This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69B31B5CBAF011F082C80FDEDAE4EC9C.roa
File:                     69B31B5CBAF011F082C80FDEDAE4EC9C.roa (raw, json)
Hash identifier:          g0YLcKndfkelcpWZK5d5fpG+OPMY/2eIe/kbCIDiGaM=
Subject key identifier:   8A:96:F9:7F:C9:C3:A9:16:F2:C0:57:D1:1B:F9:7E:B1:AF:8B:93:AF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018511
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69B31B5CBAF011F082C80FDEDAE4EC9C.roa
Signing time:             Thu 06 Nov 2025 09:10:18 +0000
ROA not before:           Thu 06 Nov 2025 09:10:10 +0000
ROA not after:            Thu 05 Feb 2026 09:10:10 +0000
asID:                     135377
IP address blocks:        45.192.10.0/24 maxlen: 24
                          45.192.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99601 (0x18511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  6 09:10:10 2025 GMT
            Not After : Feb  5 09:10:10 2026 GMT
        Subject: CN=690c65fa-ee7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:6c:23:ec:ac:52:e6:de:f1:4c:d4:b6:68:
                    65:d4:8b:7d:b2:39:ad:15:1c:e1:5f:fc:50:95:3d:
                    df:60:74:c9:eb:7c:93:74:03:bf:cc:01:1b:ff:74:
                    b9:9a:95:88:5d:45:6a:53:b3:56:a7:ab:2c:89:a2:
                    3f:35:cf:a4:1d:09:87:1e:60:45:f0:83:64:5f:96:
                    18:b4:1f:3a:bd:bb:db:90:08:f1:fb:c7:f0:ad:f0:
                    2d:af:ee:a0:65:82:67:86:90:11:85:b0:44:b9:bf:
                    b4:01:f6:6a:39:13:60:f0:a8:0d:f7:c2:4d:09:45:
                    55:15:86:5e:60:81:17:2f:c7:f8:f1:73:13:17:cd:
                    8a:6e:af:6d:d9:9e:58:d7:2a:95:f8:1a:4f:74:a6:
                    9a:11:e5:08:d2:dc:0d:dd:a1:96:00:77:3a:5c:85:
                    ba:5b:05:a2:65:3d:22:90:6d:19:67:a3:12:8c:8e:
                    9f:90:a1:91:57:b8:0d:b0:cb:20:54:9b:22:0c:93:
                    11:5c:f8:25:a1:20:1f:a7:7f:2c:07:43:e0:c2:a8:
                    88:61:73:f4:26:d9:65:ad:bf:a9:f1:5b:a8:80:2d:
                    ad:da:aa:f0:9a:5d:03:b9:30:4d:88:cc:1e:f1:bc:
                    80:c6:26:4f:c0:15:31:83:53:9a:bc:7f:86:12:ec:
                    f7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:96:F9:7F:C9:C3:A9:16:F2:C0:57:D1:1B:F9:7E:B1:AF:8B:93:AF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69B31B5CBAF011F082C80FDEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:94:c1:20:80:c4:98:37:0a:69:d8:fe:2d:7a:7e:82:04:16:
         4c:cb:89:1c:97:3a:b0:0f:d8:e7:5e:3b:f7:7e:89:61:08:a9:
         b0:20:43:ad:b9:f7:85:7e:d9:fe:b4:72:b9:c8:51:3b:0b:ec:
         8e:51:14:ce:90:10:d9:f4:e4:29:01:fd:c0:28:62:82:d0:30:
         4d:16:94:90:3b:f3:f7:dc:76:8c:2d:1e:6f:6c:c8:b9:30:8f:
         ac:dd:06:27:69:53:10:73:00:5d:f5:d8:13:bf:f3:7c:1b:1d:
         ee:be:09:99:8d:92:e9:37:6b:42:5d:83:20:50:18:11:3a:dd:
         3f:8a:03:5a:7e:12:1f:c7:14:1b:fa:b5:e3:5b:d3:eb:21:13:
         7a:c1:5b:17:46:38:e7:87:dd:4f:ba:e1:fc:b7:a1:87:ce:09:
         ff:27:3f:ee:7b:41:ba:48:a9:e6:ec:dc:4a:cd:d3:ef:85:ca:
         28:b4:40:f5:fc:0a:ab:04:c2:45:d5:a1:b5:5d:cf:e3:22:46:
         4b:a5:24:63:90:e6:89:83:95:24:5a:e6:1b:21:d1:9f:0e:9c:
         f4:3e:c7:36:81:f9:db:e4:72:9d:75:0a:4d:0f:9e:1f:88:c5:
         44:da:05:66:0b:bf:29:78:93:bd:03:42:d1:cb:e7:1f:da:06:
         6b:1c:6b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:56 2025 by rpki-client