This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4E0AE78C48711F0A58F3EEBDAE4EC9C.roa
File:                     B4E0AE78C48711F0A58F3EEBDAE4EC9C.roa (raw, json)
Hash identifier:          JXpjBoNa4oPHQMSd1LHQCYcDSNcItzppKGU+ZIT5+iM=
Subject key identifier:   4E:04:17:AF:1D:21:15:AC:C6:8D:57:31:C2:2C:32:A5:88:5C:AF:CB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018852
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4E0AE78C48711F0A58F3EEBDAE4EC9C.roa
Signing time:             Tue 18 Nov 2025 14:05:59 +0000
ROA not before:           Tue 18 Nov 2025 14:05:54 +0000
ROA not after:            Sun 15 Mar 2026 14:05:54 +0000
asID:                     139880
IP address blocks:        45.204.160.0/20 maxlen: 24
                          45.204.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100434 (0x18852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 18 14:05:54 2025 GMT
            Not After : Mar 15 14:05:54 2026 GMT
        Subject: CN=691c7d46-d105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:98:4d:09:3d:f7:2f:48:60:ba:61:2d:d8:64:
                    aa:b8:33:46:8f:ba:e8:8b:e9:41:c4:27:52:c3:8a:
                    30:6c:33:6d:a1:42:6a:1d:61:65:fa:09:0b:9d:f3:
                    b7:04:06:6b:0e:10:6e:fa:1d:bf:ad:94:24:f6:b3:
                    5f:ec:d4:4b:5e:4c:39:86:f8:13:ff:09:aa:53:eb:
                    a9:e2:16:20:5c:0f:23:f5:37:13:ec:10:e5:d4:a8:
                    62:d6:e3:be:4e:17:27:3d:2a:3a:bc:8a:fe:41:4e:
                    b4:3f:40:7f:7e:89:48:bb:44:d0:d7:ee:67:07:f8:
                    82:a1:f7:5b:51:4a:de:0f:08:94:5a:c5:fc:f9:c2:
                    9d:5a:43:65:cf:bb:a2:12:8b:79:8c:13:91:ba:5d:
                    3a:3c:62:cc:54:0b:85:1e:df:3f:d5:c3:da:10:4b:
                    00:cc:81:4d:1d:93:ab:f2:14:6f:64:f8:4b:d9:ab:
                    a2:e8:9d:f4:ac:bf:96:90:ca:49:8b:ef:b3:bb:09:
                    28:1e:53:8e:85:09:5a:b2:11:5b:eb:fb:1e:63:f9:
                    ab:7b:df:1b:c6:39:47:1c:d4:cd:6c:89:4a:d7:81:
                    67:b5:38:a8:55:7d:dd:44:37:79:11:4a:37:f9:14:
                    d9:a3:00:f2:80:c6:8d:55:08:38:54:5a:6e:d7:d2:
                    47:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:04:17:AF:1D:21:15:AC:C6:8D:57:31:C2:2C:32:A5:88:5C:AF:CB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4E0AE78C48711F0A58F3EEBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.160.0/20
                  45.204.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:24:f4:3e:a3:9f:62:1e:b1:52:84:05:db:11:ec:69:2d:64:
         64:bb:80:4a:20:4c:04:5d:a5:d1:8d:6a:d5:26:41:18:ba:f9:
         de:9e:6e:5d:e7:ee:e0:4d:b1:9e:d9:57:e9:1a:f0:b2:a8:c5:
         80:63:df:5d:94:c8:fb:a2:d5:5a:33:0e:f4:c9:ea:e8:d0:33:
         9d:8c:34:8a:a7:da:80:4f:99:7a:c0:5f:70:ee:3c:14:73:98:
         fe:fb:b9:fc:d5:25:66:16:bd:59:96:dd:45:e0:eb:e4:d3:ed:
         43:f1:64:60:71:3e:27:8f:dd:8c:25:60:1c:f4:d3:cc:b9:91:
         59:bc:7a:e9:2b:5e:45:ef:e2:85:e9:14:b8:d9:0c:f5:e1:7e:
         a1:e4:e1:2a:70:6d:e9:1f:89:4b:22:ae:92:e3:ea:77:e7:6f:
         ec:48:b0:a3:7f:3b:60:99:4c:85:72:7f:df:a8:27:ef:ba:77:
         3b:29:b1:69:4c:88:c9:38:4f:2a:03:24:14:1f:4f:b6:1a:29:
         b8:31:e0:b8:3c:f5:53:89:e0:e3:18:aa:a6:e1:35:13:bd:f1:
         19:93:1e:76:df:ba:db:13:6d:05:a3:b0:8b:d7:30:1a:63:94:
         a7:de:91:79:7f:dd:8c:26:06:79:49:a2:0e:2f:d0:fb:f3:f9:
         d5:db:6c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:36 2025 by rpki-client