This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91D52E84CC4011F082AF9E82DAE4EC9C.roa
File:                     91D52E84CC4011F082AF9E82DAE4EC9C.roa (raw, json)
Hash identifier:          rP4+TUeMaNFFNChvWXpFKabJjyFYau0rxRGVFte6XeI=
Subject key identifier:   52:C0:7F:0F:2F:3E:8A:6B:F3:8C:8F:41:2E:4E:3F:B4:4D:0E:AA:2F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018A47
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91D52E84CC4011F082AF9E82DAE4EC9C.roa
Signing time:             Fri 28 Nov 2025 09:56:55 +0000
ROA not before:           Fri 28 Nov 2025 09:56:50 +0000
ROA not after:            Sun 28 Dec 2025 09:56:50 +0000
asID:                     44559
IP address blocks:        45.199.211.0/24 maxlen: 24
                          45.199.212.0/24 maxlen: 24
                          45.199.213.0/24 maxlen: 24
                          45.199.214.0/24 maxlen: 24
                          45.199.215.0/24 maxlen: 24
                          45.199.216.0/24 maxlen: 24
                          45.199.217.0/24 maxlen: 24
                          45.199.218.0/24 maxlen: 24
                          45.199.219.0/24 maxlen: 24
                          45.199.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100935 (0x18a47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 28 09:56:50 2025 GMT
            Not After : Dec 28 09:56:50 2025 GMT
        Subject: CN=692971e7-a6f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d6:4f:5c:09:85:43:b0:d5:f5:f7:9b:ea:a6:
                    68:8e:ec:64:36:13:ba:c7:ca:8f:aa:c4:aa:8c:19:
                    25:7f:78:e9:df:67:f4:08:df:d9:aa:71:89:1d:b7:
                    e6:48:5c:e2:ac:fb:e6:f6:c5:93:6c:3d:ce:af:93:
                    48:a4:68:2e:1c:84:dd:64:b6:52:0f:42:3b:81:44:
                    1b:5b:38:af:24:a8:32:33:4c:2e:3c:d8:f3:3b:bd:
                    a4:70:18:25:68:90:69:ac:de:6a:bf:d5:77:7a:09:
                    11:29:35:73:b0:3e:2b:9d:8d:7b:78:2b:21:3e:44:
                    d7:d9:8f:50:6d:05:a3:7b:de:bb:d3:fb:93:13:75:
                    70:0f:d3:55:8f:c8:7b:fd:ff:16:38:37:c4:59:a0:
                    be:a2:29:c2:84:41:c3:9b:63:91:9d:bf:3d:1f:10:
                    33:18:bb:25:0f:1d:5a:9f:86:d0:30:20:3b:bd:11:
                    94:4a:8c:78:04:88:d7:5d:64:4f:4b:2e:c9:35:08:
                    a0:a5:5e:ff:84:3e:b9:a9:3a:29:ce:02:c9:71:a5:
                    b1:21:fc:ed:a4:b3:7b:8f:c2:29:6a:02:82:7d:97:
                    30:13:62:cf:7c:d3:8b:b6:a1:f9:b7:53:28:27:63:
                    bd:ae:ee:7d:81:5f:15:d8:eb:8e:a1:74:a2:e0:12:
                    86:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C0:7F:0F:2F:3E:8A:6B:F3:8C:8F:41:2E:4E:3F:B4:4D:0E:AA:2F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/91D52E84CC4011F082AF9E82DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.211.0-45.199.220.255

    Signature Algorithm: sha256WithRSAEncryption
         ac:f3:24:3a:21:c6:24:f4:8f:33:a5:e2:05:f7:03:22:9a:9f:
         bf:fe:25:78:89:ad:0e:08:ea:da:d5:ea:db:54:81:fa:36:2a:
         85:d8:bc:b3:a7:f2:72:32:17:b2:6f:23:61:53:e7:c7:db:6b:
         10:ee:c9:1f:d2:97:bf:4a:1f:35:5c:f0:f3:85:8b:84:5a:52:
         40:bd:1e:58:25:6b:da:ff:36:db:16:e4:06:c0:af:d0:48:73:
         f9:c1:dd:4a:22:5b:23:bb:39:e0:21:2f:d7:9c:a8:dc:d2:8e:
         af:e6:0d:ed:14:e4:3e:97:12:10:0a:37:eb:b1:10:a7:80:cd:
         e5:e7:db:34:39:07:95:33:32:df:5d:51:f7:15:60:39:e8:d8:
         dd:5e:fa:d5:db:24:2a:54:4b:b4:63:a9:bb:da:b6:ca:e2:3b:
         2a:a1:65:a2:82:34:65:5b:f6:cf:b0:40:dd:16:95:9d:30:c5:
         f0:87:cd:93:09:df:03:3c:1f:fb:06:7d:64:47:00:7d:b9:6c:
         a9:84:a0:e0:33:23:4c:27:2c:a0:4e:89:90:27:df:52:03:eb:
         04:24:fd:a6:6a:dd:8d:48:f4:61:11:b9:da:f5:ec:d4:1a:23:
         dc:6e:66:b1:e4:3f:e4:ae:46:e0:9c:90:4f:20:32:b1:3c:e7:
         3c:26:9f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:09 2025 by rpki-client