This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9E923E4CF8011F0B8054FDBDAE4EC9C.roa
File:                     E9E923E4CF8011F0B8054FDBDAE4EC9C.roa (raw, json)
Hash identifier:          w8VHpQUPW4CnyaSAtEEfOevflRbkA05OnEbijPt66i8=
Subject key identifier:   1E:F9:B0:12:AB:EC:7D:6D:1F:58:00:1A:1D:01:68:11:92:11:2C:8C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018ADB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9E923E4CF8011F0B8054FDBDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 13:15:04 +0000
ROA not before:           Tue 02 Dec 2025 13:14:59 +0000
ROA not after:            Thu 08 Jan 2026 13:14:59 +0000
asID:                     8796
IP address blocks:        45.205.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101083 (0x18adb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec  2 13:14:59 2025 GMT
            Not After : Jan  8 13:14:59 2026 GMT
        Subject: CN=692ee658-3d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a2:58:a6:b1:19:a9:67:3b:61:33:2b:df:ee:
                    e1:9c:8d:cd:89:54:50:25:d7:e0:51:74:c0:55:83:
                    69:df:92:63:52:62:eb:58:86:b8:db:06:a6:6c:21:
                    35:6a:90:c7:28:75:f7:2c:97:6d:f3:06:78:ef:bc:
                    9d:32:12:3c:85:bb:68:0d:ba:3c:5a:8f:ea:07:36:
                    63:d1:f2:76:c6:76:6a:54:33:43:f8:95:5f:0e:5b:
                    73:39:4b:8e:8f:dd:12:a3:25:00:ce:6a:9f:31:bb:
                    e1:2c:32:5c:04:63:46:6d:f7:40:81:b6:88:07:26:
                    31:6a:5d:98:2a:f1:8c:f5:0b:93:a0:36:26:7e:93:
                    89:6b:e5:4f:b3:cd:e6:52:7d:9f:bc:b1:b1:4c:b8:
                    06:98:bb:2f:f0:68:9e:e9:23:9f:d4:41:87:10:f9:
                    32:a7:ab:29:09:d8:47:f8:c9:c9:8a:3b:62:68:ed:
                    3b:56:9a:4d:f8:50:14:4c:56:be:3b:d2:2c:db:dd:
                    9b:64:12:eb:2f:76:f4:1b:65:12:a7:03:49:8c:a2:
                    3b:1d:27:e1:b0:55:e8:78:37:00:e4:cf:1d:91:b8:
                    99:ce:11:df:51:a2:a4:10:d9:0e:90:93:53:2c:07:
                    d4:86:79:53:af:6b:e8:80:ad:0f:05:e8:e1:d3:56:
                    d3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F9:B0:12:AB:EC:7D:6D:1F:58:00:1A:1D:01:68:11:92:11:2C:8C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E9E923E4CF8011F0B8054FDBDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:5d:1e:6e:a4:2d:ce:52:34:d5:49:22:57:7b:0e:74:64:b9:
         09:45:5a:e1:33:ae:33:0d:fe:11:c4:75:c0:78:51:45:23:33:
         eb:ae:c6:e0:ea:7d:99:57:06:b8:94:7f:cf:f8:bc:b1:8d:fb:
         c4:21:d0:de:68:09:a0:eb:0a:e9:85:27:13:a8:6a:b2:e6:dc:
         b6:6a:cb:c3:bb:6d:9b:69:1a:4b:0d:58:42:8e:f7:ed:8e:fd:
         8c:48:c5:a2:7a:cd:cf:09:40:81:1b:b6:ed:a1:d9:c7:e5:86:
         d8:48:2b:86:39:39:eb:3d:6f:37:59:a4:6e:e2:ed:8b:90:c1:
         c6:21:b4:78:00:04:81:a6:77:be:9a:42:82:46:a5:69:c2:f8:
         69:b9:c5:0a:13:7c:c2:27:c9:59:5e:6d:12:ee:74:8c:03:e3:
         b1:c8:47:b1:46:99:16:15:96:28:65:86:06:42:9f:6c:77:f8:
         a1:cb:cb:4d:30:f6:32:10:7f:97:8c:90:6d:3d:2c:c0:41:33:
         ab:56:16:47:7a:86:89:11:70:91:13:d8:0a:f9:f2:6c:31:a2:
         56:62:46:fb:4f:af:2a:99:0a:cb:be:84:47:d9:6b:7d:ea:2e:
         06:10:ad:b7:83:5f:0e:55:c4:12:63:58:6d:8b:26:48:12:2a:
         e5:5d:35:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:59 2025 by rpki-client