This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1F036B0BBBD11F0809646ECDAE4EC9C.roa
File:                     C1F036B0BBBD11F0809646ECDAE4EC9C.roa (raw, json)
Hash identifier:          wbtV1sPBnCAJDeQnGtHvhWaFphydkQWc4vB2Uo2pvDc=
Subject key identifier:   CD:50:42:90:E6:25:DC:D6:52:99:9C:B2:D7:4A:0B:B6:BC:71:09:C7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018593
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1F036B0BBBD11F0809646ECDAE4EC9C.roa
Signing time:             Fri 07 Nov 2025 09:40:13 +0000
ROA not before:           Fri 07 Nov 2025 09:40:08 +0000
ROA not after:            Mon 22 Dec 2025 09:40:08 +0000
asID:                     401701
IP address blocks:        45.192.96.0/20 maxlen: 24
                          45.205.16.0/20 maxlen: 24
                          45.207.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99731 (0x18593)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  7 09:40:08 2025 GMT
            Not After : Dec 22 09:40:08 2025 GMT
        Subject: CN=690dbe7d-f359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:59:38:97:c0:96:47:51:23:15:0b:65:fc:5a:
                    26:95:a4:7b:b8:e8:5b:50:f2:c8:9e:b0:68:2e:c8:
                    31:45:69:ec:7a:1d:cb:63:02:b8:e5:e5:6e:90:46:
                    53:ae:32:a6:69:65:db:b1:90:b4:a1:b2:0f:6f:e9:
                    13:9d:74:f6:9d:b9:04:e3:94:a9:3e:50:b3:84:22:
                    23:c8:9a:87:5f:12:11:40:60:b3:10:2f:df:5c:c5:
                    c4:e1:9b:28:d2:ca:2d:ab:9f:72:97:57:ce:bc:55:
                    e1:2d:23:73:17:04:ea:43:f2:2d:36:8d:37:5f:d5:
                    66:41:51:4f:54:e3:be:65:fb:ea:4e:28:56:18:ce:
                    c2:cc:ca:ca:7b:5a:6d:b0:8e:04:9a:6f:03:62:16:
                    6d:64:7e:18:e0:28:81:c1:14:8d:65:4d:92:b5:3e:
                    84:c5:3a:4c:9c:41:78:aa:5a:cf:c4:47:43:d8:43:
                    94:7a:ff:e2:9a:4c:e3:cf:84:80:76:39:c9:d3:24:
                    d8:69:41:8d:72:26:46:73:28:01:94:3c:d1:89:1a:
                    1b:70:f1:95:9d:55:9a:8a:3a:55:e4:68:31:df:38:
                    38:37:15:1f:71:61:e0:19:3a:e6:a4:31:5e:7f:86:
                    18:68:ca:bc:85:7c:3c:a2:ef:9a:0d:c8:cf:e6:20:
                    d0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:50:42:90:E6:25:DC:D6:52:99:9C:B2:D7:4A:0B:B6:BC:71:09:C7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1F036B0BBBD11F0809646ECDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.96.0/20
                  45.205.16.0/20
                  45.207.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a7:dd:d1:3d:5b:bc:b4:aa:2e:50:74:6a:cc:7b:da:40:d9:d8:
         f5:23:6f:e7:54:a5:1a:c5:14:19:c1:2c:e7:e1:09:65:5f:f0:
         32:8b:c9:61:83:32:7d:c3:d9:6f:b4:57:55:99:12:94:77:63:
         55:91:ce:2e:1f:39:c1:98:6c:59:d3:00:da:b8:2b:84:49:25:
         89:16:3d:13:b4:9d:76:75:99:5b:52:19:04:08:35:d3:76:37:
         c5:93:e7:cf:6f:9c:b7:6b:72:cf:35:83:3e:b2:96:ad:16:b1:
         e4:35:5a:67:ae:bb:c0:b2:bd:2d:88:38:18:f7:00:b1:48:22:
         a5:9d:22:d0:bb:72:ff:f6:11:d9:59:43:51:e0:53:16:03:c5:
         b3:6f:4d:d7:15:88:17:30:60:0c:7e:e1:a6:dd:19:b4:72:4b:
         83:df:3f:d0:cb:b2:49:45:d8:e9:8c:c4:8e:32:0f:38:86:89:
         c6:01:97:42:97:34:07:4e:40:93:2f:7a:f1:11:5e:f8:06:09:
         5f:04:42:53:62:f6:f1:dd:6e:c1:3f:90:f7:2a:57:72:e0:0b:
         5e:bf:f5:3c:8f:b8:a4:f0:0d:7e:af:ba:31:18:80:4d:ee:8c:
         e4:a6:b7:ce:9a:d7:0c:c2:90:c9:17:28:5e:a3:61:2c:f2:8d:
         e6:09:d0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:08 2025 by rpki-client