This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A0F4B7AC9C111F0A91030DEDAE4EC9C.roa
File:                     8A0F4B7AC9C111F0A91030DEDAE4EC9C.roa (raw, json)
Hash identifier:          OmNiau7dARRfshIzUt1We/iP2Yi4i8uyogmu7rgHqmw=
Subject key identifier:   FA:38:81:CA:5D:AD:F5:16:0B:C8:FD:11:15:5D:A6:EB:0C:2A:F0:9D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018979
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A0F4B7AC9C111F0A91030DEDAE4EC9C.roa
Signing time:             Tue 25 Nov 2025 05:42:33 +0000
ROA not before:           Tue 25 Nov 2025 05:42:29 +0000
ROA not after:            Thu 15 Jan 2026 05:42:29 +0000
asID:                     141109
IP address blocks:        45.198.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100729 (0x18979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 25 05:42:29 2025 GMT
            Not After : Jan 15 05:42:29 2026 GMT
        Subject: CN=692541c9-2ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:25:86:fe:c4:3a:68:5c:0f:b3:95:a7:71:
                    a5:f0:f7:60:06:49:dc:6b:4a:79:8f:2e:fa:5f:b2:
                    e6:dd:17:8c:f1:5c:04:64:1c:eb:72:03:07:9b:c4:
                    35:cc:06:a4:58:5b:0d:9e:23:28:64:59:57:e1:ff:
                    d8:b4:c6:63:35:c5:12:55:b3:ca:e9:e9:f4:f4:34:
                    8d:83:f8:e5:8e:38:f2:b0:8b:42:d9:eb:43:43:d1:
                    cc:94:b5:2a:2d:3d:77:80:b3:63:fe:df:7f:27:c1:
                    6d:43:60:03:b2:ca:df:24:60:6a:ec:06:72:27:48:
                    67:f8:0d:e0:31:e9:a6:11:91:c9:7d:87:38:9d:63:
                    d7:f4:60:c9:d6:7d:09:65:34:de:33:6f:86:c2:6a:
                    63:dc:96:3f:1b:f1:be:30:50:ab:aa:5c:5d:57:27:
                    97:72:c0:50:2d:10:db:b9:76:c9:b6:03:af:8b:78:
                    c5:c5:86:2e:0d:f7:d4:48:21:af:6b:8a:8a:b3:08:
                    d7:f1:cc:54:78:a0:a3:b7:42:2a:fb:8b:ac:90:3d:
                    c0:12:57:a6:8b:2b:f6:b1:73:bf:e9:96:1b:0f:49:
                    60:19:9a:15:f2:7d:4a:de:4b:37:4f:d8:4e:18:35:
                    32:21:27:13:e1:d1:96:44:fe:2b:57:9b:2b:67:7c:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:38:81:CA:5D:AD:F5:16:0B:C8:FD:11:15:5D:A6:EB:0C:2A:F0:9D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8A0F4B7AC9C111F0A91030DEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:00:29:51:f3:48:78:7d:ce:b6:3d:ec:60:b3:07:b5:f8:ec:
         f2:7d:ed:f9:c4:f6:1f:9a:1f:ba:8c:a5:34:57:d6:de:a3:67:
         a5:d7:48:79:f2:76:2f:3c:3d:c6:1f:69:74:90:ad:33:87:ee:
         c5:a3:35:34:89:6e:52:49:88:6f:22:58:54:57:12:ea:f3:5a:
         18:11:a7:0c:4a:22:72:75:eb:3d:d4:e7:0e:89:a7:79:de:69:
         e7:cb:82:4a:3e:45:de:30:1d:16:1e:f7:93:10:72:44:6f:10:
         49:39:96:74:22:61:d2:62:99:32:c6:e6:23:cd:c2:d4:f0:e1:
         e0:e4:3c:06:23:8c:ba:c5:ea:7f:cd:a1:81:78:0a:4f:52:68:
         dd:f5:11:06:19:0b:7d:6d:90:a1:b3:f6:e2:cd:bc:3d:b9:a5:
         ee:b6:f5:bd:d7:ce:ab:61:40:aa:65:df:f1:32:28:7e:f7:25:
         18:07:c0:d9:30:13:c7:34:3f:3f:67:66:bc:e9:5b:ff:41:97:
         de:c6:b6:d0:3d:3e:c3:0b:b6:c2:13:0a:a1:6e:8e:ad:0e:c3:
         b2:ad:a3:37:c7:b6:d7:ae:d6:5a:5c:62:b7:e8:b8:49:18:02:
         43:72:f2:6b:15:30:10:c6:25:7f:0c:49:c5:52:bb:b7:00:c4:
         5b:41:ba:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:38 2025 by rpki-client