This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C059B48BAE711F0A5908EA9DAE4EC9C.roa
File:                     8C059B48BAE711F0A5908EA9DAE4EC9C.roa (raw, json)
Hash identifier:          AJoN1YQh1PBr9qGOQLbu1RmCUbqZrO25pWtrWtMewMY=
Subject key identifier:   02:D9:E1:C7:39:82:41:54:9A:8F:79:BE:51:9E:AD:57:FF:C6:AA:7F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0184F8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C059B48BAE711F0A5908EA9DAE4EC9C.roa
Signing time:             Thu 06 Nov 2025 08:06:50 +0000
ROA not before:           Thu 06 Nov 2025 08:06:43 +0000
ROA not after:            Mon 08 Dec 2025 08:06:43 +0000
asID:                     147176
IP address blocks:        45.195.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99576 (0x184f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  6 08:06:43 2025 GMT
            Not After : Dec  8 08:06:43 2025 GMT
        Subject: CN=690c571a-1cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ba:bd:51:7b:e9:15:60:83:26:2c:39:73:a4:
                    84:fd:0d:8a:9e:86:f0:ab:71:62:2f:45:09:80:ad:
                    c6:f0:c6:33:07:79:cc:3c:8d:44:eb:53:49:6d:fb:
                    91:dc:a6:93:30:60:bf:b2:16:7d:74:77:1c:f2:ce:
                    4d:12:63:05:ad:cc:a6:bf:e2:d4:46:29:1c:aa:09:
                    15:41:88:9e:3b:cd:01:f4:f5:77:b7:0e:fd:13:38:
                    11:ae:59:04:a1:c2:ea:43:96:67:02:f1:56:80:4a:
                    c3:3d:d4:3d:d7:b3:73:31:af:8c:87:16:c5:59:ea:
                    df:b6:21:65:c8:81:79:45:3a:d1:3e:10:f1:4e:a6:
                    1f:20:22:60:d9:ad:51:f9:c7:19:df:43:42:2b:34:
                    5d:12:2f:c5:6c:ae:b5:52:88:06:2f:bf:ac:0d:30:
                    56:e6:a2:8b:c0:00:01:29:d3:1c:a7:a4:49:50:55:
                    e3:b4:bf:ac:9f:6c:ba:f4:f7:c0:70:d9:9d:1a:87:
                    fe:c9:63:b4:5a:d5:9c:30:94:e4:11:c0:f3:e9:c5:
                    41:75:81:c6:79:d6:e1:e7:ad:aa:93:82:c3:2f:df:
                    f8:94:1f:d2:a6:99:23:da:f4:6b:12:6b:77:96:56:
                    24:53:d7:3d:39:26:a1:64:46:61:18:1b:d2:66:22:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D9:E1:C7:39:82:41:54:9A:8F:79:BE:51:9E:AD:57:FF:C6:AA:7F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C059B48BAE711F0A5908EA9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:c7:22:38:fe:22:76:d9:b7:96:e0:48:0f:88:99:19:76:e0:
         d2:a3:56:59:34:17:6f:6f:87:86:74:18:2d:eb:ff:a3:1d:cb:
         29:04:c1:87:0a:2b:ac:91:40:c3:e3:ac:05:9f:d1:4e:91:3c:
         f6:46:f9:89:c0:fe:44:99:00:5a:bb:85:82:fb:4f:20:84:77:
         97:dc:14:49:43:f4:19:cd:1f:2b:3d:67:db:3b:ee:b0:89:e6:
         e5:f1:0f:0f:93:5c:bf:a5:27:f6:6c:43:3a:d4:4c:a6:57:e9:
         bc:e8:29:9a:90:e6:c0:25:ae:38:27:92:81:20:ec:85:db:16:
         40:bb:e6:30:8f:ba:70:77:0b:3c:f8:fa:b6:49:ad:b1:c5:89:
         81:a7:6d:9e:c4:34:4e:3e:66:14:7b:e5:6f:47:c4:67:d0:a3:
         69:a9:7c:13:89:1b:8e:39:72:f3:9d:27:f4:ac:1d:8f:10:8f:
         ba:b8:7e:80:43:d0:da:4d:bd:48:96:a8:01:9d:74:b3:1f:1f:
         66:06:cb:9b:84:55:d5:57:1b:4b:e7:0e:53:39:72:12:69:58:
         04:22:85:77:89:ce:0f:80:7d:43:74:03:53:3f:ed:cf:87:c1:
         5e:70:b3:fd:b6:66:95:f8:e1:95:cc:a8:5c:50:15:1e:8d:bc:
         7b:de:6a:cf
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYT4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTA2MDgwNjQzWhcNMjUxMjA4MDgwNjQzWjAYMRYw
FAYDVQQDEw02OTBjNTcxYS0xY2IyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuLq9UXvpFWCDJiw5c6SE/Q2Knobwq3FiL0UJgK3G8MYzB3nMPI1E61NJ
bfuR3KaTMGC/shZ9dHcc8s5NEmMFrcymv+LURikcqgkVQYieO80B9PV3tw79EzgR
rlkEocLqQ5ZnAvFWgErDPdQ917NzMa+MhxbFWerftiFlyIF5RTrRPhDxTqYfICJg
2a1R+ccZ30NCKzRdEi/FbK61UogGL7+sDTBW5qKLwAABKdMcp6RJUFXjtL+sn2y6
9PfAcNmdGof+yWO0WtWcMJTkEcDz6cVBdYHGedbh562qk4LDL9/4lB/Sppkj2vRr
Emt3llYkU9c9OSahZEZhGBvSZiKfOwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFALZ
4cc5gkFUmo95vlGerVf/xqp/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QzA1OUI0OEJBRTcxMUYwQTU5MDhFQTlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcOYMA0GCSqGSIb3DQEBCwUA
A4IBAQBWxyI4/iJ22beW4EgPiJkZduDSo1ZZNBdvb4eGdBgt6/+jHcspBMGHCius
kUDD46wFn9FOkTz2RvmJwP5EmQBau4WC+08ghHeX3BRJQ/QZzR8rPWfbO+6wiebl
8Q8Pk1y/pSf2bEM61EymV+m86CmakObAJa44J5KBIOyF2xZAu+Ywj7pwdws8+Pq2
Sa2xxYmBp22exDROPmYUe+VvR8Rn0KNpqXwTiRuOOXLznSf0rB2PEI+6uH6AQ9Da
Tb1IlqgBnXSzHx9mBsubhFXVVxtL5w5TOXISaVgEIoV3ic4PgH1DdANTP+3Ph8Fe
cLP9tmaV+OGVzKhcUBUejbx73mrP
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:14 2025 by rpki-client