This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C139BCE8BF1711F0A5035C92DAE4EC9C.roa
File:                     C139BCE8BF1711F0A5035C92DAE4EC9C.roa (raw, json)
Hash identifier:          h4UajL0MmTmIkG5i03AnGYFMCwb5t3YeLOAnQubp0qU=
Subject key identifier:   18:4B:C8:FB:7A:4D:E4:2A:5D:08:E7:23:34:D6:D6:27:19:AF:3F:74
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01868A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C139BCE8BF1711F0A5035C92DAE4EC9C.roa
Signing time:             Tue 11 Nov 2025 16:02:00 +0000
ROA not before:           Tue 11 Nov 2025 16:01:51 +0000
ROA not after:            Wed 17 Dec 2025 16:01:51 +0000
asID:                     36137
IP address blocks:        45.200.192.0/18 maxlen: 24
                          45.200.192.0/19 maxlen: 24
                          45.200.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99978 (0x1868a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 11 16:01:51 2025 GMT
            Not After : Dec 17 16:01:51 2025 GMT
        Subject: CN=69135df8-8917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fa:9c:34:41:a8:85:29:47:9b:41:b5:08:c9:
                    29:91:fc:13:8c:4f:5b:eb:a0:7d:6f:21:02:d1:d8:
                    06:ee:c4:c7:e0:0b:2d:51:6f:dc:ee:2b:79:db:69:
                    9d:52:fc:19:8f:55:66:44:8c:db:ed:54:7e:b9:1b:
                    dc:65:59:a2:49:69:fa:96:4d:e2:8f:40:18:e6:24:
                    7d:d9:36:1c:eb:bd:f9:2f:ad:7f:ab:91:b5:65:e5:
                    2f:15:7e:8f:46:91:fa:a2:9d:dd:14:37:ee:be:1e:
                    a5:94:84:44:5d:96:0f:d8:92:97:b2:18:71:15:19:
                    f9:50:25:4a:dd:a7:42:b7:c0:16:84:0d:3d:be:bc:
                    3d:0f:d6:46:81:2a:cf:9c:52:7f:e0:a7:45:03:9f:
                    a1:06:6d:4f:e2:0f:34:c8:22:35:0a:d6:26:2b:68:
                    c7:27:9a:34:e5:55:78:45:ab:a0:60:36:37:81:dc:
                    dc:cd:bd:45:bb:7d:f2:9d:57:c2:9d:59:35:29:05:
                    25:85:1e:e3:b4:68:d8:53:45:b3:70:3c:92:cc:a3:
                    c3:b9:93:7c:f9:23:99:c6:1b:5d:77:34:dd:40:30:
                    26:a1:a2:72:e8:ea:b0:4f:74:5f:bd:f5:1f:4a:eb:
                    18:d8:98:07:b5:ca:a4:82:00:02:8e:f7:52:fc:d0:
                    c6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4B:C8:FB:7A:4D:E4:2A:5D:08:E7:23:34:D6:D6:27:19:AF:3F:74
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C139BCE8BF1711F0A5035C92DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b5:17:e0:91:35:9a:c0:5d:2c:cd:e2:e5:d2:ac:c7:a4:02:fd:
         f3:a1:d9:bf:d7:a4:2c:e7:de:76:78:5a:6f:d0:81:e5:9a:b4:
         91:1a:10:c1:b2:88:0a:2f:b5:f9:0d:87:fe:f9:f7:a4:b7:b6:
         4d:e5:31:bf:3d:04:26:27:8c:b0:d5:42:77:6b:9b:52:90:e3:
         ba:9a:1e:45:b4:ae:dc:96:55:8f:fb:38:b7:2e:b5:98:a6:3f:
         3e:3a:49:52:b1:51:bf:2e:4c:14:a7:46:43:59:27:fb:23:0b:
         65:37:9c:4e:df:40:63:cf:b1:ff:17:59:6f:06:fd:52:d7:99:
         a1:ef:69:77:94:6c:af:41:8c:77:8d:5c:32:17:5e:00:7b:7d:
         3e:d1:b1:c6:df:2b:b3:48:34:18:dc:1a:cf:a8:2f:71:da:0e:
         e0:cb:78:a6:12:ce:c1:99:0d:79:1a:4c:f8:71:3f:f6:63:3a:
         15:7b:5c:e4:84:90:fc:8a:5c:2a:13:23:11:91:60:6a:88:df:
         41:d6:b3:f3:13:36:7b:64:31:1a:06:5f:dc:a5:b1:83:7f:4b:
         e9:e9:23:2b:76:12:eb:0f:ca:5d:d8:ed:5d:b7:2c:9a:2e:a0:
         42:d7:2d:91:41:4b:64:24:c8:26:32:80:46:11:6d:73:f9:81:
         60:0f:9f:e7
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYaKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTExMTYwMTUxWhcNMjUxMjE3MTYwMTUxWjAYMRYw
FAYDVQQDEw02OTEzNWRmOC04OTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5/qcNEGohSlHm0G1CMkpkfwTjE9b66B9byEC0dgG7sTH4AstUW/c7it5
22mdUvwZj1VmRIzb7VR+uRvcZVmiSWn6lk3ij0AY5iR92TYc6735L61/q5G1ZeUv
FX6PRpH6op3dFDfuvh6llIREXZYP2JKXshhxFRn5UCVK3adCt8AWhA09vrw9D9ZG
gSrPnFJ/4KdFA5+hBm1P4g80yCI1CtYmK2jHJ5o05VV4RaugYDY3gdzczb1Fu33y
nVfCnVk1KQUlhR7jtGjYU0WzcDySzKPDuZN8+SOZxhtddzTdQDAmoaJy6OqwT3Rf
vfUfSusY2JgHtcqkggACjvdS/NDGswIDAQABo4ICojCCAp4wHQYDVR0OBBYEFBhL
yPt6TeQqXQjnIzTW1icZrz90MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DMTM5QkNFOEJGMTcxMUYwQTUwMzVDOTJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGLcjAMA0GCSqGSIb3DQEBCwUA
A4IBAQC1F+CRNZrAXSzN4uXSrMekAv3zodm/16Qs5952eFpv0IHlmrSRGhDBsogK
L7X5DYf++fekt7ZN5TG/PQQmJ4yw1UJ3a5tSkOO6mh5FtK7cllWP+zi3LrWYpj8+
OklSsVG/LkwUp0ZDWSf7IwtlN5xO30Bjz7H/F1lvBv1S15mh72l3lGyvQYx3jVwy
F14Ae30+0bHG3yuzSDQY3BrPqC9x2g7gy3imEs7BmQ15Gkz4cT/2YzoVe1zkhJD8
ilwqEyMRkWBqiN9B1rPzEzZ7ZDEaBl/cpbGDf0vp6SMrdhLrD8pd2O1dtyyaLqBC
1y2RQUtkJMgmMoBGEW1z+YFgD5/n
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:15 2025 by rpki-client