This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E94CFCCCCC6411F09A096CE2DAE4EC9C.roa
File:                     E94CFCCCCC6411F09A096CE2DAE4EC9C.roa (raw, json)
Hash identifier:          kwVOUqMHwNhflWXWGKgFY/GJL6aQUaovpC2oB6qqLmw=
Subject key identifier:   AB:3F:16:A4:6E:C0:92:6F:6D:EB:CC:1F:7D:85:C9:73:E2:3A:F3:39
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018A74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E94CFCCCCC6411F09A096CE2DAE4EC9C.roa
Signing time:             Fri 28 Nov 2025 14:17:05 +0000
ROA not before:           Fri 28 Nov 2025 14:16:57 +0000
ROA not after:            Sat 28 Nov 2026 14:16:57 +0000
asID:                     328608
IP address blocks:        45.206.4.0/24 maxlen: 24
                          45.206.6.0/23 maxlen: 24
                          45.206.8.0/23 maxlen: 24
                          45.206.12.0/22 maxlen: 24
                          45.206.17.0/24 maxlen: 24
                          45.206.18.0/23 maxlen: 24
                          45.206.24.0/21 maxlen: 24
                          45.206.32.0/21 maxlen: 24
                          45.206.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100980 (0x18a74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 28 14:16:57 2025 GMT
            Not After : Nov 28 14:16:57 2026 GMT
        Subject: CN=6929aee0-1ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:0a:29:4a:a7:08:6b:de:93:c0:f5:8d:c9:
                    b5:6b:cb:18:2a:ee:e6:9f:ad:9b:9d:05:f3:8b:1d:
                    75:48:5e:4f:74:67:c2:35:bf:b3:5f:4d:da:1a:a1:
                    4e:0b:73:1e:61:e4:4c:dc:a7:08:12:59:c3:3a:1f:
                    9a:85:98:eb:90:a0:1b:3e:ad:b2:b5:be:dd:fc:60:
                    72:44:a9:5e:5d:b3:7b:92:7b:d0:7b:db:07:ee:1e:
                    b8:f9:84:4f:8f:ab:35:90:f2:3b:79:cb:77:f2:2e:
                    39:84:a9:02:81:7e:12:41:98:17:26:2c:17:a1:99:
                    bd:48:9a:38:f6:d7:26:c3:fa:ad:8b:84:44:96:83:
                    9c:f6:ea:c1:1e:09:41:e8:be:64:54:ad:a9:9d:9b:
                    7b:0d:f1:ff:5b:d6:42:83:89:66:5c:27:4e:38:fb:
                    68:fd:fb:17:e9:d0:4b:4f:66:d4:11:1b:7f:ab:fd:
                    dd:73:d3:11:bb:ef:24:a8:ed:5e:9b:de:b9:2f:83:
                    85:d5:cf:9b:b2:8e:63:2e:14:bc:38:5a:86:d7:77:
                    59:29:df:68:e6:cf:c0:8d:ee:66:73:b5:f4:35:d6:
                    47:61:0a:e2:21:b1:db:b1:3c:e2:67:46:42:b8:30:
                    e0:1e:56:20:ff:97:f8:31:36:f9:bd:76:b6:b7:aa:
                    22:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3F:16:A4:6E:C0:92:6F:6D:EB:CC:1F:7D:85:C9:73:E2:3A:F3:39
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E94CFCCCCC6411F09A096CE2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.206.4.0/24
                  45.206.6.0-45.206.9.255
                  45.206.12.0/22
                  45.206.17.0-45.206.19.255
                  45.206.24.0-45.206.43.255

    Signature Algorithm: sha256WithRSAEncryption
         73:69:b9:fe:2c:0a:aa:bb:e1:a2:11:6d:c8:d5:f0:84:78:fc:
         96:73:55:39:1e:50:18:3e:66:52:f0:8f:b9:50:3f:c6:f9:81:
         f9:6d:f8:e3:6f:ba:35:c6:ce:04:df:9f:78:62:b2:db:39:fc:
         d8:e8:60:44:63:df:d9:f0:e7:22:24:93:fb:b6:ce:81:89:6b:
         59:17:05:b5:79:00:07:94:6d:c0:f1:8d:da:c6:6e:2a:1a:c4:
         8b:c3:18:2a:cd:d6:44:67:2a:01:f2:b8:c8:4a:21:90:3c:a2:
         d3:46:91:ce:81:66:2f:77:a6:6b:da:e6:be:a3:05:1d:8b:38:
         3a:8f:65:dd:fd:8f:48:8e:1d:22:30:85:c3:4c:f3:33:5b:11:
         dd:5f:58:10:0e:3d:49:0b:20:bc:47:55:cf:94:f8:89:7a:5e:
         23:30:c2:aa:ac:81:f5:5c:86:2b:fd:9f:b6:ab:46:88:57:ce:
         c8:e7:2f:08:8b:f7:a3:b2:24:da:11:a6:79:42:42:ca:18:f9:
         21:26:94:35:3f:39:7d:fa:aa:04:e7:f4:f1:0b:f3:37:34:11:
         81:b6:c8:cb:60:ec:3a:07:a6:be:9b:70:e2:b8:86:06:3f:7f:
         cc:b0:4d:40:62:95:8c:24:be:86:80:a1:48:89:a8:22:ae:62:
         dd:2e:bb:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:17 2025 by rpki-client