This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7D69B52CB7F11F0957B56C8DAE4EC9C.roa
File:                     B7D69B52CB7F11F0957B56C8DAE4EC9C.roa (raw, json)
Hash identifier:          d0rOrh2dqTN9VFnumh1XLP9I8GackSIZ8tGGUb6XBhc=
Subject key identifier:   71:35:27:6F:53:A1:D0:0D:55:A1:A8:99:46:F0:9B:39:A8:DA:47:76
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0189EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7D69B52CB7F11F0957B56C8DAE4EC9C.roa
Signing time:             Thu 27 Nov 2025 10:56:26 +0000
ROA not before:           Thu 27 Nov 2025 10:56:21 +0000
ROA not after:            Sat 03 Jan 2026 10:56:21 +0000
asID:                     401615
IP address blocks:        45.196.218.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100846 (0x189ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 27 10:56:21 2025 GMT
            Not After : Jan  3 10:56:21 2026 GMT
        Subject: CN=69282e5a-2e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:42:7b:39:81:2b:bd:d7:03:49:5d:1a:13:b9:
                    8d:60:d1:e8:59:d7:6c:f2:de:f1:2b:62:a9:0d:f7:
                    b4:4e:01:27:f3:1a:e9:df:f1:e0:a7:68:02:4c:29:
                    d9:a5:85:1a:19:a8:94:a2:a6:10:fd:27:cc:a4:c3:
                    bb:62:84:53:a8:de:05:37:0d:7a:a9:34:a2:e0:08:
                    6d:67:ef:77:e5:9f:46:ae:d3:a8:8a:7a:95:e2:ac:
                    83:85:ed:35:bb:4f:e1:b7:df:4f:14:bd:d5:27:9f:
                    72:e3:39:f0:cc:14:a9:ba:4e:6f:8b:14:e4:69:2f:
                    97:36:90:95:3b:11:94:bf:0e:6f:6a:1c:1f:6a:15:
                    8f:74:9a:d3:87:c4:0b:8a:97:75:30:71:98:fb:79:
                    a3:e9:d5:60:6c:c1:88:e3:59:29:7e:f5:ad:ae:06:
                    10:2a:e9:92:cf:88:3d:5f:11:ab:ae:f2:dc:d2:f4:
                    8e:45:ff:cf:d8:8b:ad:c1:1b:ba:f9:ff:b6:68:d6:
                    fa:91:ad:bb:46:77:9f:b9:f4:14:54:00:42:e7:cf:
                    c9:7d:7d:92:31:9d:d3:a9:af:02:be:93:8f:37:40:
                    5a:1d:2b:09:f8:5c:67:ac:31:49:47:a7:0c:7b:d4:
                    7d:34:ec:94:05:7b:0d:13:05:72:fa:26:af:15:6e:
                    26:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:35:27:6F:53:A1:D0:0D:55:A1:A8:99:46:F0:9B:39:A8:DA:47:76
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7D69B52CB7F11F0957B56C8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:c3:ec:49:ea:93:7c:0f:fc:f9:d8:6f:8e:b3:f7:cb:4d:bf:
         30:a3:3c:25:25:c5:e1:9a:97:7e:39:89:3f:6e:ef:31:62:a6:
         36:77:4c:88:55:bd:6f:68:8c:5f:1f:ae:1a:4a:f1:ba:02:3c:
         57:b3:dc:0f:ad:df:e8:6a:e3:c0:31:f8:c1:ba:24:ad:9d:f7:
         11:c6:08:8f:a5:35:21:79:5d:fa:c3:c9:fa:fa:7d:49:9d:38:
         3f:60:fc:54:1b:9c:3c:01:2e:66:0a:de:7f:a0:bf:29:be:64:
         f3:9f:5c:03:c6:c2:a0:e8:b6:88:cb:57:22:e4:22:52:7d:3b:
         8c:35:fd:68:65:b2:b5:68:ee:3e:61:61:23:ce:94:10:1a:ee:
         dc:b8:5a:2c:7a:72:5f:9b:fe:2d:07:b6:6f:a6:d9:12:d6:5f:
         43:51:35:72:56:40:89:fd:70:a6:d2:20:ff:30:29:44:fa:e2:
         57:a3:e8:ee:7c:4f:bc:4b:8d:f1:bf:05:f4:43:12:b0:c4:85:
         ab:2d:f4:45:57:c6:6b:ff:a2:cf:c6:e7:ee:d3:fd:8b:f4:cb:
         02:5c:9d:85:cb:95:07:71:af:4d:94:41:a7:e7:0a:f4:8d:00:
         5f:36:8c:0b:7c:1f:ae:e9:57:68:3d:a6:4b:e4:b2:fa:00:36:
         a0:a1:02:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:58 2025 by rpki-client