This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AF5A2E6C48511F0A77BA2DCDAE4EC9C.roa
File:                     8AF5A2E6C48511F0A77BA2DCDAE4EC9C.roa (raw, json)
Hash identifier:          HXW4lINcnDmBkRqsJ8uJM0WBVc4NTTUgLMUDfjQsrhk=
Subject key identifier:   50:AF:73:2D:EC:4F:56:92:77:15:81:5A:50:A0:03:80:31:45:46:0C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01884E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AF5A2E6C48511F0A77BA2DCDAE4EC9C.roa
Signing time:             Tue 18 Nov 2025 13:50:29 +0000
ROA not before:           Tue 18 Nov 2025 13:50:24 +0000
ROA not after:            Tue 30 Dec 2025 13:50:24 +0000
asID:                     62468
IP address blocks:        45.204.221.0/24 maxlen: 24
                          45.204.222.0/24 maxlen: 24
                          45.204.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100430 (0x1884e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 18 13:50:24 2025 GMT
            Not After : Dec 30 13:50:24 2025 GMT
        Subject: CN=691c79a5-f645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:cd:66:e4:d6:c4:a4:12:fc:9c:cc:b1:4c:
                    31:2d:19:3a:00:03:b3:db:ad:34:55:4b:71:3d:02:
                    c2:ed:ed:2a:b0:18:d8:3c:be:95:6f:d8:93:86:bd:
                    23:7c:8a:6b:19:a4:9d:1d:2e:a9:33:4d:a0:ed:88:
                    50:7f:2e:10:a4:11:d9:18:a9:91:c7:fa:1c:47:fb:
                    56:4b:4e:ad:d8:30:d1:cc:b2:2d:10:8e:f6:77:ec:
                    09:7b:20:bb:49:4f:9a:75:de:aa:fc:2b:0d:b2:43:
                    a7:a6:b5:d9:73:01:2a:53:52:f8:74:e4:4e:de:7c:
                    5d:a1:08:f3:77:67:b9:87:50:4d:12:16:4c:e1:53:
                    f5:30:9a:8c:5d:15:b4:85:14:54:cf:46:09:ba:e8:
                    b3:c0:57:4b:bd:af:b2:96:51:25:6a:d5:18:36:7a:
                    f8:65:87:5e:04:41:d5:58:33:75:b5:c1:b2:21:30:
                    5e:5e:bc:a0:1b:e0:f7:64:34:13:23:14:5b:7f:63:
                    d8:d2:fe:ba:9f:4b:d9:2c:48:e1:f5:0b:b6:6d:67:
                    ac:77:87:29:c0:a0:07:05:be:21:99:51:7c:ff:b1:
                    63:8d:d1:37:9c:42:b7:68:53:c2:f7:91:30:d6:30:
                    d2:e9:7e:3d:c2:42:4f:02:c0:02:36:bf:b8:88:7a:
                    e6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AF:73:2D:EC:4F:56:92:77:15:81:5A:50:A0:03:80:31:45:46:0C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AF5A2E6C48511F0A77BA2DCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.221.0-45.204.223.255

    Signature Algorithm: sha256WithRSAEncryption
         40:f8:26:69:27:c8:84:4d:3e:39:0c:15:f0:20:e8:d0:d7:95:
         d9:d7:ab:c5:74:fe:2f:ad:40:7c:c7:03:71:57:94:cc:87:7a:
         2e:cf:06:f3:59:c2:94:35:d9:15:09:25:38:dc:6d:7f:b9:29:
         a0:e3:b9:68:34:e1:b2:47:5f:52:c7:8f:b7:fb:29:30:8c:17:
         58:5d:3a:ee:bc:93:3f:0a:b4:42:37:4b:24:4f:27:50:bd:c4:
         29:4e:e2:87:2f:ab:3a:77:e0:69:da:77:f0:c1:35:2e:1a:f1:
         71:36:d3:da:9a:cf:01:c1:6e:9d:cf:27:a7:81:ad:cf:7e:2e:
         35:54:32:1e:96:94:c2:2c:81:1a:1a:10:cf:76:f3:e0:46:29:
         4f:d3:83:09:8a:c6:62:da:f9:32:48:78:7f:0f:ba:54:7e:da:
         73:53:9c:2c:d2:82:9d:8d:6c:47:d8:1b:8e:fa:fa:8a:78:fe:
         c6:1c:8f:46:83:89:a1:95:9e:29:fa:20:d1:3e:c1:03:c0:36:
         8b:41:12:7f:01:d2:1a:0e:4c:b8:a0:d0:b7:49:e1:96:78:74:
         e6:34:f3:71:cc:29:da:35:a8:db:34:3b:9e:28:71:52:af:76:
         b2:73:da:7e:74:59:e0:08:7d:45:f3:39:b9:0a:4b:bb:8f:e0:
         41:1b:8f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:02 2025 by rpki-client