This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF4F292ABA1511F08C6F8D7FDAE4EC9C.roa
File:                     AF4F292ABA1511F08C6F8D7FDAE4EC9C.roa (raw, json)
Hash identifier:          6sgUZfHsnHVVOV61ah11Ifw4FHFRdJ2WFoSsVRJCFXk=
Subject key identifier:   55:5B:63:1F:EB:52:3D:30:3B:9F:72:14:22:B8:DE:76:F6:35:D1:BF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0184E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF4F292ABA1511F08C6F8D7FDAE4EC9C.roa
Signing time:             Wed 05 Nov 2025 07:04:35 +0000
ROA not before:           Wed 05 Nov 2025 07:04:30 +0000
ROA not after:            Tue 09 Dec 2025 07:04:30 +0000
asID:                     6079
IP address blocks:        45.202.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99555 (0x184e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  5 07:04:30 2025 GMT
            Not After : Dec  9 07:04:30 2025 GMT
        Subject: CN=690af703-80a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:24:19:fb:84:d1:49:fe:6d:1c:5c:99:b2:7e:
                    13:c7:77:be:9e:b8:a5:06:fa:3c:0f:bb:2a:ce:9b:
                    76:fb:d5:6a:76:17:d0:2c:52:85:c7:e9:17:cd:8f:
                    f0:0f:23:83:53:c3:3c:45:f0:ed:a7:f9:72:dd:f5:
                    62:76:11:3c:35:9f:f4:c5:e8:bc:3c:17:a9:f7:88:
                    f9:39:77:47:04:4a:d7:ec:17:6e:0e:2d:2f:e6:94:
                    4e:dd:b6:55:4c:9a:d8:f4:c7:04:cb:e1:f6:1d:d3:
                    6f:ec:53:6e:c7:92:42:8f:90:f8:cd:30:c9:56:e3:
                    ac:8f:b1:67:4a:22:ff:ab:66:6b:ca:4b:bc:c1:f7:
                    33:f6:7d:f6:27:e5:80:21:22:9f:c9:0c:b6:4a:05:
                    66:67:15:83:69:77:14:99:f1:f2:4c:a6:4f:d2:b5:
                    7e:7b:e6:80:02:a3:f7:fe:fe:cd:6b:a6:70:59:03:
                    7e:fb:dc:35:73:de:ff:c9:73:e6:5e:7a:19:5e:d5:
                    51:71:e1:15:59:ad:d3:46:68:ae:0e:87:4f:9b:1a:
                    83:00:32:b0:db:7d:0f:00:1d:5d:5d:b6:8c:60:f8:
                    bd:69:af:e5:92:44:26:ae:c0:c6:b5:a1:e0:95:85:
                    0b:13:c1:78:b8:6b:37:0a:34:b0:18:d9:90:7a:c9:
                    35:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5B:63:1F:EB:52:3D:30:3B:9F:72:14:22:B8:DE:76:F6:35:D1:BF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AF4F292ABA1511F08C6F8D7FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:39:eb:da:5e:93:3c:04:bc:a6:75:02:e1:7c:a8:9e:7c:23:
         fd:93:af:34:8e:34:f8:45:cb:f4:22:2e:f7:c4:52:74:c3:4f:
         03:ce:a0:6e:30:ff:1a:df:cf:42:a2:45:d7:15:ec:b7:59:3c:
         37:5f:0b:09:e6:7d:12:28:c8:eb:18:6f:94:ea:6d:d8:c7:c1:
         82:26:15:ae:83:47:9a:4f:10:63:0a:ca:ef:af:75:c0:24:de:
         4e:bf:5d:f5:70:f6:4b:f1:56:ef:a7:fe:bd:a4:1b:f5:d4:3c:
         b0:63:b3:74:5e:9b:b1:42:ab:6e:4f:25:67:e5:5a:83:87:c8:
         ab:cc:cd:35:46:af:9f:cf:fc:79:fe:7b:7c:e1:69:cd:0a:85:
         1e:a7:84:b3:68:e5:ac:3d:25:a0:85:65:45:b3:26:65:38:74:
         f6:e4:6a:5a:a6:e6:96:37:b8:a4:bb:1a:f1:58:f9:7b:3d:87:
         8d:94:9f:2e:cc:82:53:7c:98:9f:ca:31:5e:79:0b:1e:6b:1e:
         b7:21:3a:0c:8f:f7:f2:31:8a:97:9c:f7:a5:d4:bb:ba:69:07:
         8e:3a:39:9b:c9:92:0a:b1:8e:7b:24:2d:bd:d5:cb:fb:fc:4a:
         8d:5e:92:8a:5f:c9:ff:5c:0a:1b:d8:ac:51:15:ae:72:9d:20:
         fc:1a:df:7d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYTjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTA1MDcwNDMwWhcNMjUxMjA5MDcwNDMwWjAYMRYw
FAYDVQQDEw02OTBhZjcwMy04MGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0iQZ+4TRSf5tHFyZsn4Tx3e+nrilBvo8D7sqzpt2+9VqdhfQLFKFx+kX
zY/wDyODU8M8RfDtp/ly3fVidhE8NZ/0xei8PBep94j5OXdHBErX7BduDi0v5pRO
3bZVTJrY9McEy+H2HdNv7FNux5JCj5D4zTDJVuOsj7FnSiL/q2Zryku8wfcz9n32
J+WAISKfyQy2SgVmZxWDaXcUmfHyTKZP0rV+e+aAAqP3/v7Na6ZwWQN++9w1c97/
yXPmXnoZXtVRceEVWa3TRmiuDodPmxqDADKw230PAB1dXbaMYPi9aa/lkkQmrsDG
taHglYULE8F4uGs3CjSwGNmQesk1qwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFVb
Yx/rUj0wO59yFCK43nb2NdG/MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BRjRGMjkyQUJBMTUxMUYwOEM2RjhEN0ZEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpyMA0GCSqGSIb3DQEBCwUA
A4IBAQCsOevaXpM8BLymdQLhfKiefCP9k680jjT4Rcv0Ii73xFJ0w08DzqBuMP8a
389CokXXFey3WTw3XwsJ5n0SKMjrGG+U6m3Yx8GCJhWug0eaTxBjCsrvr3XAJN5O
v131cPZL8Vbvp/69pBv11DywY7N0XpuxQqtuTyVn5VqDh8irzM01Rq+fz/x5/nt8
4WnNCoUep4SzaOWsPSWghWVFsyZlOHT25GpapuaWN7ikuxrxWPl7PYeNlJ8uzIJT
fJifyjFeeQseax63IToMj/fyMYqXnPel1Lu6aQeOOjmbyZIKsY57JC291cv7/EqN
XpKKX8n/XAob2KxRFa5ynSD8Gt99
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:04 2025 by rpki-client