This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/784C9776CFA211F0A31899ABDAE4EC9C.roa
File:                     784C9776CFA211F0A31899ABDAE4EC9C.roa (raw, json)
Hash identifier:          m9otDhvjUORVEOlcxLuem+i/ZZNN/sRhBUYat9C8YTM=
Subject key identifier:   5E:0B:B8:84:88:33:D9:72:35:65:28:C6:AD:AE:5A:AF:71:43:83:9D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018B27
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/784C9776CFA211F0A31899ABDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 17:15:16 +0000
ROA not before:           Tue 02 Dec 2025 17:15:11 +0000
ROA not after:            Wed 28 Jan 2026 17:15:11 +0000
asID:                     152711
IP address blocks:        45.202.64.0/24 maxlen: 24
                          45.202.65.0/24 maxlen: 24
                          45.202.66.0/24 maxlen: 24
                          45.202.67.0/24 maxlen: 24
                          45.202.209.0/24 maxlen: 24
                          45.202.210.0/24 maxlen: 24
                          45.202.211.0/24 maxlen: 24
                          45.202.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101159 (0x18b27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 17:15:11 2025 GMT
            Not After : Jan 28 17:15:11 2026 GMT
        Subject: CN=692f1ea4-286c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ff:c4:e0:72:06:a8:a7:b1:e3:15:c0:9a:68:
                    59:57:76:3c:64:0a:20:5e:c8:49:a9:1e:84:35:b1:
                    d4:6e:c9:9c:30:ca:e0:83:22:83:ef:30:1c:fe:bd:
                    04:c1:eb:e7:30:80:12:1f:94:64:95:ad:98:96:5b:
                    ae:04:f7:95:32:76:7a:48:a1:37:8d:06:bc:cc:d1:
                    07:8d:5a:33:b0:59:71:f6:6d:fa:b3:b6:6b:93:65:
                    af:6f:e1:a6:5b:c7:94:64:06:09:ea:47:7d:c3:4a:
                    9b:30:11:c3:ac:3f:ef:38:27:f4:4e:eb:cf:db:56:
                    ea:16:a0:41:4d:49:62:d1:d0:d7:bf:95:bb:09:88:
                    a1:66:08:6d:c1:ba:a7:82:66:9b:dd:6b:c6:de:d5:
                    c3:18:10:c5:4d:5b:9f:65:0a:91:87:76:fd:b9:9d:
                    d0:cc:46:22:00:5e:8d:24:b4:bb:d7:4d:f9:0e:3a:
                    8d:a8:44:13:57:ad:f8:df:ce:f3:82:76:f3:f8:2c:
                    a7:7d:7b:8f:89:2e:96:2a:55:b9:db:50:7d:78:db:
                    2f:b1:e4:90:79:0d:bc:61:1b:e2:5f:9a:cb:0c:24:
                    22:17:2b:47:41:cb:3a:fc:be:cb:3a:e8:27:c2:33:
                    d5:ae:10:a2:ea:c6:43:85:dd:b7:4a:6c:e1:72:0b:
                    f2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0B:B8:84:88:33:D9:72:35:65:28:C6:AD:AE:5A:AF:71:43:83:9D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/784C9776CFA211F0A31899ABDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.64.0/22
                  45.202.209.0-45.202.212.255

    Signature Algorithm: sha256WithRSAEncryption
         51:77:40:d1:fa:3f:0c:8b:65:37:0e:cc:bc:c6:4a:e9:0e:60:
         c4:a1:7d:51:6a:2e:a6:07:f8:d6:aa:64:4c:37:1b:6d:cf:e6:
         ab:b8:02:e4:bf:58:23:68:f9:c4:8d:7b:e8:11:c9:99:04:14:
         bc:98:49:1c:e9:30:a3:e8:31:05:7c:d4:50:bc:f0:b3:e4:14:
         81:fe:52:5d:ef:ac:89:e5:b2:67:36:36:60:6f:42:b1:61:22:
         76:e5:06:35:2d:92:84:93:5b:87:5c:bc:a9:3d:cc:07:bb:42:
         e7:75:11:28:ea:d4:ac:42:ed:8c:9c:c8:cd:23:89:4a:b5:63:
         ca:b4:1f:96:c0:10:b9:67:58:c2:5f:7e:ed:2c:a0:ae:f2:4c:
         34:17:7d:0d:48:f2:f0:52:94:d5:c4:f1:a7:4e:cf:9c:77:93:
         88:97:9a:e0:5a:5a:da:62:57:0a:62:d9:52:49:a1:f3:a8:41:
         ca:e7:b4:30:b4:b1:5c:92:8b:70:d1:7b:1c:d7:c6:56:47:8c:
         6a:3e:a8:de:4e:e0:d1:8b:fe:b8:d7:d0:b7:7d:1a:56:3a:2e:
         2f:bd:a9:4b:cd:f3:87:e1:d2:1f:66:70:07:f4:70:ce:36:75:
         c2:63:34:e8:b8:02:b5:1c:e1:90:b5:9c:a3:29:63:ee:81:a8:
         79:b0:79:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:54 2025 by rpki-client