This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F9EFD1AD5D811F0BA521CA3DAE4EC9C.roa
File:                     8F9EFD1AD5D811F0BA521CA3DAE4EC9C.roa (raw, json)
Hash identifier:          oTI1nk4nBaOTKdW98SbXjlK9EkUaTVXqsdGc1uay4Zc=
Subject key identifier:   6D:BA:69:C3:67:A5:1D:7D:A8:17:1F:A4:30:8A:C5:2D:71:7B:EC:89
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018D99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F9EFD1AD5D811F0BA521CA3DAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 14:57:35 +0000
ROA not before:           Wed 10 Dec 2025 14:57:28 +0000
ROA not after:            Fri 19 Dec 2025 14:57:28 +0000
asID:                     63139
IP address blocks:        45.197.67.0/24 maxlen: 24
                          45.197.68.0/23 maxlen: 24
                          45.197.68.0/24 maxlen: 24
                          45.197.69.0/24 maxlen: 24
                          45.197.70.0/24 maxlen: 24
                          45.197.71.0/24 maxlen: 24
                          45.197.72.0/24 maxlen: 24
                          45.197.73.0/24 maxlen: 24
                          45.197.74.0/24 maxlen: 24
                          45.197.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101785 (0x18d99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 10 14:57:28 2025 GMT
            Not After : Dec 19 14:57:28 2025 GMT
        Subject: CN=69398a5f-ac56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:32:e3:fa:6d:c0:04:ef:de:71:8a:89:1c:23:
                    5f:a3:db:7c:95:3c:4f:f8:e9:2b:c0:48:af:dc:37:
                    77:8a:c9:99:68:eb:5a:2e:2f:15:c2:71:e2:56:2e:
                    02:a7:25:09:60:bd:0b:7d:6c:e8:11:1a:d6:66:d2:
                    2a:f2:f3:d2:d7:2b:de:c1:3c:a9:7c:20:58:65:15:
                    64:4d:48:6f:07:99:ec:cd:94:c9:2c:34:f4:51:a7:
                    f4:29:a1:a2:2b:f5:37:6f:db:ed:31:36:26:01:9b:
                    2f:8c:5b:4e:2e:09:ae:c5:35:9a:a6:a3:8c:70:b7:
                    d1:5a:f9:0b:b3:98:85:1d:59:98:e7:73:92:6f:29:
                    0e:5c:5a:d6:cc:d8:be:5c:71:f0:8c:bb:04:2a:e6:
                    c8:03:13:13:6e:0d:ba:54:65:74:f7:52:4c:29:df:
                    46:48:f5:9a:19:40:a0:25:2b:e0:ef:f9:00:d3:24:
                    8d:d8:ae:40:97:3c:08:6d:7d:68:67:4c:07:53:b5:
                    fd:e3:2e:00:83:8a:64:8a:ca:e5:44:db:44:c3:f9:
                    11:43:12:c9:ab:0f:05:ce:1e:9e:f8:3e:0d:8e:be:
                    98:db:f1:23:b5:c8:10:87:3a:3e:b0:f1:e2:47:81:
                    b2:6f:f6:ee:e1:06:a5:9e:73:25:8a:4f:93:8d:cb:
                    fa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BA:69:C3:67:A5:1D:7D:A8:17:1F:A4:30:8A:C5:2D:71:7B:EC:89
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F9EFD1AD5D811F0BA521CA3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.67.0-45.197.75.255

    Signature Algorithm: sha256WithRSAEncryption
         33:6c:95:b8:a7:7a:70:ad:dd:fb:52:17:6a:4f:78:95:4b:b5:
         b4:c0:f9:e3:a4:b0:eb:f4:d1:b4:ce:d2:86:88:81:78:68:48:
         c3:d1:07:79:23:5d:3c:6c:8e:da:6f:e1:af:97:8f:2a:f3:4a:
         fe:86:9c:64:af:44:ae:af:6e:00:e9:97:a7:b6:ca:5d:27:ab:
         9e:92:4b:38:d9:fa:4f:56:d5:bc:5b:45:22:fe:d9:8f:b5:b0:
         f6:fb:27:8d:47:35:85:d9:f6:ef:a6:9a:48:fe:56:d7:9e:d4:
         cc:c6:4e:87:02:40:8e:ea:cf:63:25:8f:67:b7:fe:4f:ba:3b:
         cd:af:58:e4:9a:4d:23:eb:0c:53:b1:16:d1:86:f0:3b:72:29:
         5a:af:ee:ca:51:9f:34:e7:22:94:ca:25:ac:37:92:98:23:99:
         af:85:9e:61:08:8f:47:61:61:4c:a7:0e:39:3b:d0:19:13:eb:
         d3:e4:4d:d5:1a:69:9a:40:4e:55:c7:b5:27:2e:30:cb:ef:d5:
         48:c4:6c:ed:62:c7:fe:31:fb:00:18:c7:e3:d4:f7:b8:27:77:
         91:db:f8:35:78:b3:de:13:5f:7d:fe:41:08:83:9a:c0:2d:78:
         22:ee:6d:cb:ee:96:40:64:11:2d:25:31:9b:4c:c0:c6:84:5d:
         b0:95:f5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:00:46 2025 by rpki-client