This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D6D4EACBF1811F087A29596DAE4EC9C.roa
File:                     7D6D4EACBF1811F087A29596DAE4EC9C.roa (raw, json)
Hash identifier:          uRIz0N8p6c4fn0Q2tUxb4kJGPlVdK6lX5KseiTG+6dw=
Subject key identifier:   3D:46:55:3B:11:0B:EC:79:ED:E0:B5:57:98:5D:E0:48:6A:1B:46:61
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01868C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D6D4EACBF1811F087A29596DAE4EC9C.roa
Signing time:             Tue 11 Nov 2025 16:07:16 +0000
ROA not before:           Tue 11 Nov 2025 16:07:10 +0000
ROA not after:            Wed 17 Dec 2025 16:07:10 +0000
asID:                     398993
IP address blocks:        45.200.192.0/18 maxlen: 24
                          45.200.192.0/19 maxlen: 24
                          45.200.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99980 (0x1868c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 11 16:07:10 2025 GMT
            Not After : Dec 17 16:07:10 2025 GMT
        Subject: CN=69135f33-bbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:28:e0:f9:ba:89:90:94:65:e1:e3:b0:7f:
                    26:b0:36:cc:06:66:d5:34:7e:25:76:54:42:5a:88:
                    45:97:2c:e2:7e:c8:1d:b0:0f:a5:e8:cd:9d:33:ba:
                    a6:32:65:5a:e9:18:e8:a9:e4:93:15:15:81:dd:38:
                    b5:d6:16:cb:a0:0f:a0:a6:65:88:74:a3:7f:0e:1b:
                    15:64:56:ec:76:af:de:16:18:77:40:96:89:86:ec:
                    f3:2e:33:f1:21:ba:2a:0c:5a:12:27:fb:f2:db:8c:
                    85:df:cd:f8:49:c3:e4:20:70:e8:ba:56:5e:63:af:
                    35:56:61:1a:b1:23:22:45:40:bc:2b:ad:2a:72:cf:
                    be:1c:87:60:7c:31:14:2a:f6:8f:4d:6f:3f:e9:3f:
                    3f:ca:9d:5d:73:f8:9e:92:ca:81:4d:a9:5f:78:78:
                    33:3c:72:70:05:c6:fa:5c:42:c6:c8:cb:86:47:19:
                    72:81:a6:a7:63:14:39:11:c4:8f:df:c4:9a:f5:d0:
                    cd:6a:28:76:17:9d:fc:19:ce:af:11:8e:81:2f:89:
                    f5:55:ca:2d:4b:0e:a7:04:5c:b9:34:39:d6:15:12:
                    65:33:34:91:56:87:0b:7e:09:55:d8:26:fc:ad:dc:
                    ef:15:d8:c0:03:60:9e:96:ba:8b:7a:2e:fe:ca:f1:
                    a3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:46:55:3B:11:0B:EC:79:ED:E0:B5:57:98:5D:E0:48:6A:1B:46:61
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D6D4EACBF1811F087A29596DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b2:ee:db:4d:6e:2f:4c:c6:9e:98:2d:36:82:86:e2:c4:a5:ce:
         f9:9e:61:f9:22:bb:23:61:a3:4a:39:8d:79:7e:fa:59:c4:60:
         d7:6f:68:bf:f6:14:90:74:50:5e:5a:ab:d3:69:a8:4b:be:03:
         b3:e2:81:ee:0b:1a:ab:c5:2e:68:be:3e:41:98:38:68:3e:da:
         64:a0:1d:7a:1f:20:16:c7:83:d9:9e:3c:62:35:1c:3d:e7:a4:
         a8:d0:fc:72:01:54:80:8e:af:9c:29:69:03:cf:09:b4:08:00:
         c5:05:8e:9d:23:43:d3:fa:e2:c0:0a:cb:da:1d:d4:1e:bc:3b:
         83:a0:59:16:2e:1b:89:71:08:3d:93:48:79:4d:1a:1f:9f:b1:
         14:82:50:9e:1e:8b:57:7e:35:da:a3:a6:94:de:bd:1a:61:42:
         f0:a0:f8:95:3f:2d:ce:70:4a:a2:e3:ec:8a:cd:8c:a4:2f:dc:
         b2:f6:c0:35:a2:5a:b8:78:dc:01:d3:e2:a0:c9:b3:77:e7:e5:
         59:73:8d:bb:ad:3a:3d:14:8c:95:a4:ec:27:32:87:56:4c:9f:
         a2:6f:fb:29:23:8a:68:57:8c:87:d7:9c:e6:be:55:33:71:8c:
         85:31:39:6f:01:51:99:80:43:fa:23:ad:64:a3:3b:f7:f1:4f:
         3c:0e:96:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:00 2025 by rpki-client