This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B964360BB0111F0BA4505C9DAE4EC9C.roa
File:                     7B964360BB0111F0BA4505C9DAE4EC9C.roa (raw, json)
Hash identifier:          EDler/YRlSDdjQCg3eHGwj9cLTXFk33cLGqNeQxeeKU=
Subject key identifier:   AC:D3:48:1D:2B:1D:5C:69:9C:A1:22:CC:5E:1B:7A:A7:4A:EE:AA:4D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018533
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B964360BB0111F0BA4505C9DAE4EC9C.roa
Signing time:             Thu 06 Nov 2025 11:12:29 +0000
ROA not before:           Thu 06 Nov 2025 11:12:24 +0000
ROA not after:            Tue 18 Aug 2026 11:12:24 +0000
asID:                     216047
IP address blocks:        45.204.60.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99635 (0x18533)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  6 11:12:24 2025 GMT
            Not After : Aug 18 11:12:24 2026 GMT
        Subject: CN=690c829d-9905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:16:f6:ac:ce:ea:60:7a:4a:b7:d9:8a:0c:ff:
                    27:7a:e9:a3:98:f2:15:33:c1:18:d7:cf:6d:f0:b1:
                    5a:8f:0c:4f:90:e6:1e:22:35:cb:f9:70:ae:e5:9c:
                    3d:8f:8f:05:8b:90:ef:5d:77:cd:6a:73:0b:f8:67:
                    b4:83:5b:2b:fb:51:52:fb:32:65:53:5e:e1:49:f5:
                    2a:ac:cf:2f:c6:05:57:cb:d8:77:db:95:36:12:bb:
                    07:65:f8:28:f0:48:ba:43:8a:11:cf:dd:47:40:89:
                    27:8a:64:89:29:20:26:5e:48:49:6a:97:6f:45:8e:
                    01:f8:e2:75:c5:a6:8c:8c:8d:57:ef:56:86:ce:8b:
                    bd:db:74:e1:76:83:bd:2e:a2:9f:ff:e2:e0:57:3d:
                    cf:05:c5:0c:d8:ef:80:16:6c:ac:75:26:80:75:c1:
                    70:dc:60:81:9f:ee:bb:33:8a:e0:61:74:69:37:d2:
                    5e:23:6f:89:66:57:9e:b6:39:8a:3d:34:fd:99:58:
                    ca:cc:53:f7:f8:c1:00:9a:7c:02:41:d5:69:ee:7f:
                    bf:01:13:1d:c8:fb:13:e2:59:40:4c:72:03:2a:ca:
                    13:1e:07:0d:77:d4:58:23:da:0d:01:02:a7:ec:69:
                    b7:79:86:02:e3:aa:bc:e6:ac:e4:5e:9c:b7:77:30:
                    3c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D3:48:1D:2B:1D:5C:69:9C:A1:22:CC:5E:1B:7A:A7:4A:EE:AA:4D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B964360BB0111F0BA4505C9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:3e:b3:a7:8c:45:31:7f:58:94:3b:68:f6:fc:96:57:3f:53:
         a3:03:b1:27:a7:f1:a0:11:7e:a4:25:10:18:72:a9:2a:0a:2a:
         fb:e3:fd:28:ac:65:c9:30:50:b5:e3:ad:31:46:10:85:7a:ed:
         ec:d3:0b:e2:cd:c5:39:c5:ab:e9:43:13:a6:78:75:03:80:9a:
         57:83:b6:52:c7:a2:73:4b:f3:af:de:8e:ad:d5:68:b1:f7:5f:
         d8:a2:25:5e:96:f8:dc:39:2b:75:a0:d9:ae:05:66:06:18:05:
         5a:a3:96:22:1a:b5:fd:c4:e8:31:68:a0:b1:b6:a9:37:cd:06:
         96:06:cd:24:31:d4:83:ab:e2:e8:4a:b5:10:51:0e:b8:63:5b:
         5a:56:6f:e6:c7:1f:b2:c3:cf:ac:41:42:4a:a6:45:54:a3:6b:
         35:19:ae:99:84:0e:4f:ad:1b:9a:12:6b:3c:d3:1f:e4:be:68:
         f4:e7:6b:af:22:75:5e:3d:02:35:91:a8:84:b4:ac:03:98:39:
         99:4c:da:e4:84:e1:cd:87:03:f5:73:80:b8:d3:49:a2:5f:07:
         b1:40:31:ab:db:35:f3:1e:f8:f6:92:b6:86:70:ea:61:db:8f:
         4a:45:ca:02:2b:bf:24:e0:a4:24:f0:70:eb:a9:6c:0a:d5:75:
         ab:7c:49:29
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYUzMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTA2MTExMjI0WhcNMjYwODE4MTExMjI0WjAYMRYw
FAYDVQQDEw02OTBjODI5ZC05OTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0xb2rM7qYHpKt9mKDP8neumjmPIVM8EY189t8LFajwxPkOYeIjXL+XCu
5Zw9j48Fi5DvXXfNanML+Ge0g1sr+1FS+zJlU17hSfUqrM8vxgVXy9h325U2ErsH
Zfgo8Ei6Q4oRz91HQIknimSJKSAmXkhJapdvRY4B+OJ1xaaMjI1X71aGzou923Th
doO9LqKf/+LgVz3PBcUM2O+AFmysdSaAdcFw3GCBn+67M4rgYXRpN9JeI2+JZlee
tjmKPTT9mVjKzFP3+MEAmnwCQdVp7n+/ARMdyPsT4llATHIDKsoTHgcNd9RYI9oN
AQKn7Gm3eYYC46q85qzkXpy3dzA8PwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKzT
SB0rHVxpnKEizF4beqdK7qpNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC83Qjk2NDM2MEJCMDExMUYwQkE0NTA1QzlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLcw8MA0GCSqGSIb3DQEBCwUA
A4IBAQBSPrOnjEUxf1iUO2j2/JZXP1OjA7Enp/GgEX6kJRAYcqkqCir74/0orGXJ
MFC1460xRhCFeu3s0wvizcU5xavpQxOmeHUDgJpXg7ZSx6JzS/Ov3o6t1Wix91/Y
oiVelvjcOSt1oNmuBWYGGAVao5YiGrX9xOgxaKCxtqk3zQaWBs0kMdSDq+LoSrUQ
UQ64Y1taVm/mxx+yw8+sQUJKpkVUo2s1Ga6ZhA5PrRuaEms80x/kvmj052uvInVe
PQI1kaiEtKwDmDmZTNrkhOHNhwP1c4C400miXwexQDGr2zXzHvj2kraGcOph249K
RcoCK78k4KQk8HDrqWwK1XWrfEkp
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:10 2025 by rpki-client