This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/780B87D4C37E11F0AC2E20E2DAE4EC9C.roa
File:                     780B87D4C37E11F0AC2E20E2DAE4EC9C.roa (raw, json)
Hash identifier:          VgXBwSE7FkQYbGtTWn9xO6p84fm0ys4yRWmbEE9/hTw=
Subject key identifier:   D6:3E:10:B1:80:66:CC:49:B0:CE:4F:CA:1F:DA:BA:DA:7A:D1:4E:63
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0187C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/780B87D4C37E11F0AC2E20E2DAE4EC9C.roa
Signing time:             Mon 17 Nov 2025 06:27:20 +0000
ROA not before:           Mon 17 Nov 2025 06:27:12 +0000
ROA not after:            Mon 08 Dec 2025 06:27:12 +0000
asID:                     211188
IP address blocks:        45.198.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100289 (0x187c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 17 06:27:12 2025 GMT
            Not After : Dec  8 06:27:12 2025 GMT
        Subject: CN=691ac048-82f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b0:a7:7e:76:58:3c:f4:4c:33:52:d6:05:1c:
                    c7:02:be:72:17:19:45:ad:8d:a7:af:9f:38:b6:a3:
                    46:49:a2:95:24:64:79:c6:8a:47:29:e6:4a:b7:8d:
                    fe:3b:59:48:49:49:42:14:ad:b3:94:cd:f6:30:50:
                    de:60:37:a2:20:c0:b6:6e:65:e6:2e:1c:5d:e8:1b:
                    29:04:d8:d9:78:1d:5d:8e:2a:47:4c:5f:84:51:46:
                    61:ee:59:77:bc:1f:6e:36:3c:f3:9e:d6:63:cc:10:
                    5a:65:fe:88:33:3c:2d:53:77:fd:25:77:d9:e1:ca:
                    a7:1b:eb:8e:c8:e8:c8:14:eb:b6:58:b3:8e:d1:f8:
                    2b:6f:ea:ca:c9:aa:f6:76:3a:fe:b3:73:8a:c3:a4:
                    34:91:b9:e9:48:0c:b0:01:04:3e:21:74:96:be:3d:
                    e9:41:93:97:c5:de:59:67:de:95:fe:25:28:1a:18:
                    13:fc:26:ec:40:d7:3e:e2:d7:fd:b1:e6:5c:a0:cf:
                    5c:74:87:a4:7b:50:24:2a:f5:f1:c9:69:0d:93:b2:
                    a6:0d:8c:97:92:25:58:b3:28:fc:5d:aa:be:64:0a:
                    10:88:95:15:c7:36:b3:37:5b:a7:4e:4c:7d:78:89:
                    23:cc:e0:b6:59:5b:4b:fc:9c:52:9d:91:36:c6:7a:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3E:10:B1:80:66:CC:49:B0:CE:4F:CA:1F:DA:BA:DA:7A:D1:4E:63
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/780B87D4C37E11F0AC2E20E2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:49:d2:e0:bc:28:64:40:5a:ed:91:ce:e0:23:a1:76:98:3e:
         ff:4e:3b:7b:85:1f:98:2a:e7:71:12:de:2f:c5:be:cd:a7:7d:
         33:c3:23:3c:bd:b1:54:2b:b4:c3:2f:9e:c8:17:85:0b:0a:11:
         f9:61:ee:cd:02:3b:81:91:1c:70:cd:1e:5b:22:f9:69:e2:43:
         ab:28:c7:d2:ce:f2:9d:e7:99:27:7d:86:c3:7a:42:d0:b3:fc:
         3e:23:82:f1:e8:33:ac:e8:04:18:9b:0c:5f:27:33:61:7a:58:
         19:72:29:42:96:7f:e9:ad:16:50:7f:f3:91:9a:6d:13:a3:4a:
         8b:59:a9:2f:a3:b0:00:70:33:87:ec:30:ce:6d:68:6f:30:23:
         77:9b:87:0a:4d:50:00:7a:a4:7f:1a:94:d0:39:52:5a:d2:e2:
         a3:80:40:9b:54:de:17:46:46:ab:33:43:cc:7a:20:3b:01:79:
         d4:f7:db:b0:0c:bf:41:3c:e7:d6:56:b7:ae:bf:7d:f0:b4:d3:
         ff:c7:14:5f:40:b0:7a:65:34:c7:c9:e8:4f:37:20:fb:23:22:
         b8:8d:9d:73:34:d9:eb:ed:19:f0:47:64:99:af:f9:aa:3f:75:
         68:ed:d5:79:98:cb:64:95:e8:bf:30:c5:1b:f8:43:63:1f:66:
         b8:34:d8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:14 2025 by rpki-client