This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D98C48BFC811F09BB230EFDAE4EC9C.roa
File:                     77D98C48BFC811F09BB230EFDAE4EC9C.roa (raw, json)
Hash identifier:          k1L3CNQuFkO9Q+mQLkH8SsKRpQMS5K88zGOszyD20Ck=
Subject key identifier:   37:B2:C6:5A:12:AB:75:A3:FB:4D:0B:93:C2:A7:E4:E2:75:FF:51:01
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0186E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D98C48BFC811F09BB230EFDAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 13:06:58 +0000
ROA not before:           Wed 12 Nov 2025 13:06:50 +0000
ROA not after:            Mon 18 May 2026 13:06:50 +0000
asID:                     152849
IP address blocks:        45.195.112.0/21 maxlen: 24
                          45.195.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100065 (0x186e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 12 13:06:50 2025 GMT
            Not After : May 18 13:06:50 2026 GMT
        Subject: CN=69148672-501b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3b:a8:23:1b:97:68:6d:db:68:e4:e6:cf:ad:
                    8f:a1:e5:97:bc:49:62:e4:3c:79:d3:b0:ed:7d:1d:
                    10:31:91:3c:d0:e7:5f:1c:12:b3:70:8a:b0:93:64:
                    07:88:d6:96:f1:4c:0c:7b:a8:11:cd:6d:90:ad:81:
                    ae:f7:8c:75:ed:b6:5c:0c:6e:d1:93:76:e9:7c:b6:
                    e8:6d:84:c8:e4:ae:24:e4:96:da:8a:8c:a8:b6:07:
                    23:49:5b:07:44:45:fc:d0:18:80:c0:f5:fe:95:76:
                    50:ad:9d:e9:87:cb:27:d5:de:8e:56:ea:be:13:fd:
                    50:05:cf:4c:2f:8c:96:4e:41:97:4d:84:1e:b1:4c:
                    bc:0f:94:1c:27:03:94:1e:99:ce:0e:f2:af:7a:60:
                    02:2b:83:81:37:15:c3:f5:33:00:15:7d:0f:27:3d:
                    59:1a:9c:51:f5:57:26:04:7b:75:b8:56:20:e3:72:
                    91:e9:32:a7:43:06:33:8e:9d:f2:4f:25:55:b1:38:
                    1a:26:46:63:e2:8c:60:f0:e1:88:84:e3:11:92:4a:
                    13:9c:3d:a3:90:8e:79:cb:70:cc:40:45:e6:ae:7b:
                    4f:90:9c:d3:d1:09:c0:78:7f:17:06:d7:fd:65:93:
                    7a:25:f1:20:cb:6c:94:c0:c1:0e:a8:42:19:70:36:
                    39:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B2:C6:5A:12:AB:75:A3:FB:4D:0B:93:C2:A7:E4:E2:75:FF:51:01
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/77D98C48BFC811F09BB230EFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         92:b3:5c:e7:eb:bc:e9:d7:05:af:93:58:2d:25:35:71:b7:2e:
         0f:e2:66:7d:a0:e2:60:dd:c0:d9:8e:fb:fb:6e:07:64:78:03:
         5e:af:7f:c6:35:d6:9f:80:b7:34:7f:97:80:08:5a:c7:68:81:
         72:a1:5f:13:7a:82:00:21:91:8a:90:37:b2:35:13:bc:21:23:
         a8:70:b7:e1:0c:08:fc:0c:d8:79:06:fe:57:b0:fe:c5:f5:42:
         29:55:0f:a3:26:02:46:9c:cf:86:7e:a5:ba:62:0d:7e:71:8c:
         31:a7:fe:e2:03:70:19:98:a4:1a:3b:06:ba:89:1c:d1:ab:03:
         d5:5c:04:81:52:24:65:cc:8e:0b:bc:d6:f9:b8:e2:21:60:56:
         0f:27:ca:f3:6e:a1:07:a9:d8:ba:76:20:f9:79:90:1c:e7:d5:
         e5:29:22:03:86:8c:f2:a0:ef:a4:1d:97:4c:02:8f:0e:74:07:
         64:01:2d:77:85:d5:98:26:18:2a:d1:9f:5a:b3:61:ef:4e:b9:
         3e:71:c7:a5:76:b5:13:6d:f8:ff:b3:8c:99:4e:49:67:b4:e3:
         ea:4d:90:17:ad:da:a0:d2:7b:26:36:a2:17:ef:2a:da:0a:95:
         df:a5:b1:5d:2a:16:70:09:b8:87:b0:a2:1e:d6:72:6a:84:c0:
         c3:22:aa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:58 2025 by rpki-client