This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAFC78DAB3FD11F08FB621A7DAE4EC9C.roa
File:                     CAFC78DAB3FD11F08FB621A7DAE4EC9C.roa (raw, json)
Hash identifier:          Ls24myr7QV3yVCHIyv7dos/ZpJcFcy5r+L9LP5nJ8FE=
Subject key identifier:   82:A9:3D:A0:C8:A7:F4:3E:56:E3:15:9B:68:49:C9:08:8E:1E:99:C0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018384
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAFC78DAB3FD11F08FB621A7DAE4EC9C.roa
Signing time:             Tue 28 Oct 2025 12:58:27 +0000
ROA not before:           Tue 28 Oct 2025 12:58:19 +0000
ROA not after:            Wed 10 Dec 2025 12:58:19 +0000
asID:                     63139
IP address blocks:        45.197.88.0/24 maxlen: 24
                          45.197.89.0/24 maxlen: 24
                          45.197.90.0/24 maxlen: 24
                          45.197.91.0/24 maxlen: 24
                          45.197.92.0/24 maxlen: 24
                          45.197.93.0/24 maxlen: 24
                          45.197.94.0/24 maxlen: 24
                          45.197.95.0/24 maxlen: 24
                          45.197.96.0/24 maxlen: 24
                          45.197.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99204 (0x18384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 28 12:58:19 2025 GMT
            Not After : Dec 10 12:58:19 2025 GMT
        Subject: CN=6900bdf2-1c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0a:0c:4d:eb:55:41:28:fd:96:0d:fc:aa:98:
                    9e:18:ae:ad:3c:7c:93:67:05:fa:33:f0:5b:9b:a8:
                    41:89:6b:6c:42:1a:31:37:2e:c0:01:51:f2:b7:20:
                    1b:28:ef:f2:b3:e1:74:01:2f:b1:2d:37:5e:fa:71:
                    90:23:74:48:4f:d2:3f:4a:61:bb:b5:85:e6:fc:6c:
                    eb:61:d0:14:76:e4:40:45:24:e9:56:b7:d3:2f:f7:
                    1d:59:c5:55:80:51:62:1a:66:4d:60:88:b9:06:96:
                    ed:9e:03:d1:75:b0:ee:1a:4e:cc:87:b6:ab:a9:b2:
                    33:e9:76:74:6c:e1:8f:4c:b6:71:33:44:5c:98:bf:
                    2d:5d:13:57:ab:04:33:4b:04:d2:46:7e:d9:38:fe:
                    3b:db:6e:2c:a1:9a:05:82:7f:20:ba:0c:06:0f:80:
                    67:f6:d0:b7:81:e4:23:b2:0f:cc:82:44:5c:1f:0b:
                    44:9c:88:c4:3f:58:60:b0:2b:78:51:b0:b9:b9:82:
                    37:9a:4c:d4:fe:58:ec:23:09:a9:16:32:aa:8e:ab:
                    fa:d4:c3:9c:ac:eb:2b:8f:fe:19:86:1e:de:75:24:
                    c0:c8:45:05:69:65:aa:27:3f:d7:a6:23:74:4c:aa:
                    a2:e1:b7:07:93:fb:6b:54:c9:71:6f:d5:4b:45:23:
                    9d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A9:3D:A0:C8:A7:F4:3E:56:E3:15:9B:68:49:C9:08:8E:1E:99:C0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CAFC78DAB3FD11F08FB621A7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.88.0-45.197.97.255

    Signature Algorithm: sha256WithRSAEncryption
         9b:10:e7:18:00:67:1a:ea:1b:5b:39:67:c6:0a:f1:08:e8:70:
         a2:75:d3:fc:61:a9:87:19:35:f4:5f:ad:5d:ad:92:63:c3:7f:
         21:c2:c1:ab:8a:43:ec:da:26:4a:4d:25:a7:4a:8e:12:fe:46:
         9b:ae:15:1c:5b:47:3c:4b:02:91:36:23:e5:39:05:86:23:5a:
         38:14:75:e3:e6:9f:48:67:84:ae:eb:ea:08:51:e2:be:dd:7b:
         45:9d:b8:69:30:d2:65:52:97:75:2d:9d:1d:12:bb:02:04:41:
         1b:bd:b0:a5:fe:26:d8:b7:48:58:a6:d5:98:ba:6a:86:79:50:
         2c:2b:9d:b4:8a:e0:21:ad:1c:c5:ee:54:a4:49:41:73:fa:af:
         60:80:e9:16:ea:1a:15:e2:bf:e2:92:7a:28:c5:56:19:97:77:
         fa:46:bd:13:42:34:1b:9a:fd:a9:26:65:c9:24:df:99:0f:b2:
         bf:1e:a5:4b:21:e9:24:35:d0:7a:65:41:67:74:74:ea:30:05:
         21:cd:86:37:4e:37:a5:b1:c5:b9:b0:33:3f:15:8c:e5:54:0c:
         a6:a3:2f:1d:c2:10:0e:16:24:50:94:57:6b:08:10:5c:79:6a:
         20:02:8a:1b:32:e9:64:d0:44:92:c6:58:76:d8:f9:0c:02:9b:
         c1:33:4a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:47:57 2025 by rpki-client