This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81189450BAED11F09D2586CBDAE4EC9C.roa
File:                     81189450BAED11F09D2586CBDAE4EC9C.roa (raw, json)
Hash identifier:          Gum3KGIYrFT+jNdZBx88a+lhqQZ0J0pC2QWNEWJ+Kis=
Subject key identifier:   88:F1:1F:AE:28:4F:75:90:33:F9:5D:C1:41:47:39:9E:4A:8F:CA:00
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018509
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81189450BAED11F09D2586CBDAE4EC9C.roa
Signing time:             Thu 06 Nov 2025 08:49:29 +0000
ROA not before:           Thu 06 Nov 2025 08:49:22 +0000
ROA not after:            Sat 13 Dec 2025 08:49:22 +0000
asID:                     272854
IP address blocks:        45.195.12.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99593 (0x18509)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  6 08:49:22 2025 GMT
            Not After : Dec 13 08:49:22 2025 GMT
        Subject: CN=690c6119-61c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e3:26:38:b5:a4:3f:c1:7e:99:64:c5:cc:f4:
                    a6:08:ae:af:65:ee:03:16:fe:c4:69:5a:63:36:26:
                    7c:f4:fa:c0:77:7d:1f:31:7e:54:25:c4:79:e0:e4:
                    66:1d:49:0b:7d:8c:f5:37:45:73:b9:51:3e:7e:d2:
                    b8:c0:5d:5b:b7:38:76:9e:91:76:00:2b:ee:8d:55:
                    95:17:81:dd:31:94:45:24:c4:7b:3e:54:9f:3c:f8:
                    9b:07:14:3b:97:6d:79:dd:a7:2c:90:9a:e9:47:e5:
                    61:9b:a1:e9:1c:ff:4d:32:6c:91:a9:a0:77:f5:3a:
                    c0:8b:8d:61:22:8f:0d:83:aa:8d:e1:10:6d:57:d7:
                    7e:9b:e0:68:22:b0:c2:8f:d5:15:1f:79:f0:1a:74:
                    c3:f7:7b:03:3d:e0:29:c0:87:97:82:5e:8e:1b:29:
                    3c:79:16:84:f9:c5:c9:fb:66:b2:e3:a6:5f:fd:f2:
                    5e:a3:be:b6:1c:bf:b0:91:0b:88:ad:32:17:da:11:
                    8d:65:fa:39:78:2b:5c:bf:8a:f3:89:df:b1:96:c8:
                    f8:b8:db:6d:3e:26:65:5e:d5:61:f2:cd:b8:b5:e7:
                    2f:92:da:e9:80:40:d9:a1:89:9d:51:8f:8f:07:46:
                    8f:43:7e:6d:3e:12:21:13:f3:18:8c:0f:57:2a:1b:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F1:1F:AE:28:4F:75:90:33:F9:5D:C1:41:47:39:9E:4A:8F:CA:00
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/81189450BAED11F09D2586CBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2d:60:57:ab:f8:b3:57:08:25:69:be:e9:12:aa:42:99:b7:aa:
         30:48:99:df:4c:21:97:91:92:96:c0:ff:ba:a2:93:41:fc:90:
         ea:dd:3d:fe:1a:70:c1:7f:40:a6:18:ed:af:c7:1b:20:23:33:
         62:a7:95:f3:02:fc:e3:7b:41:8e:39:2f:2b:a1:52:3d:8d:ce:
         ff:45:72:9d:aa:13:3d:c0:e7:1d:2e:96:df:c9:bd:38:f2:c9:
         e6:40:ff:df:31:c8:31:b0:0f:e3:70:4e:8f:e8:a0:fd:6f:3c:
         72:2e:e6:a3:7b:79:86:46:13:29:ef:98:b1:1c:d1:9b:9f:6b:
         e9:ea:c2:f6:42:82:6b:d2:19:df:87:7b:46:38:e9:77:24:d1:
         a4:30:75:dd:b3:30:38:fa:b2:97:09:46:8d:46:8d:9e:42:c0:
         c4:23:85:7a:71:58:71:bd:80:32:1e:ec:e3:cb:ca:0b:2d:ba:
         cd:55:41:4c:b4:ea:81:d5:82:5f:e5:f0:99:5c:ce:cd:db:b4:
         c1:88:e2:4f:27:ac:48:28:3a:02:7d:ef:b2:e0:e8:72:98:90:
         95:5d:0b:1a:be:4a:d9:c2:fb:4c:6d:e9:b7:aa:8f:8b:48:89:
         08:60:84:8c:01:1d:89:89:85:6a:cf:0b:1c:01:93:1e:94:8b:
         8c:43:d6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:03 2025 by rpki-client