 +0000
asID:                     8796
IP address blocks:        45.205.16.0/20 maxlen: 24
                          45.207.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99741 (0x1859d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  7 10:34:20 2025 GMT
            Not After : Dec 22 10:34:20 2025 GMT
        Subject: CN=690dcb31-35b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:be:ad:e6:db:d5:51:89:e9:d8:21:7e:2b:a8:
                    1c:e1:6b:32:1a:48:f1:be:42:26:cf:b0:64:26:e3:
                    7d:c4:fb:24:ec:2b:26:1c:8e:47:18:c6:d7:b8:a4:
                    ab:04:38:f9:73:32:66:6f:69:06:75:f4:1a:50:aa:
                    ce:b5:09:da:b9:4a:e2:50:01:19:96:c5:65:c6:76:
                    a3:aa:b2:94:6f:1c:c1:e4:5e:aa:5d:53:e9:6d:3f:
                    12:5a:da:e1:43:d2:2c:97:1a:bd:18:cf:34:47:a5:
                    f7:58:77:07:9f:5b:63:f2:f2:de:f9:af:f9:33:a8:
                    78:ad:0c:e0:7d:ce:eb:b7:9b:5d:0e:fb:43:c8:78:
                    8f:db:43:7d:51:0f:03:8d:f4:ca:30:96:8e:18:4d:
                    db:05:dd:6f:a9:16:b1:b6:cd:f4:6b:e3:dd:1f:c1:
                    b6:bb:2b:4c:6a:bc:ff:1f:41:22:5c:9f:7d:65:bb:
                    06:32:d8:d2:9c:18:6f:d5:c9:bf:9d:ee:ea:c6:00:
                    fa:aa:b8:bf:a4:ac:6d:9f:22:01:8f:87:48:60:fa:
                    dc:77:27:cf:82:00:c4:18:0d:f4:0e:e3:0c:52:a4:
                    a6:f3:95:26:cc:a9:3c:00:e5:0e:ff:56:42:75:25:
                    12:7b:f1:47:d8:36:d5:21:85:d7:bf:5f:9d:c8:67:
                    74:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:73:8E:1A:07:D4:0D:62:47:D0:5A:E6:42:42:43:AE:6B:40:05:E2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/544F931EBBC511F09A81519CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.16.0/20
                  45.207.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         06:db:83:66:14:0b:a9:83:ce:00:23:6a:c1:76:89:58:c2:d4:
         17:79:f1:67:21:f5:74:9e:75:ec:3d:9d:d7:54:a1:30:cd:46:
         aa:29:f2:10:d4:cd:1d:49:55:bd:f4:94:be:23:3f:f4:19:d7:
         33:79:ef:d5:e9:cd:59:3b:74:0f:6b:4e:99:68:3d:24:c9:a5:
         36:7c:31:07:0a:94:69:3b:db:65:c5:8b:1a:d1:65:9f:1c:e8:
         67:64:4e:a9:37:82:f1:2a:0a:09:3e:4c:d3:c5:62:e5:c9:37:
         60:12:a2:cf:d0:c2:3d:3c:98:b0:ad:d9:00:a4:94:60:4f:3a:
         79:7b:b6:46:c0:2a:1f:1d:c5:5a:c9:c2:74:98:96:0e:d0:18:
         4c:6c:df:79:cd:51:c8:63:0d:24:30:31:f6:df:21:63:d0:b5:
         43:2f:6f:35:16:bb:3e:13:13:5f:0d:87:28:5b:3c:89:f8:6e:
         5e:6b:11:8f:9a:de:80:01:6d:fe:90:76:af:98:c3:31:b9:5b:
         1a:89:c0:37:95:9d:2e:67:82:80:3a:ff:2a:8c:3f:a2:0c:d5:
         37:19:c3:88:46:80:04:39:3e:9a:d7:c0:e9:57:e7:b6:d2:1a:
         9f:1e:20:85:8e:84:ac:a6:16:a4:57:76:0a:45:22:7c:77:8a:
         65:ae:02:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:02 2025 by rpki-client