This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4C9661CC00211F0B2CC22D6DAE4EC9C.roa
File:                     A4C9661CC00211F0B2CC22D6DAE4EC9C.roa (raw, json)
Hash identifier:          dlh9rX+DHod8MUGv1nMA6JJ0asKucMYMkXVCgSdiPIw=
Subject key identifier:   86:1B:67:2E:6D:F3:68:73:D6:39:F7:43:CD:E3:A6:37:4C:AE:67:CA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01872A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4C9661CC00211F0B2CC22D6DAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 20:03:24 +0000
ROA not before:           Wed 12 Nov 2025 20:03:18 +0000
ROA not after:            Mon 18 May 2026 20:03:18 +0000
asID:                     54600
IP address blocks:        45.195.112.0/21 maxlen: 24
                          45.195.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100138 (0x1872a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 12 20:03:18 2025 GMT
            Not After : May 18 20:03:18 2026 GMT
        Subject: CN=6914e80c-c2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:54:90:f9:d3:65:0d:23:79:41:2a:d4:76:a5:
                    d8:f1:b5:82:37:28:98:a6:02:73:ab:36:a4:96:68:
                    25:cd:56:b0:32:de:35:15:02:c7:4d:80:89:eb:b5:
                    ef:43:74:f7:63:ef:de:85:a9:b6:bf:04:34:f9:06:
                    e1:ca:b8:e1:f5:79:fe:7a:60:e6:f2:07:aa:7b:a6:
                    ba:43:23:5d:d8:46:38:31:02:32:73:42:43:4c:4e:
                    ce:10:4c:e9:4e:1b:33:6a:01:3b:f3:eb:e5:a6:dd:
                    16:e6:d2:38:e3:37:85:d7:fe:11:1d:f1:d8:3f:5a:
                    56:47:bb:45:4f:74:0f:cd:df:41:df:a9:c8:6b:c6:
                    40:51:56:e6:1f:47:cc:0a:b0:a0:02:59:ec:36:2d:
                    72:b9:be:4e:69:71:06:20:fb:a4:6d:b8:55:70:86:
                    69:b5:ab:68:58:25:2d:59:3f:be:cf:ec:19:1c:e1:
                    1a:8a:f6:a3:8e:90:da:c8:20:7b:f7:c6:9c:b0:d4:
                    fa:71:1d:c9:d9:e5:5f:99:76:9f:19:d6:6a:5f:cd:
                    7c:16:c5:ea:22:48:9d:4c:42:21:7f:d6:5d:a1:55:
                    23:e0:a1:3d:8b:14:a4:48:ec:56:39:18:eb:bc:53:
                    a5:4b:af:07:65:5c:5f:28:55:3e:46:02:ee:84:0f:
                    bb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1B:67:2E:6D:F3:68:73:D6:39:F7:43:CD:E3:A6:37:4C:AE:67:CA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4C9661CC00211F0B2CC22D6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:a0:6d:68:f8:70:98:61:cc:7e:1c:f2:b7:30:d4:b4:c2:de:
         da:2d:d1:a6:e4:05:43:c1:b4:2c:70:07:91:c3:f9:b6:b4:f7:
         91:b4:c9:e7:ab:9c:2d:03:34:c5:f0:9d:f9:09:a3:7c:01:43:
         fb:61:b9:35:47:cd:c8:86:f2:70:ed:f3:2e:03:d6:c0:fe:f1:
         a9:86:ff:24:5a:14:2e:42:92:5b:e6:2f:ce:2e:d6:fa:65:f2:
         d4:ab:e4:5d:08:f1:b4:9d:4a:17:76:c9:dd:ea:f0:0d:00:f8:
         7d:aa:07:75:ce:40:c3:5d:f0:d8:b4:57:18:41:76:06:04:7b:
         d7:d0:63:4d:d0:42:3a:a6:22:0d:26:34:ac:59:d4:da:c1:0c:
         1d:ef:6b:b7:72:41:07:db:a3:8b:11:1c:36:c8:20:88:76:1f:
         69:e7:44:02:c8:ad:cf:e6:a6:ed:88:1a:ad:a5:db:d9:c1:9a:
         b0:7b:d5:77:ad:23:d3:9d:cc:ce:f3:94:6c:e8:ca:4f:b2:ae:
         09:55:c3:f9:d8:06:f0:b6:38:b7:f6:79:cf:22:3b:39:55:58:
         b9:5e:3f:44:8d:89:3c:61:fe:ea:17:1e:39:9f:de:de:0d:78:
         2a:d3:0a:cc:06:f0:38:b5:74:60:b5:7e:ec:8f:16:bf:08:90:
         df:11:76:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:38 2025 by rpki-client