This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E40F4402C92311F0AEF16CEADAE4EC9C.roa
File:                     E40F4402C92311F0AEF16CEADAE4EC9C.roa (raw, json)
Hash identifier:          f81R4dUFHeAi8UTuDpgsLMAFW8RPtfE3oBjTydnjtc8=
Subject key identifier:   34:D6:98:B0:F1:51:5C:A9:8D:CE:AD:90:26:61:12:46:85:94:5A:6E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01893B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E40F4402C92311F0AEF16CEADAE4EC9C.roa
Signing time:             Mon 24 Nov 2025 10:54:04 +0000
ROA not before:           Mon 24 Nov 2025 10:53:56 +0000
ROA not after:            Tue 30 Dec 2025 10:53:56 +0000
asID:                     9304
IP address blocks:        45.201.35.0/24 maxlen: 24
                          45.201.42.0/24 maxlen: 24
                          45.201.48.0/24 maxlen: 24
                          45.201.61.0/24 maxlen: 24
                          45.204.48.0/24 maxlen: 24
                          45.204.49.0/24 maxlen: 24
                          45.204.50.0/24 maxlen: 24
                          45.204.51.0/24 maxlen: 24
                          45.204.52.0/24 maxlen: 24
                          45.204.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100667 (0x1893b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 24 10:53:56 2025 GMT
            Not After : Dec 30 10:53:56 2025 GMT
        Subject: CN=6924394c-430e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9f:2f:63:66:1c:87:e7:16:f6:01:2c:f3:d1:
                    6d:bb:5b:24:05:e2:db:e4:ae:e7:0e:a9:d8:72:d9:
                    ce:0d:5f:1d:fc:74:a4:64:56:36:ec:b1:c4:01:89:
                    cb:b8:26:15:8f:10:cc:08:87:07:d7:61:07:2b:bd:
                    57:41:76:12:ed:72:8e:1b:6a:01:af:6f:00:b9:c4:
                    9a:7a:3e:5b:e9:88:31:f5:6b:bd:1d:cd:4d:55:f6:
                    2a:f8:53:c4:6e:9a:e8:0c:60:d7:08:fa:25:34:68:
                    b4:71:07:ad:fc:16:38:ff:21:b2:9b:1b:5d:7f:54:
                    bb:21:bf:34:6b:0e:ba:69:70:f1:03:a8:43:94:36:
                    cd:a6:b1:2c:c7:5f:69:9b:c1:d7:b1:8e:51:b7:1a:
                    ad:f8:6a:99:72:8d:bf:a1:37:15:62:d7:08:f3:96:
                    21:62:80:ee:97:7c:97:eb:cc:3c:1c:d4:47:f7:7b:
                    4d:61:a5:3a:b0:11:62:35:ba:a2:44:b4:34:41:35:
                    89:65:ff:ba:ed:da:38:5d:77:8a:58:6b:ee:6d:be:
                    23:05:0d:c7:dc:3b:2a:e1:a3:6a:61:57:0e:96:f9:
                    7c:c2:5e:07:8a:d8:09:43:aa:42:0d:0e:56:f2:fa:
                    58:87:01:98:72:3a:2a:bf:68:54:0b:86:74:8f:6a:
                    35:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D6:98:B0:F1:51:5C:A9:8D:CE:AD:90:26:61:12:46:85:94:5A:6E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E40F4402C92311F0AEF16CEADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.35.0/24
                  45.201.42.0/24
                  45.201.48.0/24
                  45.201.61.0/24
                  45.204.48.0-45.204.53.255

    Signature Algorithm: sha256WithRSAEncryption
         39:49:8a:32:2a:dd:56:4e:1f:fc:9f:9c:ea:ea:61:a4:4b:83:
         c5:6a:4e:4a:56:26:ec:35:2c:91:c2:11:59:b4:4b:42:67:ab:
         5b:65:ae:c3:34:ba:09:c8:f4:c7:9e:c4:1f:e9:ba:7d:f3:63:
         19:03:07:08:f5:b0:70:de:15:15:57:02:b6:17:c9:81:51:53:
         d6:4b:d4:92:f3:0e:46:5e:27:dc:ce:2c:8b:0a:7d:e8:dd:25:
         2e:35:53:ac:fa:03:26:1f:4f:ef:f5:10:f9:96:72:fd:4b:7e:
         74:ca:e7:87:df:3c:4a:c7:df:70:af:e7:33:40:90:b0:3f:a6:
         b8:43:64:ea:75:69:28:ba:00:c8:eb:70:83:2d:cd:93:d1:71:
         4c:88:b8:b9:ae:ac:b5:81:bc:b3:89:f0:46:9a:60:dd:77:a4:
         46:2b:e3:eb:ce:71:5a:1b:f6:fd:6e:3b:15:44:b5:7f:13:64:
         a2:ab:b5:62:37:70:25:c9:25:14:e7:28:2b:3c:2f:f9:ea:de:
         aa:09:f2:d1:b3:a1:d8:b7:23:c3:e3:5b:cb:61:de:3e:50:1f:
         2f:5d:d9:32:d9:75:0a:30:1c:9c:4b:25:84:e2:62:1b:26:33:
         83:20:c3:0b:b0:d2:7e:d1:c2:79:47:d5:73:81:a2:b2:f7:74:
         9b:ff:de:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:48 2025 by rpki-client