This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9EF09D6C6CD11F0A887B1B5DAE4EC9C.roa
File:                     F9EF09D6C6CD11F0A887B1B5DAE4EC9C.roa (raw, json)
Hash identifier:          c5e5zc6J7Vglj7IyWHcgUIndAakrlmU2O4LKR1YPths=
Subject key identifier:   64:D8:57:23:A8:96:08:AF:C7:63:40:30:D8:83:B7:D4:E9:07:70:0A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0188F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9EF09D6C6CD11F0A887B1B5DAE4EC9C.roa
Signing time:             Fri 21 Nov 2025 11:34:02 +0000
ROA not before:           Fri 21 Nov 2025 11:33:54 +0000
ROA not after:            Sat 27 Dec 2025 11:33:54 +0000
asID:                     6079
IP address blocks:        45.197.240.0/20 maxlen: 24
                          45.203.240.0/22 maxlen: 24
                          45.203.244.0/24 maxlen: 24
                          45.203.252.0/22 maxlen: 24
                          45.205.85.0/24 maxlen: 24
                          45.205.110.0/23 maxlen: 24
                          45.205.132.0/24 maxlen: 24
                          45.205.151.0/24 maxlen: 24
                          45.205.154.0/24 maxlen: 24
                          45.205.172.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 05 Dec 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100595 (0x188f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 21 11:33:54 2025 GMT
            Not After : Dec 27 11:33:54 2025 GMT
        Subject: CN=69204e29-aa69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2f:09:25:c5:5f:82:08:39:eb:fa:cb:94:d2:
                    fc:4f:b4:6d:93:15:ec:75:e1:28:3f:6b:14:f4:10:
                    b2:ca:41:d1:9e:23:82:47:28:ea:88:29:ea:96:05:
                    4f:64:c6:10:aa:8b:86:cc:99:22:55:b1:79:5f:3c:
                    7b:d3:45:b8:eb:46:83:70:30:fa:50:62:14:fc:11:
                    19:c1:ba:6d:94:c1:6c:b8:0d:be:23:e6:5c:30:94:
                    3c:3c:27:2e:96:23:b2:bc:eb:84:c5:c9:ba:86:f3:
                    8e:96:53:92:b0:9d:66:0b:2c:41:d7:0d:93:6a:46:
                    0c:01:94:28:e7:5a:8f:05:00:3b:a7:9a:d5:2f:1f:
                    bd:d6:e4:c7:74:4e:2e:9e:8c:00:d0:8a:0e:77:de:
                    50:78:4b:28:94:bc:9b:2d:38:4f:84:fa:07:4e:09:
                    6d:55:7c:9e:47:f1:3f:2b:cf:bb:e8:4f:3c:ec:6d:
                    fd:37:e9:ef:c3:aa:0a:3c:d6:6f:81:42:14:20:d0:
                    17:ec:23:ef:a0:66:de:01:8c:d8:f2:57:dd:e8:a4:
                    b5:31:e1:6a:9a:6e:5b:d2:10:12:af:94:26:6c:7b:
                    67:91:a4:82:84:87:99:96:7a:04:38:dc:55:43:f9:
                    f4:c0:0b:0a:8e:77:ee:d5:4e:68:38:a4:b1:47:e8:
                    5e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D8:57:23:A8:96:08:AF:C7:63:40:30:D8:83:B7:D4:E9:07:70:0A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9EF09D6C6CD11F0A887B1B5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.197.240.0/20
                  45.203.240.0-45.203.244.255
                  45.203.252.0/22
                  45.205.85.0/24
                  45.205.110.0/23
                  45.205.132.0/24
                  45.205.151.0/24
                  45.205.154.0/24
                  45.205.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:d6:77:70:08:00:d8:0f:0f:ca:73:a5:39:a6:4a:38:cc:32:
         03:cd:c1:a9:18:1b:a8:2d:2b:75:99:5a:99:ce:4e:60:45:54:
         60:30:9e:a6:08:87:0c:71:74:f9:90:b5:f0:28:1c:32:4e:b1:
         eb:65:cf:fc:7a:99:7c:8b:92:d6:30:67:9f:b0:1f:4d:b9:0d:
         63:df:e3:60:ba:d4:5f:c6:74:e8:27:d6:0d:d6:16:71:ce:f5:
         e8:70:8d:67:a2:57:7d:44:99:e1:55:38:49:38:54:16:3c:56:
         da:2e:fc:7b:b3:e1:6a:c6:b9:2f:65:68:6f:9f:e2:a6:f1:80:
         14:64:fd:4d:c4:b2:c2:c5:3b:16:81:6c:c0:58:84:c9:13:73:
         98:2b:24:73:c9:ea:4a:af:33:2a:a7:5b:22:30:fa:e3:1e:26:
         bf:f9:1e:bc:b1:d2:33:34:df:86:e8:9e:71:1c:92:e8:af:18:
         f9:37:0e:3d:af:96:da:f8:54:c7:b3:29:72:87:a0:ae:0d:8d:
         73:94:6e:70:44:63:eb:18:4a:3d:15:bb:8a:3c:12:e0:31:33:
         74:16:e2:22:ce:e7:2e:06:83:39:3e:27:94:80:74:eb:e0:55:
         cf:ab:2e:40:3d:71:ff:da:8d:73:f8:36:5d:07:7e:e8:8f:bc:
         92:ff:cf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:59 2025 by rpki-client