This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDF78B8CCAA411F0981CE4F2DAE4EC9C.roa
File:                     EDF78B8CCAA411F0981CE4F2DAE4EC9C.roa (raw, json)
Hash identifier:          mTS0RFs3n/UW1eQses617sKd8/7YXtucwO5d5niDPqc=
Subject key identifier:   7C:FD:04:68:8D:81:AB:79:58:3C:5C:44:08:2D:50:C9:79:EB:F3:2B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0189BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDF78B8CCAA411F0981CE4F2DAE4EC9C.roa
Signing time:             Wed 26 Nov 2025 08:50:17 +0000
ROA not before:           Wed 26 Nov 2025 08:50:08 +0000
ROA not after:            Tue 06 Jun 2028 08:50:08 +0000
asID:                     17561
IP address blocks:        45.194.74.0/24 maxlen: 24
                          45.198.15.0/24 maxlen: 24
                          45.202.203.0/24 maxlen: 24
                          45.204.45.0/24 maxlen: 24
                          45.204.46.0/24 maxlen: 24
                          45.204.47.0/24 maxlen: 24
                          45.204.48.0/24 maxlen: 24
                          45.204.49.0/24 maxlen: 24
                          45.204.50.0/24 maxlen: 24
                          45.204.51.0/24 maxlen: 24
                          45.204.52.0/24 maxlen: 24
                          45.204.53.0/24 maxlen: 24
                          45.204.54.0/24 maxlen: 24
                          45.204.55.0/24 maxlen: 24
                          45.204.56.0/24 maxlen: 24
                          45.204.57.0/24 maxlen: 24
                          45.204.58.0/24 maxlen: 24
                          45.204.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100796 (0x189bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 26 08:50:08 2025 GMT
            Not After : Jun  6 08:50:08 2028 GMT
        Subject: CN=6926bf49-6936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:18:2a:ba:e1:d3:18:fd:43:66:9f:59:8c:c1:
                    2d:f6:d7:73:d7:6a:b2:b3:ba:5e:91:3c:c5:0b:31:
                    15:83:b6:93:1e:ff:df:cd:97:0a:e3:1a:9c:5a:08:
                    83:74:7e:d5:cf:85:80:de:f2:91:b2:d6:99:cb:c2:
                    58:7a:7c:47:5a:d0:05:8b:72:92:eb:7b:3e:69:b5:
                    fa:02:c6:aa:0c:ba:e3:b4:c5:43:b1:e9:fe:e4:c3:
                    4f:53:7b:ca:41:5e:ec:38:43:6c:63:a0:4d:be:74:
                    79:41:fe:6e:cb:3d:95:90:cb:55:9c:2f:d7:99:8e:
                    0c:86:64:5d:14:2c:44:d3:40:dc:26:1f:d7:f1:94:
                    a4:87:cd:94:7a:ac:2a:82:ae:cd:49:c7:1a:9b:7e:
                    36:e9:b8:be:d4:36:05:08:f8:a9:2c:b1:45:eb:ad:
                    f6:d3:7c:2b:5b:c2:dc:96:fc:02:6f:96:3d:1c:f3:
                    fd:81:e1:cc:9f:7e:99:b0:f9:10:76:81:3d:a4:4d:
                    ac:26:4e:6f:10:56:3f:b5:84:47:51:6d:d8:4a:89:
                    8f:cc:d7:29:fc:6a:e4:10:61:85:f9:c2:d6:7d:ab:
                    95:e5:15:33:68:56:af:cf:6a:09:80:05:1d:ad:9f:
                    73:00:ce:13:3a:e5:46:1c:06:94:2d:24:42:51:42:
                    a6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FD:04:68:8D:81:AB:79:58:3C:5C:44:08:2D:50:C9:79:EB:F3:2B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EDF78B8CCAA411F0981CE4F2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.74.0/24
                  45.198.15.0/24
                  45.202.203.0/24
                  45.204.45.0-45.204.59.255

    Signature Algorithm: sha256WithRSAEncryption
         4a:f7:a6:f8:e2:88:14:a3:72:1f:dd:b0:54:28:47:10:93:56:
         f6:ff:db:c4:70:aa:ae:4d:c1:18:25:49:a0:35:b1:c8:2b:e0:
         bc:ed:c5:3d:61:47:84:28:1f:b7:50:6f:52:fa:98:86:97:8a:
         03:dc:65:c0:4c:d4:3a:81:21:79:ff:85:cf:96:95:0d:b6:c2:
         8b:e5:2d:df:c6:0d:de:e9:ec:04:ba:9f:c4:d0:37:1f:39:44:
         53:81:5b:44:01:dc:b7:bd:88:23:a0:c8:c7:80:be:0d:66:de:
         a7:9d:b9:f1:c9:59:b0:c0:d8:59:45:99:91:ca:ea:46:c9:2d:
         6f:dc:e7:b2:9b:63:1c:9e:a8:79:90:3d:75:76:09:0e:e1:90:
         4a:b6:4a:09:df:59:9e:33:bb:fa:42:74:5a:6e:0a:24:fc:68:
         c3:89:22:5f:4d:3e:ef:da:ca:c2:d4:dc:a7:02:ea:c8:7a:3b:
         37:5f:50:85:11:6e:04:2f:e1:f5:86:4b:7a:54:6f:bd:33:4c:
         85:60:c5:1d:04:ea:b5:08:34:01:d9:34:9a:60:ac:1b:bf:3c:
         b8:4b:a5:59:88:49:f8:89:f4:e5:b4:8d:d2:29:4e:95:40:61:
         1f:86:a7:47:0c:55:2a:6d:b8:8d:15:21:58:97:eb:a5:d1:af:
         f7:53:be:99
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIDAYm8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTI2MDg1MDA4WhcNMjgwNjA2MDg1MDA4WjAYMRYw
FAYDVQQDEw02OTI2YmY0OS02OTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxRgquuHTGP1DZp9ZjMEt9tdz12qys7pekTzFCzEVg7aTHv/fzZcK4xqc
WgiDdH7Vz4WA3vKRstaZy8JYenxHWtAFi3KS63s+abX6AsaqDLrjtMVDsen+5MNP
U3vKQV7sOENsY6BNvnR5Qf5uyz2VkMtVnC/XmY4MhmRdFCxE00DcJh/X8ZSkh82U
eqwqgq7NSccam3426bi+1DYFCPipLLFF663203wrW8LclvwCb5Y9HPP9geHMn36Z
sPkQdoE9pE2sJk5vEFY/tYRHUW3YSomPzNcp/GrkEGGF+cLWfauV5RUzaFavz2oJ
gAUdrZ9zAM4TOuVGHAaULSRCUUKm1QIDAQABo4ICvDCCArgwHQYDVR0OBBYEFHz9
BGiNgat5WDxcRAgtUMl56/MrMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FREY3OEI4Q0NBQTQxMUYwOTgxQ0U0RjJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQALcJKAwQALcYPAwQALcrLMAwD
BAAtzC0DBAItzDgwDQYJKoZIhvcNAQELBQADggEBAEr3pvjiiBSjch/dsFQoRxCT
Vvb/28Rwqq5NwRglSaA1scgr4LztxT1hR4QoH7dQb1L6mIaXigPcZcBM1DqBIXn/
hc+WlQ22wovlLd/GDd7p7AS6n8TQNx85RFOBW0QB3Le9iCOgyMeAvg1m3qedufHJ
WbDA2FlFmZHK6kbJLW/c57KbYxyeqHmQPXV2CQ7hkEq2SgnfWZ4zu/pCdFpuCiT8
aMOJIl9NPu/aysLU3KcC6sh6OzdfUIURbgQv4fWGS3pUb70zTIVgxR0E6rUINAHZ
NJpgrBu/PLhLpVmISfiJ9OW0jdIpTpVAYR+Gp0cMVSptuI0VIViX66XRr/dTvpk=
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:15 2025 by rpki-client