This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDC19740C15711F0A80845CBDAE4EC9C.roa
File:                     DDC19740C15711F0A80845CBDAE4EC9C.roa (raw, json)
Hash identifier:          QJ++hdFatSNvVIv/VPTdes4DxbuZB3Zm7XaspfraGsE=
Subject key identifier:   6C:8A:F4:F4:3E:44:1F:0F:1F:A7:B2:49:45:F8:6A:20:98:01:6D:C3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018797
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDC19740C15711F0A80845CBDAE4EC9C.roa
Signing time:             Fri 14 Nov 2025 12:45:58 +0000
ROA not before:           Fri 14 Nov 2025 12:45:50 +0000
ROA not after:            Sat 27 Dec 2025 12:45:50 +0000
asID:                     395793
IP address blocks:        45.192.115.0/24 maxlen: 24
                          45.194.0.0/24 maxlen: 24
                          45.195.255.0/24 maxlen: 24
                          45.198.183.0/24 maxlen: 24
                          45.198.184.0/24 maxlen: 24
                          45.201.16.0/21 maxlen: 24
                          45.201.16.0/24 maxlen: 24
                          45.201.17.0/24 maxlen: 24
                          45.201.18.0/24 maxlen: 24
                          45.201.19.0/24 maxlen: 24
                          45.201.20.0/24 maxlen: 24
                          45.201.21.0/24 maxlen: 24
                          45.201.22.0/24 maxlen: 24
                          45.201.23.0/24 maxlen: 24
                          45.201.24.0/23 maxlen: 24
                          45.201.24.0/24 maxlen: 24
                          45.201.25.0/24 maxlen: 24
                          45.201.26.0/24 maxlen: 24
                          45.206.65.0/24 maxlen: 24
                          45.206.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100247 (0x18797)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 14 12:45:50 2025 GMT
            Not After : Dec 27 12:45:50 2025 GMT
        Subject: CN=69172486-8940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:95:25:fd:a3:79:cf:69:42:bd:2c:70:6b:
                    4e:ab:2c:04:33:bb:27:de:48:cf:e2:43:10:84:72:
                    19:58:5e:16:d9:74:2b:59:e0:28:86:b2:92:c6:7d:
                    cc:07:e3:b5:c3:09:58:b9:e5:83:c7:2c:2a:ff:8c:
                    c3:53:85:27:e2:2b:7b:1c:fa:a3:50:b2:80:f1:4a:
                    48:bc:69:0a:f9:cb:9c:b6:e3:2d:45:92:dd:43:59:
                    40:29:e8:77:0a:9c:f1:d2:23:df:f2:a2:07:ce:4c:
                    fb:d5:ad:ce:e3:ff:14:7f:4e:03:79:d1:9c:41:f1:
                    34:60:40:28:97:e9:a2:a0:d5:ba:22:a8:f1:4b:5b:
                    ba:a7:d3:d9:d0:3b:fd:38:c4:bb:5b:42:00:07:3b:
                    40:55:95:d3:93:5b:aa:29:ca:8b:bd:b0:d0:58:43:
                    44:f4:e5:c0:5f:91:9a:73:d9:77:1d:ab:fa:66:f4:
                    10:e4:da:c2:b9:36:f9:7a:0b:8a:bd:79:32:01:5c:
                    12:a4:e9:4c:e5:86:eb:d6:bb:ba:dc:e9:54:a7:8a:
                    e7:d9:bd:5b:e7:3a:0d:08:8c:d2:13:68:89:a8:53:
                    95:05:cf:b8:25:a0:88:94:ce:f3:8a:dd:b2:94:d6:
                    d9:d9:e7:36:11:7c:71:79:85:2c:b7:94:70:4f:f0:
                    0a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8A:F4:F4:3E:44:1F:0F:1F:A7:B2:49:45:F8:6A:20:98:01:6D:C3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDC19740C15711F0A80845CBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.115.0/24
                  45.194.0.0/24
                  45.195.255.0/24
                  45.198.183.0-45.198.184.255
                  45.201.16.0-45.201.26.255
                  45.206.65.0-45.206.66.255

    Signature Algorithm: sha256WithRSAEncryption
         46:49:e2:e4:48:8d:3a:fa:a9:ae:80:fe:b8:26:70:cf:ba:bc:
         01:43:4e:42:bb:ea:92:30:65:01:35:72:eb:72:98:17:05:6f:
         2c:bf:e5:0d:84:5e:6e:f6:42:d8:3b:a3:f6:d8:3f:90:cc:a0:
         87:78:44:fc:8d:ab:d8:f8:26:ba:0f:ce:bf:e2:95:f0:6c:09:
         cc:2e:a4:d0:b4:c5:2e:7d:e0:70:f8:5b:d6:77:a9:8c:87:fd:
         a4:51:a7:e3:33:04:37:f8:ff:87:0f:68:25:92:31:77:65:2d:
         ee:5f:2a:a5:c3:53:3c:51:4f:a4:48:cb:90:7f:e8:e4:0a:9d:
         4c:2a:2f:0c:fc:a4:38:3a:24:a0:42:35:31:93:ac:46:56:32:
         fd:b1:3b:a7:b4:7e:e2:35:70:c5:54:cb:ce:0d:51:20:6d:71:
         af:52:9e:c4:7a:49:45:96:cd:6e:5a:c3:f4:ca:6b:9a:5e:03:
         ee:c7:57:0c:a5:ee:dc:b2:09:b1:af:7b:aa:b2:b8:10:d5:b3:
         1b:90:4e:6d:61:70:70:84:e5:01:e4:1b:0c:90:b8:8b:ea:73:
         22:a1:fb:d6:ab:79:b1:22:e2:0a:c5:9d:4d:99:76:ef:e5:82:
         60:cd:e3:91:2d:4d:4b:f9:28:ef:a3:a5:cf:9e:37:9f:9e:8a:
         68:80:f0:8f
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIDAYeXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTE0MTI0NTUwWhcNMjUxMjI3MTI0NTUwWjAYMRYw
FAYDVQQDEw02OTE3MjQ4Ni04OTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxM6VJf2jec9pQr0scGtOqywEM7sn3kjP4kMQhHIZWF4W2XQrWeAohrKS
xn3MB+O1wwlYueWDxywq/4zDU4Un4it7HPqjULKA8UpIvGkK+cuctuMtRZLdQ1lA
Keh3Cpzx0iPf8qIHzkz71a3O4/8Uf04DedGcQfE0YEAol+mioNW6IqjxS1u6p9PZ
0Dv9OMS7W0IABztAVZXTk1uqKcqLvbDQWENE9OXAX5Gac9l3Hav6ZvQQ5NrCuTb5
eguKvXkyAVwSpOlM5Ybr1ru63OlUp4rn2b1b5zoNCIzSE2iJqFOVBc+4JaCIlM7z
it2ylNbZ2ec2EXxxeYUst5RwT/AKiQIDAQABo4IC2DCCAtQwHQYDVR0OBBYEFGyK
9PQ+RB8PH6eySUX4aiCYAW3DMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EREMxOTc0MEMxNTcxMUYwQTgwODQ1Q0JEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQALcBzAwQALcIAAwQALcP/MAwD
BAAtxrcDBAAtxrgwDAMEBC3JEAMEAC3JGjAMAwQALc5BAwQALc5CMA0GCSqGSIb3
DQEBCwUAA4IBAQBGSeLkSI06+qmugP64JnDPurwBQ05Cu+qSMGUBNXLrcpgXBW8s
v+UNhF5u9kLYO6P22D+QzKCHeET8javY+Ca6D86/4pXwbAnMLqTQtMUufeBw+FvW
d6mMh/2kUafjMwQ3+P+HD2glkjF3ZS3uXyqlw1M8UU+kSMuQf+jkCp1MKi8M/KQ4
OiSgQjUxk6xGVjL9sTuntH7iNXDFVMvODVEgbXGvUp7EeklFls1uWsP0ymuaXgPu
x1cMpe7csgmxr3uqsrgQ1bMbkE5tYXBwhOUB5BsMkLiL6nMiofvWq3mxIuIKxZ1N
mXbv5YJgzeORLU1L+Sjvo6XPnjefnopogPCP
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:02 2025 by rpki-client