This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D214D78BAF311F0A6BBBBF2DAE4EC9C.roa
File:                     7D214D78BAF311F0A6BBBBF2DAE4EC9C.roa (raw, json)
Hash identifier:          jRypIyWwzW9eowg23xLFGGVjxBMRjOTm1Hhiwc3rA8A=
Subject key identifier:   04:8B:15:AF:E2:F5:CB:9C:78:FB:98:83:FA:CC:04:D4:A4:ED:A4:2E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01851B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D214D78BAF311F0A6BBBBF2DAE4EC9C.roa
Signing time:             Thu 06 Nov 2025 09:32:19 +0000
ROA not before:           Thu 06 Nov 2025 09:32:14 +0000
ROA not after:            Sat 13 Dec 2025 09:32:14 +0000
asID:                     397423
IP address blocks:        45.199.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 25 Nov 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99611 (0x1851b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  6 09:32:14 2025 GMT
            Not After : Dec 13 09:32:14 2025 GMT
        Subject: CN=690c6b23-3904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:2a:9f:f5:25:65:f4:1b:a9:ac:ac:e1:6b:
                    bb:7e:3b:c8:6c:cc:1a:f0:6f:c2:5d:54:1d:12:c3:
                    22:dc:b7:ab:20:17:ca:bb:45:8f:2b:50:a8:28:ac:
                    71:1c:ac:3e:c6:27:9e:f9:3d:43:0b:b6:ab:42:a6:
                    49:ce:73:a9:c7:d7:01:a2:07:0f:80:70:e2:26:51:
                    1c:66:02:91:52:31:a0:ef:b0:76:91:2b:3b:c5:a2:
                    9c:27:c9:b1:b0:60:6d:42:22:b0:13:83:45:4f:4a:
                    56:b6:8e:8e:30:ad:5b:2b:67:2c:e5:91:bf:21:12:
                    63:b7:f0:7d:12:03:eb:80:f2:c3:24:cc:d5:20:0f:
                    6b:7e:bf:be:b7:49:e7:73:62:11:d1:33:ad:82:e8:
                    58:49:63:30:45:6d:38:64:94:e5:3c:3d:f8:7b:6f:
                    1f:94:bb:6a:31:7d:b0:8a:0e:5d:29:de:93:04:db:
                    de:e4:24:b6:bd:6b:34:5f:3c:fb:39:8d:be:4a:fb:
                    2d:97:b2:f3:94:36:22:ba:5f:db:4d:bf:e8:07:81:
                    f1:f0:3e:42:4f:8b:02:cb:16:52:1a:25:f6:71:3c:
                    68:5c:6d:00:de:9d:69:80:cf:f3:8d:60:eb:45:19:
                    ff:eb:b3:f8:f9:78:e9:ec:a5:fe:69:72:4e:61:47:
                    fe:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8B:15:AF:E2:F5:CB:9C:78:FB:98:83:FA:CC:04:D4:A4:ED:A4:2E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D214D78BAF311F0A6BBBBF2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:6a:59:69:01:6b:aa:76:ee:7b:bf:a6:fd:34:50:f4:18:4c:
         f2:6d:a6:aa:9f:ec:0f:14:4b:f1:07:b7:3a:18:6e:2a:9d:9c:
         8c:51:75:8f:6d:c6:0b:57:dd:27:02:d4:87:89:19:09:31:68:
         7c:b8:0d:d3:20:8b:8e:ca:59:07:ee:28:d7:e9:e9:7d:32:bd:
         42:ab:d5:49:22:4e:6f:08:5d:c6:16:ff:4a:f9:72:56:d1:69:
         5e:7a:5a:3a:cc:71:43:71:ac:51:74:75:24:d1:01:c2:43:a4:
         cd:f1:b6:7d:17:e6:10:58:22:5f:8f:c0:4b:79:5f:12:05:1b:
         6e:01:c5:7f:e6:cc:09:d9:18:3e:25:14:52:63:cc:44:1a:92:
         8f:c9:8f:65:e4:6f:02:eb:a9:df:79:75:69:2a:f3:3b:66:ff:
         79:e4:76:8e:3b:0f:cd:26:27:c2:31:59:1f:52:12:16:7a:2a:
         19:25:19:75:20:05:d0:ee:b8:46:90:58:df:ba:b0:ec:2c:eb:
         b9:6a:28:9c:bf:c6:23:9e:5c:4e:7b:de:fe:f0:d8:f5:79:4f:
         9d:5f:23:b0:a9:70:f0:04:a9:f3:3a:bf:b9:42:dd:a0:d5:89:
         2e:81:2f:86:77:25:11:3e:e9:37:91:b3:51:bc:11:c2:e8:75:
         bc:0c:67:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 23 13:04:40 2025 by rpki-client