This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89521738C90511F08FF7DEADDAE4EC9C.roa
File:                     89521738C90511F08FF7DEADDAE4EC9C.roa (raw, json)
Hash identifier:          ny7tnyxxNKkQrx5Vbn9GH0JCgNE6hpffsqDLTd7+kvo=
Subject key identifier:   D9:FC:22:09:E5:CB:4A:B7:E2:92:79:45:ED:46:61:9B:E3:18:10:5A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018920
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89521738C90511F08FF7DEADDAE4EC9C.roa
Signing time:             Mon 24 Nov 2025 07:16:47 +0000
ROA not before:           Mon 24 Nov 2025 07:16:40 +0000
ROA not after:            Fri 27 Nov 2026 07:16:40 +0000
asID:                     141109
IP address blocks:        45.198.70.0/23 maxlen: 24
                          45.198.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100640 (0x18920)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 24 07:16:40 2025 GMT
            Not After : Nov 27 07:16:40 2026 GMT
        Subject: CN=6924065f-7889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:43:de:3b:e1:e2:28:ea:9b:b4:63:44:54:c2:
                    85:77:93:f0:70:fc:b8:2b:3a:4a:8a:05:8c:da:f4:
                    1d:e8:fd:f4:e0:6f:48:12:67:f4:7b:95:37:66:27:
                    9c:9e:e1:17:c8:98:3f:af:a7:81:81:31:ae:6b:39:
                    53:3d:db:f0:13:c6:94:19:c1:aa:8d:f7:f3:63:99:
                    39:3d:21:36:0a:e6:fb:ad:c4:ba:fb:f6:98:05:c6:
                    a4:97:24:b9:a0:bb:c4:61:32:94:80:ad:d4:d0:84:
                    ea:18:03:cd:75:bf:31:7d:f8:da:ba:c1:e0:40:9f:
                    bd:cc:59:1e:11:91:60:18:25:e7:a8:aa:e9:53:f6:
                    66:d4:f8:e4:c0:ff:d9:36:7f:a6:9e:14:1c:d3:dc:
                    27:d6:79:f7:08:aa:6b:35:8c:3c:00:5f:1c:c9:83:
                    9d:58:df:cb:1c:6d:3d:5b:fc:ea:2c:10:16:fb:53:
                    57:7a:20:60:56:c4:7a:4f:a4:e6:35:52:6b:61:49:
                    05:30:8a:63:de:6e:fa:ac:f7:bf:22:52:92:7a:bf:
                    9c:6e:12:dd:44:fb:45:c1:2a:a7:0f:83:c8:98:dc:
                    43:3f:bc:dc:5e:7f:11:a5:e3:ff:ce:42:30:7c:ee:
                    dc:2c:67:4e:83:77:06:d0:63:74:d4:c2:16:a8:3e:
                    c0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FC:22:09:E5:CB:4A:B7:E2:92:79:45:ED:46:61:9B:E3:18:10:5A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89521738C90511F08FF7DEADDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:de:2d:6d:aa:4f:d9:f4:12:77:cf:cf:ea:99:c7:75:91:4d:
         6f:cb:80:81:95:f5:9e:ea:18:a5:4f:db:2b:2b:f8:df:36:49:
         01:32:ef:15:a8:cb:af:19:a4:b1:c9:31:76:7f:85:48:0b:5a:
         eb:36:70:be:54:11:48:36:bc:27:ae:86:79:70:af:c8:dd:83:
         58:9e:01:5e:2a:d0:b3:17:5f:26:c8:15:ba:b0:85:b2:18:b0:
         6d:0c:32:2d:c6:5a:45:0e:fa:d1:25:92:ed:39:91:d0:bd:c4:
         cc:27:20:ca:c0:c3:25:5b:c8:f0:00:8a:d1:1a:0a:73:27:fc:
         92:c9:df:54:73:1b:74:11:1d:84:69:d9:56:ba:db:77:ec:1d:
         05:c8:2d:71:4f:34:4b:9b:da:64:36:07:b7:f6:aa:52:5b:fb:
         78:a0:ba:d9:83:48:e5:56:d3:03:e3:55:61:14:1d:7a:cb:c7:
         05:4d:99:29:91:84:b6:5b:39:df:43:d5:cb:d2:b4:fd:91:26:
         4c:11:4e:ba:e0:32:59:9c:54:07:79:dc:9d:a0:f2:78:12:c0:
         23:06:32:37:9d:84:07:d9:85:ad:e8:d2:37:c3:5d:df:90:f5:
         ae:d5:29:51:24:6b:c7:bc:09:dc:84:be:9e:c3:47:ea:a0:93:
         bf:13:bf:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:13 2025 by rpki-client