This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D016A962BBC811F0A49F5AB1DAE4EC9C.roa
File:                     D016A962BBC811F0A49F5AB1DAE4EC9C.roa (raw, json)
Hash identifier:          kgGkkObSXeNa+jCnSgADzMoV3fZT1mfY7TXPHwODGJ4=
Subject key identifier:   97:58:48:44:65:2D:69:2B:C6:B0:69:90:DE:D1:FE:AA:CB:50:52:3E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0185A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D016A962BBC811F0A49F5AB1DAE4EC9C.roa
Signing time:             Fri 07 Nov 2025 10:59:21 +0000
ROA not before:           Fri 07 Nov 2025 10:59:14 +0000
ROA not after:            Mon 22 Dec 2025 10:59:14 +0000
asID:                     141159
IP address blocks:        45.205.16.0/21 maxlen: 24
                          45.205.16.0/24 maxlen: 24
                          45.205.17.0/24 maxlen: 24
                          45.205.18.0/24 maxlen: 24
                          45.205.19.0/24 maxlen: 24
                          45.205.20.0/24 maxlen: 24
                          45.205.21.0/24 maxlen: 24
                          45.205.22.0/24 maxlen: 24
                          45.205.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99751 (0x185a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  7 10:59:14 2025 GMT
            Not After : Dec 22 10:59:14 2025 GMT
        Subject: CN=690dd109-3910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d5:41:85:bd:4c:c1:46:bc:54:85:5a:e2:e6:
                    db:e2:d6:49:c6:63:57:6d:fd:28:c9:a1:b8:22:54:
                    d1:65:c4:1d:3a:12:88:8f:4e:13:3e:83:93:85:76:
                    dc:c1:7d:74:35:1a:19:eb:5a:d1:b0:c8:6e:c2:b7:
                    64:58:16:1e:bb:a8:81:7b:b4:f4:10:54:96:a8:72:
                    b8:47:2f:6f:e3:2e:d2:25:fe:dd:53:70:e4:76:72:
                    17:ff:eb:9b:2e:95:c1:70:a6:04:69:3f:e4:38:18:
                    09:a9:78:f1:5f:ff:46:a6:aa:9f:aa:f2:c5:43:27:
                    e7:db:4f:de:f5:d4:83:10:d2:f5:da:05:36:4f:b2:
                    a7:44:25:e5:70:81:3a:76:a0:8e:8e:7b:f0:4d:4e:
                    04:3a:f2:f3:06:32:b8:22:09:e9:32:cf:a8:e5:ba:
                    62:ff:76:ee:05:80:79:c9:a2:a3:44:cc:f2:46:ce:
                    36:f1:c3:d4:56:3d:a3:d2:fa:dc:56:f6:b8:08:54:
                    67:66:e9:a8:63:f5:19:7b:11:27:82:ae:41:8d:9c:
                    71:b1:98:b2:34:d4:96:57:19:62:dc:03:fd:6f:b5:
                    35:a9:9e:ed:49:b5:c2:4f:58:eb:1b:05:ef:af:1a:
                    b3:8a:e0:c3:08:f6:b8:21:12:52:7c:72:72:84:35:
                    76:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:58:48:44:65:2D:69:2B:C6:B0:69:90:DE:D1:FE:AA:CB:50:52:3E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D016A962BBC811F0A49F5AB1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:e3:50:59:7b:64:5e:08:ae:ae:b3:7a:96:4c:d0:df:ed:55:
         ec:d3:bf:06:ea:aa:05:79:9a:68:34:43:32:d8:ee:4b:b4:f3:
         6e:5d:63:90:77:22:40:b2:10:bb:fd:e5:23:f8:4e:56:85:db:
         4d:11:19:2c:08:44:e5:88:07:f5:43:fa:3f:d8:b3:d5:49:4f:
         64:ec:d0:b8:93:f0:a1:fa:52:57:04:7b:53:a9:dd:3f:e6:c2:
         4a:88:2c:76:07:fc:db:80:ae:a9:b0:c0:ba:a4:25:89:fd:af:
         39:ab:3e:36:9f:87:cc:cc:c8:2a:a6:c2:70:df:a5:c4:2e:e8:
         16:1c:f2:7b:01:08:19:e6:ed:49:36:ae:78:60:87:17:0a:ad:
         5b:84:67:f5:63:34:e9:31:d9:ac:4a:8d:5f:58:42:13:40:d3:
         5d:5e:97:8b:50:9c:6b:6e:ed:89:a5:6c:26:d7:2f:0b:26:22:
         3c:90:68:6d:56:81:d0:65:3a:4b:b1:bf:24:d2:fa:42:b0:8f:
         a4:5e:d3:de:b1:ce:97:19:07:02:a2:d0:b1:54:3b:c3:b4:d7:
         a9:59:a3:6f:b6:99:6c:86:96:5d:79:0e:fb:45:75:7f:14:64:
         a5:4d:9c:e1:ef:08:0a:ee:46:42:ea:f4:3b:49:b0:81:2f:36:
         f5:f3:f6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:02 2025 by rpki-client