This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D55EE496CA0C11F08B531FB4DAE4EC9C.roa
File:                     D55EE496CA0C11F08B531FB4DAE4EC9C.roa (raw, json)
Hash identifier:          Rfpf2SOl4EbwuT4YTfYod15dfmLTo7K4sqxck3o4ULE=
Subject key identifier:   71:26:94:D1:6B:4D:30:91:F8:06:8C:83:4F:41:67:46:E1:C8:23:84
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0189AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D55EE496CA0C11F08B531FB4DAE4EC9C.roa
Signing time:             Tue 25 Nov 2025 14:41:32 +0000
ROA not before:           Tue 25 Nov 2025 14:41:27 +0000
ROA not after:            Thu 15 Jan 2026 14:41:27 +0000
asID:                     141109
IP address blocks:        45.196.133.0/24 maxlen: 24
                          45.198.232.0/23 maxlen: 24
                          45.198.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100780 (0x189ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 25 14:41:27 2025 GMT
            Not After : Jan 15 14:41:27 2026 GMT
        Subject: CN=6925c01c-ab2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:85:77:31:07:4a:42:f0:60:89:11:01:5c:
                    eb:bf:3d:b3:76:0d:ce:28:97:c0:2d:ed:fa:b7:1f:
                    df:57:1e:8a:46:07:f4:78:91:93:46:4a:63:dd:b7:
                    5e:1d:78:9e:10:5d:a0:53:61:ec:96:cb:41:60:2f:
                    b0:70:10:d5:fd:35:8f:fe:34:05:ee:e4:bc:fd:fc:
                    eb:32:2e:74:34:ad:e3:70:be:6c:4b:01:49:7c:39:
                    f6:1f:fe:7d:21:d9:1d:19:aa:38:fa:3a:f4:3f:79:
                    fe:38:7a:84:a2:38:49:0e:b4:cf:03:30:6e:99:0e:
                    d7:70:4d:1b:5c:ef:58:ed:f0:6f:8c:3f:ca:8e:9d:
                    96:e4:77:5c:25:6c:d3:67:63:df:cd:f4:e9:fd:8f:
                    d9:35:30:35:36:de:8f:52:de:4a:fa:44:88:9c:e5:
                    e1:f0:52:e7:b2:a7:4c:e5:81:e2:0d:f3:f4:25:d5:
                    4a:f9:82:55:09:85:f2:e6:9c:ee:f4:60:9c:27:41:
                    c3:df:af:0d:cd:07:c4:59:8a:10:66:8d:05:51:4f:
                    23:e8:f1:45:a7:53:c0:ee:fc:37:57:11:6c:91:30:
                    46:89:dc:68:2f:df:fd:9a:46:06:21:be:0d:37:b3:
                    8c:86:35:98:ae:33:a9:a0:fb:35:69:5a:39:37:fb:
                    77:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:26:94:D1:6B:4D:30:91:F8:06:8C:83:4F:41:67:46:E1:C8:23:84
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D55EE496CA0C11F08B531FB4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.133.0/24
                  45.198.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:4d:a3:6e:bf:47:ee:ba:c9:08:73:81:84:59:87:41:7f:0a:
         45:89:0d:70:23:bd:5a:ef:9c:6f:30:4b:b0:bd:d7:fd:8b:46:
         0c:1e:9b:c2:ee:65:7c:6d:e2:0a:03:28:71:32:cf:23:91:27:
         b5:d8:49:e3:9c:3f:a1:fb:ae:59:b8:f6:6d:aa:c0:5e:c4:98:
         90:e5:bc:53:a6:f7:79:72:2d:3b:9e:41:78:12:a8:96:b1:3d:
         88:0a:b8:35:66:93:3c:c0:b0:92:10:ad:10:c8:57:00:06:7f:
         c2:89:15:89:96:91:38:93:7d:77:63:a2:a7:76:a8:1d:72:3d:
         0c:cf:09:e7:b9:f5:83:87:3c:dd:26:17:0c:b3:43:05:b5:cb:
         02:b1:9b:39:de:b5:0a:ff:7a:75:d2:35:b0:43:fe:ec:8a:6e:
         57:81:57:69:d5:d7:b1:0c:00:2d:82:9f:8c:76:7f:06:03:b2:
         df:5e:82:c0:00:ee:11:92:f5:f6:8d:02:81:b5:51:66:4a:32:
         fa:d5:bd:d5:a1:9e:b0:d8:45:83:22:16:df:91:8b:60:d6:ca:
         0b:b9:14:d7:43:39:65:57:19:36:57:02:10:a8:46:41:4f:eb:
         b5:d8:40:e9:6e:ad:1d:ac:15:04:11:8f:68:1e:9d:19:d3:e4:
         71:ef:00:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:57 2025 by rpki-client