This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5585C9EC15811F0B7838BCFDAE4EC9C.roa
File:                     F5585C9EC15811F0B7838BCFDAE4EC9C.roa (raw, json)
Hash identifier:          OWo3lzL+nABxj14QPgTTiNZro3BusxtPIuPWXZRKxqI=
Subject key identifier:   C7:FA:0F:35:BB:6B:36:99:B9:DE:B0:00:42:A8:98:0C:46:B1:47:30
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       018799
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5585C9EC15811F0B7838BCFDAE4EC9C.roa
Signing time:             Fri 14 Nov 2025 12:53:47 +0000
ROA not before:           Fri 14 Nov 2025 12:53:42 +0000
ROA not after:            Sat 27 Dec 2025 12:53:42 +0000
asID:                     395793
IP address blocks:        45.192.112.0/24 maxlen: 24
                          45.192.165.0/24 maxlen: 24
                          45.192.166.0/24 maxlen: 24
                          45.192.227.0/24 maxlen: 24
                          45.192.228.0/22 maxlen: 24
                          45.192.228.0/24 maxlen: 24
                          45.192.229.0/24 maxlen: 24
                          45.192.230.0/24 maxlen: 24
                          45.192.231.0/24 maxlen: 24
                          45.192.232.0/22 maxlen: 24
                          45.192.236.0/22 maxlen: 24
                          45.192.239.0/24 maxlen: 24
                          45.192.244.0/24 maxlen: 24
                          45.194.1.0/24 maxlen: 24
                          45.194.24.0/24 maxlen: 24
                          45.195.133.0/24 maxlen: 24
                          45.198.228.0/24 maxlen: 24
                          45.198.229.0/24 maxlen: 24
                          45.198.230.0/24 maxlen: 24
                          45.198.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100249 (0x18799)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 14 12:53:42 2025 GMT
            Not After : Dec 27 12:53:42 2025 GMT
        Subject: CN=6917265b-4697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b2:d1:3b:6b:f2:b6:fc:9f:f2:b0:8d:1f:6a:
                    d1:15:28:41:99:82:a7:29:ff:a6:9f:e9:a0:7b:e4:
                    fc:4e:2a:1a:56:40:12:9f:9a:28:1a:1f:32:b7:5d:
                    0d:3a:1e:d7:8a:7a:0f:f7:b6:76:35:01:a8:f3:b5:
                    6f:5c:ab:d5:48:6e:ed:d2:2d:b8:67:0c:e3:12:1e:
                    01:19:4f:93:93:e2:d9:84:c9:6e:21:5e:e0:9f:40:
                    fc:d0:a2:89:7c:59:f5:aa:35:cf:f0:01:60:86:74:
                    e9:9d:a9:3c:ac:c9:15:05:d2:6b:34:fa:ee:42:c9:
                    2d:42:1f:aa:ec:73:ac:9a:c6:d4:1b:fc:8e:14:62:
                    26:4b:8f:a7:5a:22:b9:95:ad:f7:ca:0e:f6:b1:8f:
                    2f:8f:95:44:95:7f:ce:c7:7e:91:ff:b4:0f:5a:b8:
                    d8:34:0b:af:28:a1:5e:77:9f:88:4f:94:b1:8f:cf:
                    62:91:ce:cb:0c:17:12:e7:da:2f:2c:d9:84:cf:c5:
                    e6:d2:c4:f2:36:e7:9d:f1:63:c9:46:e2:fd:21:60:
                    06:76:75:04:a6:91:02:ca:c0:44:2d:0b:74:ce:1f:
                    6f:7d:8d:a2:a6:f3:e7:f1:1f:76:c6:fd:1c:f5:99:
                    63:9c:80:0e:a5:99:93:70:a8:cd:aa:1b:94:49:11:
                    36:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FA:0F:35:BB:6B:36:99:B9:DE:B0:00:42:A8:98:0C:46:B1:47:30
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F5585C9EC15811F0B7838BCFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.112.0/24
                  45.192.165.0-45.192.166.255
                  45.192.227.0-45.192.239.255
                  45.192.244.0/24
                  45.194.1.0/24
                  45.194.24.0/24
                  45.195.133.0/24
                  45.198.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:6d:ca:b4:9d:86:27:29:cb:d2:fa:bb:1f:10:31:55:d4:b8:
         e9:f4:c9:25:47:2d:a8:1a:75:f5:59:e5:b5:99:32:9e:84:6c:
         00:91:1c:70:ec:43:d8:42:b6:61:20:d4:1c:82:24:58:58:91:
         57:8a:bc:cf:3c:0e:4c:01:73:e7:83:08:96:6a:0d:e0:bc:ba:
         79:ac:29:b2:7e:59:11:47:9c:17:db:84:d7:31:bd:bc:55:04:
         16:95:ff:3c:3e:31:3b:0a:b8:9a:dc:db:38:d7:61:6a:42:0c:
         49:8b:66:ad:b1:f5:7b:2f:fd:ce:9f:b9:3f:32:53:3f:d2:57:
         34:e5:a6:51:d4:df:90:2b:6c:03:f1:67:4d:b9:10:51:dc:6a:
         8b:30:68:4c:ea:09:e9:c8:4e:d7:01:57:42:d3:e2:53:70:d7:
         0e:a0:da:a4:4b:59:78:12:14:39:c1:ac:97:f7:f2:d2:f3:1e:
         f1:b0:e4:37:6e:d6:71:14:77:ea:f2:87:cc:ae:88:30:c9:f2:
         95:d3:18:f4:8c:bc:d5:22:c5:d5:28:c7:f2:b8:a2:dd:69:61:
         82:1a:36:02:9e:1b:f9:a2:19:48:33:53:4f:2f:32:19:71:84:
         9a:81:8f:32:21:cc:c1:08:d5:8f:46:74:9b:f0:4e:53:57:4b:
         4a:4a:93:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:13 2025 by rpki-client