This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0786768CFC1C11F0BC922DAEDAE4EC9C.roa
File:                     0786768CFC1C11F0BC922DAEDAE4EC9C.roa (raw, json)
Hash identifier:          JUh9Syxma6qiU//Hd9HIBlKFahZCE4psVJR8Ze9Jnq0=
Subject key identifier:   2A:F3:71:F0:0C:FD:0C:C6:93:E7:E4:40:26:C2:99:BE:BE:CD:3D:33
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0AC1
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0786768CFC1C11F0BC922DAEDAE4EC9C.roa
Signing time:             Wed 28 Jan 2026 07:36:17 +0000
ROA not before:           Wed 28 Jan 2026 07:36:12 +0000
ROA not after:            Wed 31 Dec 2036 07:36:12 +0000
asID:                     834
IP address blocks:        165.49.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Feb 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2753 (0xac1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Jan 28 07:36:12 2026 GMT
            Not After : Dec 31 07:36:12 2036 GMT
        Subject: CN=6979bc71-5cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:b5:57:6d:28:d0:7b:70:36:f0:73:f9:fd:
                    1e:98:fb:f4:bb:42:61:0b:a5:a9:86:ad:83:60:d7:
                    bd:25:8c:48:a1:d4:77:db:c5:91:b1:8e:b0:0c:37:
                    65:a3:2d:b9:01:81:86:2c:98:1b:47:3d:06:1a:e9:
                    6e:14:03:53:09:de:12:9d:03:03:be:46:c3:ce:1b:
                    5b:40:2c:b2:41:e0:a9:f1:9e:f0:fe:bf:6e:05:b3:
                    08:e6:87:af:06:47:e9:be:79:bb:76:df:99:52:77:
                    d5:6f:7f:f1:f9:87:7a:0d:f3:00:3d:82:cd:ac:49:
                    20:5f:87:78:c9:e9:2f:03:9b:0b:54:58:4c:10:38:
                    ac:56:89:e8:a7:68:ce:e6:a5:ee:b2:65:69:6b:88:
                    7b:f5:7d:c3:00:c6:40:48:fc:a1:38:51:d1:ce:34:
                    32:62:52:e8:46:1b:7d:0d:fb:c1:98:6d:26:22:62:
                    17:ab:58:9d:04:db:9d:8b:f6:eb:43:1f:74:32:28:
                    e8:42:8f:65:cf:dd:f7:c9:ab:f5:36:e4:26:88:79:
                    1b:8e:55:2f:49:44:5f:98:85:63:95:62:cd:2c:7f:
                    f0:86:10:9c:5a:90:54:9a:24:30:a5:50:3e:05:b9:
                    66:9e:a8:fe:d9:96:2b:6e:00:e6:cc:6b:53:f8:0a:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F3:71:F0:0C:FD:0C:C6:93:E7:E4:40:26:C2:99:BE:BE:CD:3D:33
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/0786768CFC1C11F0BC922DAEDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:d2:83:c6:ee:c6:e0:bd:ca:ba:f1:73:7b:05:2d:57:eb:86:
         f7:71:95:4e:e6:88:b7:28:0c:9e:32:29:76:8f:bf:5c:c2:9b:
         44:3f:5f:d1:96:cf:26:d7:00:49:f6:5c:d2:1b:22:cc:d6:82:
         cc:09:81:d9:91:32:c0:13:dc:8b:8f:71:b5:e9:54:5d:c0:67:
         77:ae:f6:e5:b3:46:04:a9:cb:a5:bb:a6:72:d2:64:7e:1f:ea:
         24:05:33:00:ec:4a:0b:98:d6:b1:0a:03:13:5d:b1:53:af:7b:
         55:37:97:ce:10:8e:c9:70:97:ee:48:f1:76:80:a6:15:7b:e2:
         be:88:a2:fd:ab:7a:77:11:13:08:d7:ce:7b:44:fb:4a:0d:93:
         e5:e1:9c:01:d8:30:48:8c:b2:c2:08:7a:9c:b7:40:3f:9a:33:
         81:f6:7b:39:35:49:0e:ff:e6:78:6c:9f:9e:7f:99:01:89:eb:
         00:cb:61:db:fa:56:7e:83:22:e2:1c:d3:c8:41:9a:7d:9d:17:
         b9:91:9d:ad:45:35:66:32:fd:8b:c2:46:b2:80:8f:43:af:63:
         38:35:03:0e:f4:5c:1d:63:d3:95:08:9e:98:41:ca:40:8f:45:
         ee:91:d1:c5:6a:42:07:f6:15:cb:17:be:64:8e:ab:75:6e:af:
         31:0e:15:b3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCsEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjAxMjgwNzM2MTJaFw0zNjEyMzEwNzM2MTJaMBgxFjAU
BgNVBAMTDTY5NzliYzcxLTVjYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCLLVXbSjQe3A28HP5/R6Y+/S7QmELpamGrYNg170ljEih1HfbxZGxjrAM
N2WjLbkBgYYsmBtHPQYa6W4UA1MJ3hKdAwO+RsPOG1tALLJB4KnxnvD+v24Fswjm
h68GR+m+ebt235lSd9Vvf/H5h3oN8wA9gs2sSSBfh3jJ6S8DmwtUWEwQOKxWiein
aM7mpe6yZWlriHv1fcMAxkBI/KE4UdHONDJiUuhGG30N+8GYbSYiYherWJ0E252L
9utDH3QyKOhCj2XP3ffJq/U25CaIeRuOVS9JRF+YhWOVYs0sf/CGEJxakFSaJDCl
UD4FuWaeqP7ZlituAObMa1P4CqXrAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUKvNx
8Az9DMaT5+RAJsKZvr7NPTMwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzA3ODY3NjhDRkMxQzExRjBCQzkyMkRBRURBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMW0wDQYJKoZIhvcNAQELBQAD
ggEBAMvSg8buxuC9yrrxc3sFLVfrhvdxlU7miLcoDJ4yKXaPv1zCm0Q/X9GWzybX
AEn2XNIbIszWgswJgdmRMsAT3IuPcbXpVF3AZ3eu9uWzRgSpy6W7pnLSZH4f6iQF
MwDsSguY1rEKAxNdsVOve1U3l84Qjslwl+5I8XaAphV74r6Iov2rencREwjXzntE
+0oNk+XhnAHYMEiMssIIepy3QD+aM4H2ezk1SQ7/5nhsn55/mQGJ6wDLYdv6Vn6D
IuIc08hBmn2dF7mRna1FNWYy/YvCRrKAj0OvYzg1Aw70XB1j05UInphBykCPRe6R
0cVqQgf2FcsXvmSOq3VurzEOFbM=
-----END CERTIFICATE-----
Generated at Wed Feb 4 03:27:46 2026 by rpki-client