This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E323E46BEBF11F099BE8AD7DAE4EC9C.roa
File:                     7E323E46BEBF11F099BE8AD7DAE4EC9C.roa (raw, json)
Hash identifier:          ieKCXQhvM1Vb5uZFpInP1YamUiR7Nmj1TbXxyiL/+eI=
Subject key identifier:   39:9B:D1:2E:C8:15:29:F8:B0:F2:C1:8A:6A:9A:7B:3C:A4:99:2E:FB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01863E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E323E46BEBF11F099BE8AD7DAE4EC9C.roa
Signing time:             Tue 11 Nov 2025 05:30:12 +0000
ROA not before:           Tue 11 Nov 2025 05:30:05 +0000
ROA not after:            Sun 18 Jan 2026 05:30:05 +0000
asID:                     63859
IP address blocks:        45.198.144.0/24 maxlen: 24
                          45.198.145.0/24 maxlen: 24
                          45.198.146.0/24 maxlen: 24
                          45.198.147.0/24 maxlen: 24
                          45.198.148.0/24 maxlen: 24
                          45.198.149.0/24 maxlen: 24
                          45.198.150.0/24 maxlen: 24
                          45.198.151.0/24 maxlen: 24
                          45.198.152.0/24 maxlen: 24
                          45.198.153.0/24 maxlen: 24
                          45.198.154.0/24 maxlen: 24
                          45.198.155.0/24 maxlen: 24
                          45.198.156.0/24 maxlen: 24
                          45.198.157.0/24 maxlen: 24
                          45.198.158.0/24 maxlen: 24
                          45.198.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99902 (0x1863e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 11 05:30:05 2025 GMT
            Not After : Jan 18 05:30:05 2026 GMT
        Subject: CN=6912c9e4-609c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:49:46:d7:70:cd:ec:79:0f:bf:81:10:b0:f5:
                    72:56:7a:db:bf:9e:d2:fc:e0:5d:34:ce:55:26:ab:
                    21:96:1b:75:43:ef:4f:71:60:07:f6:dc:c6:80:f6:
                    c1:ef:01:ea:15:00:81:aa:fc:b2:e0:1a:5c:e5:da:
                    76:0d:dd:7e:ee:67:59:5b:93:e5:ec:39:ec:9f:29:
                    ef:ca:fe:16:9e:da:b1:2a:48:4e:57:76:0a:ff:1b:
                    83:1c:ef:af:2d:41:12:92:a3:ca:79:f6:0f:cd:e2:
                    ec:a7:bd:a3:13:d4:5e:ad:28:7a:76:4e:63:95:6b:
                    b7:95:6a:9a:f7:cd:e9:73:23:12:b9:c5:7b:c3:f2:
                    d7:cb:84:55:d8:51:f2:2c:04:19:fb:e3:5e:fc:88:
                    07:6b:32:92:e1:3d:1a:d1:8e:b2:7c:85:ab:8e:25:
                    03:48:1e:89:e1:6b:45:e3:94:1b:d8:92:11:fe:a8:
                    77:c0:4e:5a:de:e2:15:b4:f9:97:91:99:a9:56:1d:
                    8a:fc:22:be:24:5c:b9:51:99:5f:e4:0d:b0:b5:be:
                    15:af:e4:87:1e:d0:a0:30:55:d2:db:94:65:da:1c:
                    68:37:cd:23:94:77:66:1e:9b:25:83:b8:75:f8:be:
                    5d:c2:fa:15:c8:d7:37:fd:7c:d5:e2:d2:b5:04:e5:
                    15:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9B:D1:2E:C8:15:29:F8:B0:F2:C1:8A:6A:9A:7B:3C:A4:99:2E:FB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E323E46BEBF11F099BE8AD7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:a0:d4:84:99:06:4d:0e:76:8a:89:44:66:db:a0:1f:d5:ab:
         99:1b:9a:76:13:d3:53:39:2a:5f:a2:32:5e:0d:27:58:f5:45:
         bd:68:ca:85:56:02:4d:67:96:30:80:ab:ab:6c:a3:1f:95:ab:
         d2:79:db:8c:67:24:9b:48:70:b7:ff:5f:42:ca:a7:03:9b:31:
         3e:f2:7f:3b:93:01:13:0b:8f:65:17:be:c9:f9:e5:3b:f0:7d:
         28:b3:d5:cd:16:52:a6:99:cc:c8:9a:97:5d:ba:c5:bc:ba:41:
         7e:22:a6:f0:19:a7:ac:b0:1a:80:cc:ff:01:ef:f0:52:cc:88:
         cc:af:e0:fb:5d:6d:0e:86:f6:f0:a0:36:8b:b8:07:49:e2:63:
         b8:8e:c5:ce:ef:2a:8d:bd:08:e7:07:d3:b2:1e:4f:f9:63:cc:
         a3:0b:35:11:28:91:fc:1f:4a:53:46:b5:b2:c0:84:bc:43:e2:
         5b:cb:76:9a:f4:5b:9e:29:32:f9:2e:15:cb:b6:8f:11:33:15:
         95:1c:7a:5c:a6:0f:c1:cc:4c:34:0a:ef:a9:e2:5b:59:77:35:
         2d:cf:e1:28:4b:ef:eb:ef:68:8c:fd:79:9a:4a:13:42:a8:b9:
         28:26:dc:fa:3a:5b:76:bc:b9:90:27:5c:31:e3:6a:5a:35:76:
         c3:74:3e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:15 2025 by rpki-client