This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/623E5998BBBF11F0A4FEEB79DAE4EC9C.roa
File:                     623E5998BBBF11F0A4FEEB79DAE4EC9C.roa (raw, json)
Hash identifier:          g34thjsdcrJVrQ0vcWBw/GTiEPMeG48YBpNIJSu+958=
Subject key identifier:   6D:B7:18:00:37:A0:73:F2:52:D5:F0:66:25:10:65:A7:6E:D3:B0:E6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018597
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/623E5998BBBF11F0A4FEEB79DAE4EC9C.roa
Signing time:             Fri 07 Nov 2025 09:51:51 +0000
ROA not before:           Fri 07 Nov 2025 09:51:45 +0000
ROA not after:            Mon 22 Dec 2025 09:51:45 +0000
asID:                     142032
IP address blocks:        45.192.96.0/20 maxlen: 24
                          45.192.96.0/21 maxlen: 24
                          45.192.96.0/22 maxlen: 24
                          45.192.100.0/22 maxlen: 24
                          45.192.104.0/21 maxlen: 24
                          45.192.104.0/22 maxlen: 24
                          45.192.108.0/22 maxlen: 24
                          45.205.16.0/20 maxlen: 24
                          45.205.16.0/21 maxlen: 24
                          45.207.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99735 (0x18597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  7 09:51:45 2025 GMT
            Not After : Dec 22 09:51:45 2025 GMT
        Subject: CN=690dc137-ae83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bb:b1:72:0d:8a:ca:f1:de:ed:d7:d8:2c:c1:
                    5c:a0:05:7b:98:06:21:f1:ef:d7:b2:ed:7c:bb:49:
                    6f:2e:e1:34:5c:06:69:1b:dd:0b:39:73:3d:0f:49:
                    4d:1c:96:cf:7e:50:68:eb:11:44:f4:8d:46:14:5a:
                    92:0a:13:a7:0b:e7:60:07:64:72:e8:8c:b5:57:8d:
                    76:c0:f5:dd:57:c3:d4:cc:56:2b:f5:c3:71:6d:93:
                    08:d3:bb:84:94:f9:7c:fe:96:fc:db:6d:20:a9:d4:
                    56:c1:6c:77:4e:f3:94:c9:6a:33:c3:dc:30:01:1e:
                    07:77:38:5b:d0:c6:eb:6a:7a:2d:f4:c3:ad:a9:fc:
                    dc:83:24:3c:0f:55:53:89:5e:af:b1:d1:d2:43:a7:
                    76:d3:0f:50:f0:14:45:64:b2:77:64:fc:b4:d0:39:
                    79:a6:19:ee:6f:37:3d:34:b5:25:9e:62:67:84:2a:
                    e7:0c:61:68:4b:53:1c:d5:4e:26:26:ac:de:d5:61:
                    5b:17:40:7e:e8:bf:d5:71:c0:2f:54:82:2b:38:f8:
                    b3:ce:6e:9e:c8:6d:5e:5c:ca:bc:4c:e3:ec:8c:9f:
                    08:d4:6e:da:96:c8:7c:3e:cb:69:27:c4:66:17:38:
                    5e:d0:13:a3:ae:ed:ae:d1:8e:9b:1a:61:04:25:7c:
                    62:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B7:18:00:37:A0:73:F2:52:D5:F0:66:25:10:65:A7:6E:D3:B0:E6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/623E5998BBBF11F0A4FEEB79DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.96.0/20
                  45.205.16.0/20
                  45.207.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:ac:49:49:dc:02:6e:97:12:2d:16:8e:20:08:bd:16:07:c5:
         81:d1:16:1a:e2:6c:e6:1a:a8:cc:17:f9:79:dd:85:bd:c5:c2:
         48:cb:8b:ac:16:6e:cf:50:71:42:ed:00:1c:cd:c3:7a:35:97:
         cb:ff:f6:fc:8b:3a:f7:e4:af:bf:1e:1a:88:b5:25:ac:73:0c:
         14:8d:ca:3b:97:dc:1e:a2:45:d0:0e:90:e9:0f:4e:0c:70:65:
         c2:57:d0:7e:1c:0b:a0:98:ef:73:94:86:37:d5:08:dd:5e:6b:
         40:d4:58:05:60:13:5f:4c:44:3e:09:3f:a6:34:b3:41:39:9c:
         42:97:29:ca:88:fe:42:4c:f9:df:55:04:61:86:63:49:4b:0a:
         0e:33:a7:63:e8:05:b9:b1:f2:68:3a:76:2d:8b:59:94:24:1b:
         af:b1:4f:91:1e:4c:41:56:eb:8b:f7:79:83:39:37:cd:e8:f1:
         78:e5:b8:6f:d7:11:4d:42:77:32:2d:db:db:7a:5f:1b:70:00:
         58:04:f1:29:b9:f5:99:85:32:75:8b:32:52:c9:c3:34:f2:96:
         18:97:5b:34:7f:93:40:05:1f:eb:55:bc:51:6f:21:6c:5e:74:
         e3:38:25:09:98:69:32:fd:61:4c:05:b2:23:91:88:02:b4:09:
         5b:22:83:d8
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAYWXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTA3MDk1MTQ1WhcNMjUxMjIyMDk1MTQ1WjAYMRYw
FAYDVQQDEw02OTBkYzEzNy1hZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA1buxcg2KyvHe7dfYLMFcoAV7mAYh8e/Xsu18u0lvLuE0XAZpG90LOXM9
D0lNHJbPflBo6xFE9I1GFFqSChOnC+dgB2Ry6Iy1V412wPXdV8PUzFYr9cNxbZMI
07uElPl8/pb8220gqdRWwWx3TvOUyWozw9wwAR4Hdzhb0Mbranot9MOtqfzcgyQ8
D1VTiV6vsdHSQ6d20w9Q8BRFZLJ3ZPy00Dl5phnubzc9NLUlnmJnhCrnDGFoS1Mc
1U4mJqze1WFbF0B+6L/VccAvVIIrOPizzm6eyG1eXMq8TOPsjJ8I1G7alsh8Pstp
J8RmFzhe0BOjru2u0Y6bGmEEJXxi2wIDAQABo4ICrjCCAqowHQYDVR0OBBYEFG23
GAA3oHPyUtXwZiUQZadu07DmMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82MjNFNTk5OEJCQkYxMUYwQTRGRUVCNzlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQELcBgAwQELc0QAwQFLc/AMA0G
CSqGSIb3DQEBCwUAA4IBAQA+rElJ3AJulxItFo4gCL0WB8WB0RYa4mzmGqjMF/l5
3YW9xcJIy4usFm7PUHFC7QAczcN6NZfL//b8izr35K+/HhqItSWscwwUjco7l9we
okXQDpDpD04McGXCV9B+HAugmO9zlIY31QjdXmtA1FgFYBNfTEQ+CT+mNLNBOZxC
lynKiP5CTPnfVQRhhmNJSwoOM6dj6AW5sfJoOnYti1mUJBuvsU+RHkxBVuuL93mD
OTfN6PF45bhv1xFNQncyLdvbel8bcABYBPEpufWZhTJ1izJSycM08pYYl1s0f5NA
BR/rVbxRbyFsXnTjOCUJmGky/WFMBbIjkYgCtAlbIoPY
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:36 2025 by rpki-client