This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD8C3D8EE63411F0AE765E8EDAE4EC9C.roa
File:                     BD8C3D8EE63411F0AE765E8EDAE4EC9C.roa (raw, json)
Hash identifier:          8+OyMpJ+d2298iqjZYxSvjjg25kos+Wqa9kaR1iryXk=
Subject key identifier:   C3:0A:FA:20:80:6D:4F:3B:94:F3:46:E9:B8:F7:88:28:48:C7:E7:13
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019362
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD8C3D8EE63411F0AE765E8EDAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 10:37:44 +0000
ROA not before:           Wed 31 Dec 2025 10:37:39 +0000
ROA not after:            Fri 30 Jan 2026 10:37:39 +0000
asID:                     62468
IP address blocks:        45.204.211.0/24 maxlen: 24
                          45.204.212.0/24 maxlen: 24
                          45.204.213.0/24 maxlen: 24
                          45.204.214.0/24 maxlen: 24
                          45.204.215.0/24 maxlen: 24
                          45.204.216.0/24 maxlen: 24
                          45.204.217.0/24 maxlen: 24
                          45.204.218.0/24 maxlen: 24
                          45.204.219.0/24 maxlen: 24
                          45.204.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103266 (0x19362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 31 10:37:39 2025 GMT
            Not After : Jan 30 10:37:39 2026 GMT
        Subject: CN=6954fcf8-c289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:08:e9:c3:51:5c:83:ca:b0:33:00:b4:7b:db:
                    35:fa:3b:54:ed:b8:69:55:b9:2c:b3:5b:25:a1:47:
                    57:1a:ef:fd:de:f4:ad:a2:7d:fd:80:7c:7b:f7:fe:
                    ce:a4:5a:61:81:e1:f0:3f:a9:a0:03:f5:4f:cb:a8:
                    fd:4c:82:75:f7:6c:52:f9:84:67:4b:16:2d:8d:65:
                    d2:45:fc:d6:ff:30:f5:32:ea:53:2b:53:e9:a7:a2:
                    fb:eb:ba:8f:ad:67:99:2d:94:c9:b6:02:e3:00:26:
                    68:fb:45:16:18:82:ce:fc:f0:52:82:40:fc:05:c5:
                    12:14:ba:b2:ea:bd:a8:4f:4d:f0:30:7d:3d:70:72:
                    55:14:73:72:e5:46:78:48:de:6f:02:e2:82:f8:58:
                    af:04:b6:05:0c:08:ff:46:8b:46:c4:e2:4a:73:95:
                    db:84:18:07:a4:47:10:8d:25:b2:d9:f4:41:37:b9:
                    f3:1a:77:0c:33:f9:d6:d7:ef:8e:cd:93:f8:a6:db:
                    57:46:2f:d8:48:bf:61:b8:c7:e8:ba:d3:31:d5:08:
                    69:66:6e:3f:97:2c:2c:f6:9d:e6:a1:e7:a3:2f:2d:
                    ff:52:da:07:2f:ad:35:40:53:3c:b8:9b:95:b4:91:
                    8a:13:3f:aa:35:da:33:da:48:86:c0:27:87:9f:7a:
                    5e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0A:FA:20:80:6D:4F:3B:94:F3:46:E9:B8:F7:88:28:48:C7:E7:13
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD8C3D8EE63411F0AE765E8EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.211.0-45.204.220.255

    Signature Algorithm: sha256WithRSAEncryption
         32:6a:99:92:6f:f7:28:13:81:f2:41:c8:59:d4:b6:8e:f5:99:
         38:e5:49:14:65:45:54:3a:a6:69:2e:e6:2e:1d:f5:63:12:21:
         e7:72:04:32:e1:3d:16:ba:1f:0d:5c:50:f0:17:c5:19:52:2b:
         8d:49:97:55:f6:dd:10:3d:b1:c1:9d:b7:93:98:4f:75:2f:79:
         b5:ae:c2:74:ae:b2:9b:3e:ef:91:da:44:3a:17:58:20:22:86:
         17:9f:9a:ba:e5:35:6b:ef:50:f1:eb:ea:21:e2:28:e4:70:1d:
         7b:2d:31:9a:91:f2:b7:9f:f0:6f:e7:1d:6a:be:33:f0:a8:3d:
         13:75:d5:d8:e5:2b:82:29:e3:fd:71:84:b1:2e:f6:18:39:72:
         d6:05:14:26:57:a3:d4:35:df:f8:61:9c:1a:45:4a:23:13:ac:
         83:51:06:9a:86:79:5f:2c:0b:6b:41:cc:4a:29:b3:53:18:c9:
         a3:49:01:51:37:3f:20:67:30:21:e1:91:e1:04:7f:42:e5:83:
         0e:ec:01:7f:8e:7f:a2:71:ce:2b:f1:99:e0:25:8d:9a:2a:5a:
         fa:1d:11:d5:91:16:6c:46:28:45:72:2b:40:26:ff:06:09:22:
         4e:ce:2d:e9:a3:d2:38:6b:c5:64:08:6a:4f:cb:d1:04:70:85:
         19:e6:3b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:32 2026 by rpki-client