This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8242BFAC53711F09D1390C9DAE4EC9C.roa
File:                     F8242BFAC53711F09D1390C9DAE4EC9C.roa (raw, json)
Hash identifier:          rI6TYROjibh4AyS2SicuJIbxr+gx5hRgoInjHJfrIrM=
Subject key identifier:   29:5D:F5:FB:CB:DD:54:D6:E2:71:B9:38:4E:A6:D4:27:47:DE:2E:83
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01887D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8242BFAC53711F09D1390C9DAE4EC9C.roa
Signing time:             Wed 19 Nov 2025 11:07:43 +0000
ROA not before:           Wed 19 Nov 2025 11:07:38 +0000
ROA not after:            Fri 26 Dec 2025 11:07:38 +0000
asID:                     7029
IP address blocks:        45.194.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100477 (0x1887d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 19 11:07:38 2025 GMT
            Not After : Dec 26 11:07:38 2025 GMT
        Subject: CN=691da4ff-029b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:da:dd:41:8a:3c:08:8b:d8:9b:0a:39:64:
                    87:85:3b:9c:45:6a:0f:24:1b:57:6c:e6:26:fe:43:
                    4b:d1:4d:bb:ae:cf:8c:63:8d:a9:c3:e8:dc:5c:93:
                    f0:7f:cb:b0:57:11:76:10:8d:40:3d:70:5c:ff:10:
                    88:35:9d:83:45:90:8d:a6:49:7b:5d:af:d4:34:c0:
                    9c:94:79:7e:30:39:84:8c:c8:b3:80:b4:b8:8e:c8:
                    3a:ba:b7:c3:ad:56:b9:72:7b:05:be:2b:8c:58:77:
                    21:10:bc:06:cd:40:d4:9d:4c:43:ee:2b:d5:c5:26:
                    ca:81:44:38:d3:f4:04:e4:ec:dd:f6:3b:a1:30:b5:
                    22:fd:7d:19:24:6d:61:aa:42:c0:bb:0f:28:30:22:
                    0c:03:25:ad:f1:5f:14:9c:b9:98:2f:2b:c7:7e:5d:
                    3f:7c:57:27:a7:78:5d:59:fb:07:b0:13:51:b5:57:
                    c2:87:c3:3c:33:04:b7:15:31:4e:f5:27:0f:97:b8:
                    8a:9a:c6:70:67:e9:5a:6b:dc:f2:25:31:18:49:98:
                    68:38:6b:43:88:d9:a5:23:70:a7:61:78:dc:6a:a7:
                    3a:9c:21:fe:b8:8e:08:82:fa:0c:24:55:2b:f1:54:
                    57:2e:9e:67:bd:f9:e8:d7:27:b2:a0:27:76:c6:e6:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5D:F5:FB:CB:DD:54:D6:E2:71:B9:38:4E:A6:D4:27:47:DE:2E:83
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8242BFAC53711F09D1390C9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:aa:44:d9:2e:c8:c2:c6:36:ac:c6:57:d2:6c:a6:b5:f2:16:
         b1:92:d6:70:f7:be:74:75:6d:f5:68:37:d5:02:05:15:fe:e9:
         90:fd:61:84:11:e1:1b:1c:70:8d:e3:c1:ff:2f:ba:f3:37:e9:
         aa:7b:10:93:53:f3:1a:8c:76:06:09:79:c5:16:40:f3:47:b7:
         26:54:c0:f6:cd:1b:8c:8f:5b:c6:46:39:4e:f8:2c:69:9b:e6:
         18:e4:d9:28:52:7e:96:4b:58:bc:f2:7a:78:ff:ee:67:f6:72:
         21:35:f6:76:4e:a5:11:4f:08:2e:31:c3:3a:c3:bc:b7:94:df:
         ab:7a:15:5b:84:72:c8:cc:10:21:13:cc:16:80:79:f1:ff:dd:
         09:1c:d5:d2:20:53:b8:04:0b:fb:6a:4c:dd:3b:8f:6f:f0:58:
         4f:27:72:21:aa:10:f6:e3:be:eb:4b:6a:75:b6:9c:7f:2f:51:
         9f:64:18:72:8b:d3:86:49:a2:7c:99:9b:23:8d:0d:79:3d:8c:
         c7:05:ee:f3:d9:3a:38:19:76:ac:05:63:da:59:b5:67:22:a7:
         2e:c0:f6:3a:96:a1:13:15:1f:41:07:b0:ee:bc:ae:25:50:ac:
         6b:e5:16:5c:02:49:de:84:5a:6b:99:8b:ad:a6:87:e0:20:94:
         83:36:9b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:49:16 2025 by rpki-client