This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3EE00FCC48311F0A2D5C1D1DAE4EC9C.roa
File:                     E3EE00FCC48311F0A2D5C1D1DAE4EC9C.roa (raw, json)
Hash identifier:          OfkvGUIykBn2FfcL9kiZ4iyYK6b+gNt0T2lDNTtb6Cs=
Subject key identifier:   65:89:B7:13:31:A8:EE:14:FF:83:F8:A5:B6:41:00:20:97:3E:BB:43
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01884A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3EE00FCC48311F0A2D5C1D1DAE4EC9C.roa
Signing time:             Tue 18 Nov 2025 13:38:40 +0000
ROA not before:           Tue 18 Nov 2025 13:38:34 +0000
ROA not after:            Tue 30 Dec 2025 13:38:34 +0000
asID:                     62468
IP address blocks:        45.204.201.0/24 maxlen: 24
                          45.204.202.0/24 maxlen: 24
                          45.204.203.0/24 maxlen: 24
                          45.204.204.0/24 maxlen: 24
                          45.204.205.0/24 maxlen: 24
                          45.204.206.0/24 maxlen: 24
                          45.204.207.0/24 maxlen: 24
                          45.204.208.0/24 maxlen: 24
                          45.204.209.0/24 maxlen: 24
                          45.204.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100426 (0x1884a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 18 13:38:34 2025 GMT
            Not After : Dec 30 13:38:34 2025 GMT
        Subject: CN=691c76e0-5705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:06:2a:a6:f0:80:21:12:77:f6:23:02:1c:d9:
                    c5:7c:19:c1:85:2e:bc:b3:7f:c5:11:3d:ef:f6:f9:
                    19:be:39:2a:ce:7a:9d:7e:57:aa:1c:d3:78:fc:52:
                    ac:72:81:36:cb:4f:da:6a:ba:46:f3:c6:a8:e2:01:
                    f2:ac:e6:31:f1:17:a1:b3:a4:25:0a:48:59:9d:94:
                    c1:c8:14:f1:89:c4:f9:6d:33:86:64:b3:d3:49:9d:
                    04:f9:4d:ea:8f:9f:86:ce:88:6b:52:60:b7:fd:cc:
                    a4:e0:e3:c3:2f:c4:80:5c:cd:2b:c9:84:b8:6d:12:
                    f6:22:07:77:73:19:c4:0f:f2:19:33:4c:e6:fe:df:
                    08:44:79:60:d2:2e:02:c8:38:e7:7e:84:9e:19:e6:
                    ec:83:e7:f4:86:d7:39:6c:48:2f:59:6d:49:1a:bb:
                    60:6a:65:08:6f:9e:22:3a:a0:5e:75:dc:aa:3f:da:
                    b9:80:59:e4:06:fa:39:c9:a8:7f:d6:fc:1f:b3:bc:
                    b1:ad:b5:a2:2c:3e:7e:52:ef:b6:f7:82:24:5b:02:
                    d9:55:c3:f9:97:0f:59:f6:ec:3e:82:de:4e:71:e2:
                    1d:df:19:a9:93:7e:23:1f:c3:7b:53:1f:19:3f:9a:
                    4a:ea:f5:8f:82:67:2c:37:98:df:98:f8:6d:f2:9b:
                    64:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:89:B7:13:31:A8:EE:14:FF:83:F8:A5:B6:41:00:20:97:3E:BB:43
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E3EE00FCC48311F0A2D5C1D1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.201.0-45.204.210.255

    Signature Algorithm: sha256WithRSAEncryption
         76:3e:14:ee:f9:18:28:8f:97:da:5c:8e:6a:84:55:75:ec:68:
         fe:90:98:ce:f5:0a:6c:01:64:61:0c:0a:55:24:bf:b2:20:11:
         1c:1a:6b:21:b7:a1:00:9f:ae:03:5d:5f:e6:04:41:0b:ce:b5:
         58:74:34:3d:7f:d9:f1:71:7b:8d:fa:8f:92:47:6c:81:1b:84:
         99:f2:3f:b6:6f:a1:a8:c8:4b:96:0f:21:9e:97:75:d9:02:31:
         79:02:0d:14:1e:99:e4:1d:3c:5f:2d:d8:03:39:07:4a:d4:f2:
         b2:51:ad:7a:f6:4b:d8:de:f5:f0:7d:cd:e9:9f:4c:26:98:79:
         d9:4a:d5:7b:fe:f2:b5:ed:c2:cd:ca:bc:2b:3d:81:c3:ff:89:
         d2:44:23:13:48:f2:e8:88:cd:28:17:a5:b0:b7:48:80:0d:7d:
         5b:96:da:46:7c:9d:cc:1d:a0:d1:b1:69:3e:20:97:03:6f:0e:
         12:62:e6:e4:02:64:ab:94:ac:73:75:37:5c:37:59:df:88:49:
         4a:85:e2:5b:1b:d2:dc:1d:71:19:e3:49:58:3f:54:35:88:65:
         57:b2:26:24:24:a4:87:04:d5:e7:c4:ab:9c:4b:55:da:34:34:
         84:93:e4:45:35:cb:77:e9:59:c7:ad:05:6d:6b:d5:2d:dc:85:
         7c:ee:b0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:10 2025 by rpki-client