This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE6F5966D67911F0BC4FBC9CDAE4EC9C.roa
File:                     DE6F5966D67911F0BC4FBC9CDAE4EC9C.roa (raw, json)
Hash identifier:          RFRkSe+MWZJGTvGMWDoP23Anse+HTyOXfAOFZ4mR7RI=
Subject key identifier:   A9:AA:03:EE:66:BD:06:A5:D6:DC:AF:45:AC:46:B6:E1:BD:F4:9B:36
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018DC4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE6F5966D67911F0BC4FBC9CDAE4EC9C.roa
Signing time:             Thu 11 Dec 2025 10:12:16 +0000
ROA not before:           Thu 11 Dec 2025 10:12:11 +0000
ROA not after:            Sun 18 Jan 2026 10:12:11 +0000
asID:                     215925
IP address blocks:        45.194.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 14 Dec 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101828 (0x18dc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 11 10:12:11 2025 GMT
            Not After : Jan 18 10:12:11 2026 GMT
        Subject: CN=693a9900-bc2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:21:f2:24:a5:51:c7:f9:eb:6a:af:c5:99:7d:
                    62:d9:88:a3:fd:38:bd:df:af:5f:04:53:22:a0:5d:
                    7c:7c:3e:d5:5d:e7:d8:00:ea:d3:65:ec:32:1f:b3:
                    d6:b1:91:03:ec:8e:88:b0:c7:75:cf:80:a2:32:90:
                    e5:46:9a:33:93:72:f5:7c:fb:62:8a:d9:6c:b4:8c:
                    d7:bd:1c:04:c7:d1:35:8f:ab:25:76:7c:a0:12:e5:
                    9a:2b:c6:aa:a2:61:0e:02:e2:8d:d9:1d:c3:d1:23:
                    af:02:a4:19:ff:48:dd:24:30:ab:35:78:66:52:82:
                    90:a1:5e:5f:8e:ec:d2:3f:94:20:84:0e:81:59:e7:
                    57:4a:ad:5e:20:e7:45:7f:2f:80:0d:38:ca:46:fd:
                    2e:5f:68:85:3d:8f:2e:6d:d8:87:35:6f:ad:d6:9e:
                    74:95:19:2d:29:3e:a4:e2:37:79:7d:02:4d:14:aa:
                    66:76:44:58:da:e5:67:a2:77:e8:b1:f1:90:16:bb:
                    81:7f:44:b0:55:16:60:c9:ee:97:25:75:88:72:ab:
                    51:d9:fe:f7:6f:90:a8:dc:e4:9c:92:48:1a:1e:9f:
                    21:92:6f:3a:9a:97:31:db:8b:a0:cf:a4:8a:0e:1a:
                    e3:77:9b:fa:28:4d:82:83:fb:af:9c:3d:9f:81:23:
                    f3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AA:03:EE:66:BD:06:A5:D6:DC:AF:45:AC:46:B6:E1:BD:F4:9B:36
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DE6F5966D67911F0BC4FBC9CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:c7:30:af:9d:d7:67:e5:f2:be:4c:9d:53:3d:31:88:f3:
         8c:d5:ec:44:93:f2:13:d2:fa:52:fb:5a:df:d0:ac:3b:a4:14:
         6f:ef:57:d4:05:bc:93:12:1d:e7:97:2f:d4:0d:fe:9b:38:ed:
         bd:f3:a9:79:1d:91:5b:2e:5b:b5:01:97:48:1e:0c:ee:3d:ea:
         1c:51:53:4a:f3:e3:bc:f4:85:e3:c1:b9:cb:fc:f2:c8:8c:6d:
         fe:cf:ca:84:28:96:a8:cc:34:70:e3:d7:8f:0c:06:e5:8e:09:
         e6:14:fd:b4:db:35:13:99:93:fe:32:a3:f8:a8:30:9f:a0:4c:
         ec:9b:6d:ac:0e:88:76:dc:74:ec:b7:67:70:6e:12:d0:08:ff:
         cc:82:f4:d8:31:c8:63:6f:93:1a:88:9a:ba:3a:9a:d0:45:ee:
         17:c8:7b:f9:46:7b:80:0f:ec:fb:9d:f0:90:2b:42:c7:d4:ba:
         55:c7:e3:07:11:1f:a0:6c:0c:67:54:fb:ef:db:81:17:64:52:
         11:dc:67:f8:d7:46:06:9b:7c:9f:87:ca:6b:72:34:95:32:2f:
         73:9d:a2:71:7a:67:3d:d1:6f:d4:bc:4a:c5:cb:52:62:c9:96:
         ed:06:f9:69:2f:97:24:82:5c:0b:3d:52:d4:10:61:ee:18:8a:
         77:06:fd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 05:15:21 2025 by rpki-client