This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FE4672EE04411F08BB23FF6DAE4EC9C.roa
File:                     5FE4672EE04411F08BB23FF6DAE4EC9C.roa (raw, json)
Hash identifier:          WEH5zifudOfrspR9obm4s4DjxbcH9TaDQ0f3bBtT4tU=
Subject key identifier:   67:ED:53:2E:07:99:85:86:C7:90:7A:F9:6A:75:31:B4:AF:3C:27:FB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019129
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FE4672EE04411F08BB23FF6DAE4EC9C.roa
Signing time:             Tue 23 Dec 2025 21:14:32 +0000
ROA not before:           Tue 23 Dec 2025 21:14:27 +0000
ROA not after:            Wed 28 Jan 2026 21:14:27 +0000
asID:                     62240
IP address blocks:        45.192.42.0/24 maxlen: 24
                          45.192.43.0/24 maxlen: 24
                          45.192.44.0/24 maxlen: 24
                          45.192.45.0/24 maxlen: 24
                          45.192.46.0/24 maxlen: 24
                          45.192.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102697 (0x19129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 23 21:14:27 2025 GMT
            Not After : Jan 28 21:14:27 2026 GMT
        Subject: CN=694b0638-e7b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:79:87:11:a2:0f:bc:fc:e4:d5:e3:00:f8:0a:
                    06:07:a1:b4:52:f1:33:c1:01:30:3b:30:37:b3:a8:
                    e8:9c:16:c0:3a:38:5b:b3:17:4a:d1:6a:7c:d1:23:
                    ef:0d:51:de:96:59:df:c4:46:f4:dd:cf:b0:82:55:
                    1a:8f:91:da:15:25:08:44:f1:c3:70:1a:fe:ac:75:
                    fc:5e:a4:17:4f:dd:7c:e8:f2:30:90:b0:49:a6:e5:
                    36:04:fe:04:7f:7b:1a:1b:a1:4a:68:c7:b2:73:be:
                    c7:4d:84:bc:15:7f:30:b5:bb:51:8e:30:46:7b:06:
                    58:59:96:52:d9:fb:e9:db:1a:87:62:0a:40:5b:53:
                    4b:54:02:68:52:26:33:82:07:67:96:66:be:04:ca:
                    31:21:69:03:0e:ac:03:68:a6:7d:68:3a:fc:3c:e7:
                    61:58:f6:d9:2e:65:5f:8e:5e:b9:b4:08:ce:ad:b1:
                    36:7e:1e:34:2f:1f:d5:ba:6b:9a:0b:eb:7a:8c:e6:
                    ec:47:89:73:c6:4a:9d:92:75:ba:dc:6c:12:73:39:
                    8d:da:c0:80:38:bb:30:b6:f3:0e:6e:ce:e7:b8:f7:
                    6f:48:81:b0:17:93:ca:c9:68:75:5a:38:db:68:1e:
                    06:35:08:ed:79:13:ec:fa:f5:51:e0:94:a1:55:cb:
                    a1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:ED:53:2E:07:99:85:86:C7:90:7A:F9:6A:75:31:B4:AF:3C:27:FB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5FE4672EE04411F08BB23FF6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.42.0-45.192.47.255

    Signature Algorithm: sha256WithRSAEncryption
         4c:e2:a9:7a:15:00:18:68:4f:2a:94:bb:19:46:bd:1f:79:eb:
         a8:ff:c6:eb:d3:e9:2a:3b:d7:30:48:36:ed:2c:15:b1:1d:88:
         1c:52:9b:5e:53:37:31:b9:ff:56:88:34:37:9f:50:18:a1:90:
         e1:e6:2c:8b:b5:f0:2e:2b:18:17:25:d4:a8:9f:9c:8a:3a:f9:
         2b:ac:70:19:9c:94:ce:db:28:9f:38:8f:08:1e:47:54:e6:39:
         b7:0b:07:ca:5a:26:79:99:64:c3:77:cd:c2:fd:c1:c2:d6:58:
         ac:c3:7f:3c:95:1f:a2:16:0b:68:7d:40:f1:a4:55:a1:ef:96:
         1d:04:44:27:a1:c3:b7:12:26:20:bf:41:28:7d:54:81:9f:db:
         bc:24:e7:f9:c6:cd:2c:37:39:03:aa:02:75:7f:1b:22:71:aa:
         bc:7f:92:7e:14:c9:d3:d0:d0:af:b1:ee:25:fa:08:eb:51:91:
         e8:7c:c2:d0:ae:81:30:20:d8:08:eb:e0:22:18:90:6b:d3:ea:
         ec:32:c8:a1:ae:69:b3:94:45:c3:3e:4f:39:bb:9d:d3:ae:20:
         e7:f3:74:34:a1:45:13:80:12:0a:d5:36:85:f4:88:71:14:64:
         69:6d:99:73:cf:77:f4:17:09:e6:65:9e:52:cb:02:c1:7e:26:
         c4:c8:a8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 16:47:00 2025 by rpki-client