This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91262484D66811F08D1E06B3DAE4EC9C.roa
File:                     91262484D66811F08D1E06B3DAE4EC9C.roa (raw, json)
Hash identifier:          yrXPhFiNL6qXJ25IC0wJUr88OSoM7qXT9ccGnrnvVZY=
Subject key identifier:   51:BC:A8:A6:D4:B2:9D:C1:90:99:65:22:D3:C6:A0:71:7B:F9:BE:34
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018DBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91262484D66811F08D1E06B3DAE4EC9C.roa
Signing time:             Thu 11 Dec 2025 08:08:25 +0000
ROA not before:           Thu 11 Dec 2025 08:08:20 +0000
ROA not after:            Fri 16 Jan 2026 08:08:20 +0000
asID:                     211577
IP address blocks:        45.194.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101822 (0x18dbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 11 08:08:20 2025 GMT
            Not After : Jan 16 08:08:20 2026 GMT
        Subject: CN=693a7bf9-7d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:f1:82:3a:38:b3:30:9b:39:28:56:be:27:
                    d9:d2:ab:77:d2:dd:c3:51:2b:6d:af:e7:d7:cf:75:
                    0b:fd:c5:ae:61:ba:32:c2:a4:2c:ec:69:90:9e:04:
                    e6:f4:2a:4a:c1:2a:fb:2d:94:69:31:ae:e0:f4:fc:
                    f0:c1:74:c9:bd:11:3b:0c:b8:e4:c5:0d:d4:89:44:
                    b4:56:9b:26:31:1d:1a:05:d6:df:04:07:db:4d:79:
                    21:25:15:03:00:9c:a0:f9:6f:b4:80:42:4a:31:61:
                    5a:bc:41:54:1d:52:82:78:32:73:3f:6b:68:4a:59:
                    71:7c:7a:4c:b3:a8:f8:27:cf:64:7b:6d:84:3e:1f:
                    24:19:22:bb:76:b2:8e:31:18:34:6d:08:9f:da:7a:
                    de:7d:68:7a:10:8f:8f:07:58:d0:65:d2:e3:f1:e6:
                    d2:be:2c:e8:d2:47:2f:5c:6d:39:ce:54:40:d6:8e:
                    02:b9:41:4d:ae:88:45:66:80:7b:56:d5:fe:d5:78:
                    cf:a2:b6:33:4d:1c:09:19:43:0a:16:c5:84:32:43:
                    2c:1b:4a:96:f6:99:7d:fd:22:0a:2d:dd:25:cb:01:
                    a1:74:14:d1:f5:4c:96:46:ce:1c:f9:4c:b9:30:3f:
                    63:d0:11:95:96:52:44:3e:f1:68:6b:43:74:82:1f:
                    a2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:BC:A8:A6:D4:B2:9D:C1:90:99:65:22:D3:C6:A0:71:7B:F9:BE:34
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91262484D66811F08D1E06B3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:6a:96:12:88:d8:5e:3b:84:10:8d:2d:19:d3:81:5b:83:f1:
         c6:ef:a5:eb:9a:c4:83:69:f4:ed:85:4e:77:12:4d:b8:b2:12:
         f6:c4:a0:24:5f:e9:95:27:cc:2c:d5:a9:10:7b:43:06:0e:95:
         05:36:f2:c1:b5:81:70:95:c3:78:a3:e9:4b:3b:26:c6:b7:d5:
         e2:19:17:a2:e7:eb:7c:91:69:6f:3e:5c:50:a0:c2:ef:28:28:
         58:d2:d0:50:df:62:e2:c4:50:f6:1e:87:bb:bb:3e:33:28:fd:
         35:15:3d:5f:5d:52:34:ea:a2:73:3f:d2:42:60:04:a1:ed:3f:
         dd:e4:a5:b1:e8:66:d9:40:44:e5:80:af:64:c0:51:e4:ee:c4:
         ae:26:76:2d:82:6f:4f:e0:0f:b4:eb:c0:36:32:68:c5:c3:64:
         1f:d2:aa:d3:84:df:6e:de:6e:6e:a8:6d:72:22:a4:14:02:f9:
         03:25:1d:d0:ac:a5:39:7b:e1:0a:f9:f5:85:2f:00:cb:02:4c:
         8b:60:62:00:d7:41:eb:c1:41:52:9b:79:b9:42:39:4e:03:92:
         a4:31:e0:9e:b7:91:3d:61:66:df:2a:42:f7:db:d9:27:ab:9a:
         fd:68:4e:f7:42:bd:1b:67:40:cd:93:e6:87:89:3a:05:3d:4c:
         9f:ff:3b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 16 13:38:17 2025 by rpki-client