This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/927009A2CF8011F08E3E5FD9DAE4EC9C.roa
File:                     927009A2CF8011F08E3E5FD9DAE4EC9C.roa (raw, json)
Hash identifier:          HAdY/bcLP969GidUOVjiOmSPdpxURcoXnm8/jtRJSUE=
Subject key identifier:   26:B4:A0:9B:F3:EF:88:FF:D5:04:BD:61:11:E5:8E:81:3E:43:9D:F4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018AD9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/927009A2CF8011F08E3E5FD9DAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 13:12:37 +0000
ROA not before:           Tue 02 Dec 2025 13:12:32 +0000
ROA not after:            Thu 08 Jan 2026 13:12:32 +0000
asID:                     395886
IP address blocks:        45.205.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101081 (0x18ad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 13:12:32 2025 GMT
            Not After : Jan  8 13:12:32 2026 GMT
        Subject: CN=692ee5c5-17a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fe:09:75:0c:d9:36:8d:15:24:89:0b:44:d5:
                    6b:fc:84:b2:db:b1:74:94:ed:aa:90:ef:70:70:e5:
                    87:30:24:8f:57:51:5d:bd:e8:58:92:9c:e0:dc:c5:
                    7e:62:4f:aa:e0:a2:6c:9b:92:69:e5:f4:49:a7:e3:
                    5b:74:cd:20:47:68:0a:1e:96:2b:92:95:9b:f8:fa:
                    6c:0f:f6:ee:91:84:a3:7a:6a:d5:5a:2e:34:30:99:
                    95:b7:e4:5f:06:72:81:17:36:c6:0d:50:e3:3f:2d:
                    7e:45:2d:77:a2:d4:a6:76:73:2e:af:c4:7c:d3:77:
                    18:e1:32:b6:14:fe:ba:6f:15:0f:d5:36:50:84:7c:
                    08:7b:d4:46:74:a4:b4:34:6b:e3:3b:2f:56:f7:04:
                    f8:c7:41:81:6b:bb:c4:04:0e:ab:dc:c7:26:7d:02:
                    86:b0:a0:1a:17:da:a3:89:d9:b1:a3:81:3e:fb:35:
                    10:74:ff:64:3c:f5:1d:b8:b1:25:0a:b5:ab:64:d5:
                    e2:b6:52:a2:b6:17:dc:ec:61:d6:b3:4b:bd:e8:8b:
                    72:2b:b7:ee:33:4b:af:51:be:8a:0e:34:e2:dd:a2:
                    83:da:7d:71:b4:4a:bf:d5:47:97:fb:7a:7e:c9:7d:
                    2d:fc:85:7d:5f:ad:c2:9a:f1:67:d8:f8:3f:7f:f2:
                    03:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B4:A0:9B:F3:EF:88:FF:D5:04:BD:61:11:E5:8E:81:3E:43:9D:F4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/927009A2CF8011F08E3E5FD9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:5f:32:91:ad:77:42:32:9b:b4:d6:a0:d8:81:db:b6:8c:d6:
         bd:a7:a4:36:10:dc:23:93:f0:a9:1f:e4:6f:e2:ff:cc:67:96:
         65:33:d5:e9:88:87:21:46:94:a5:a4:6d:43:24:56:72:17:6d:
         fd:12:eb:40:16:b2:8c:b9:2a:b8:10:08:e4:be:df:f4:d3:01:
         23:27:15:02:27:b2:46:54:1c:5b:07:b9:71:cf:b7:d5:2b:71:
         2d:b4:1e:4f:64:c9:62:43:d2:90:6f:0a:7d:88:9b:8b:95:11:
         11:47:67:de:84:eb:bf:27:56:3e:85:a3:63:5b:b6:44:e9:74:
         3c:fb:31:4a:f5:ce:6b:86:d8:c5:fd:51:11:d4:76:a6:7c:2c:
         53:05:67:98:51:b8:0a:5c:7d:e7:1f:53:62:52:3d:21:a3:1c:
         2a:ff:42:58:b2:d3:a3:9c:3a:b5:b6:a6:11:5e:40:68:e1:e6:
         25:e4:dc:68:bf:7e:9d:96:6b:cf:5e:03:67:a7:e3:61:2a:59:
         cc:8f:1e:94:3f:30:65:06:38:68:0d:a4:9d:d1:33:4a:c2:3a:
         37:87:bc:cd:70:f0:70:e3:2d:27:b3:e5:b0:74:8b:19:58:89:
         67:50:b8:c6:84:b1:e0:4c:17:21:f6:f5:57:be:3a:ab:43:9c:
         0f:cb:b5:67
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYrZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjAyMTMxMjMyWhcNMjYwMTA4MTMxMjMyWjAYMRYw
FAYDVQQDEw02OTJlZTVjNS0xN2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuP4JdQzZNo0VJIkLRNVr/ISy27F0lO2qkO9wcOWHMCSPV1FdvehYkpzg
3MV+Yk+q4KJsm5Jp5fRJp+NbdM0gR2gKHpYrkpWb+PpsD/bukYSjemrVWi40MJmV
t+RfBnKBFzbGDVDjPy1+RS13otSmdnMur8R803cY4TK2FP66bxUP1TZQhHwIe9RG
dKS0NGvjOy9W9wT4x0GBa7vEBA6r3McmfQKGsKAaF9qjidmxo4E++zUQdP9kPPUd
uLElCrWrZNXitlKithfc7GHWs0u96ItyK7fuM0uvUb6KDjTi3aKD2n1xtEq/1UeX
+3p+yX0t/IV9X63CmvFn2Pg/f/IDtwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCa0
oJvz74j/1QS9YRHljoE+Q530MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MjcwMDlBMkNGODAxMUYwOEUzRTVGRDlEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLc1SMA0GCSqGSIb3DQEBCwUA
A4IBAQByXzKRrXdCMpu01qDYgdu2jNa9p6Q2ENwjk/CpH+Rv4v/MZ5ZlM9XpiIch
RpSlpG1DJFZyF239EutAFrKMuSq4EAjkvt/00wEjJxUCJ7JGVBxbB7lxz7fVK3Et
tB5PZMliQ9KQbwp9iJuLlRERR2fehOu/J1Y+haNjW7ZE6XQ8+zFK9c5rhtjF/VER
1HamfCxTBWeYUbgKXH3nH1NiUj0hoxwq/0JYstOjnDq1tqYRXkBo4eYl5Nxov36d
lmvPXgNnp+NhKlnMjx6UPzBlBjhoDaSd0TNKwjo3h7zNcPBw4y0ns+WwdIsZWIln
ULjGhLHgTBch9vVXvjqrQ5wPy7Vn
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:11 2025 by rpki-client