This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/1949878CF00111F085D0D5CCDAE4EC9C.roa
File:                     1949878CF00111F085D0D5CCDAE4EC9C.roa (raw, json)
Hash identifier:          sp/ZU/xiFejijVEkPg+I5twwmoZKk9bI3BPiB+FJtIU=
Subject key identifier:   6E:58:87:33:5B:25:45:35:35:FC:94:8E:7D:31:34:0C:74:D6:8F:53
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0A98
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/1949878CF00111F085D0D5CCDAE4EC9C.roa
Signing time:             Mon 12 Jan 2026 21:53:16 +0000
ROA not before:           Mon 12 Jan 2026 21:53:11 +0000
ROA not after:            Wed 31 Dec 2036 21:53:11 +0000
asID:                     46450
IP address blocks:        165.49.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 24 Jan 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2712 (0xa98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Jan 12 21:53:11 2026 GMT
            Not After : Dec 31 21:53:11 2036 GMT
        Subject: CN=69656d4c-dbfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:16:74:fd:1a:74:98:6d:16:35:86:11:7f:
                    d1:52:ed:c9:61:d9:0b:db:81:b0:84:53:00:9e:04:
                    ce:68:bd:43:b2:82:39:de:45:5d:f9:8a:54:2c:90:
                    ac:c1:d0:4a:9c:d0:df:c6:1e:b0:7a:92:d6:9e:de:
                    6b:97:1c:b3:47:b9:6c:9c:4f:4e:50:30:fc:28:02:
                    c4:cb:5a:f2:f3:57:9a:1e:95:72:99:49:c5:60:0a:
                    c7:00:63:3e:7d:ff:ce:11:a8:ab:93:0e:ca:e8:eb:
                    13:aa:3b:fe:21:6d:66:d8:f2:0b:79:6d:79:b0:6a:
                    00:65:c4:bd:d4:f6:fc:62:cc:d0:ed:62:40:0f:7c:
                    e6:75:8b:b4:8a:4f:5c:52:d0:ad:73:b5:4d:f1:f5:
                    a8:c9:ac:a8:4c:58:ef:8d:ff:78:d0:f1:bb:30:52:
                    53:f6:a4:9f:a5:ad:6a:12:c0:68:07:36:42:11:9f:
                    83:c1:96:e5:b4:5c:4b:ba:76:78:73:46:2c:5b:9e:
                    05:2a:ea:d1:fe:b5:7d:a6:1c:36:9d:b5:0c:5a:36:
                    e8:f8:99:6e:94:ef:3a:b9:10:78:cb:29:96:94:84:
                    1a:31:62:d2:87:16:11:ea:c9:81:e1:43:fc:1b:52:
                    99:7c:f0:03:a3:cf:6f:64:25:85:f2:b5:1d:52:c2:
                    6e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:58:87:33:5B:25:45:35:35:FC:94:8E:7D:31:34:0C:74:D6:8F:53
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/1949878CF00111F085D0D5CCDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:d9:53:0e:94:a8:cf:94:ee:41:36:61:b4:01:b0:ae:5c:f1:
         85:21:1b:66:3c:32:bf:af:0b:3c:e2:48:fb:b7:6c:ea:c2:a8:
         7d:bd:f5:3c:29:40:d7:b7:40:e4:7c:e6:2c:17:18:7e:f9:5a:
         77:32:21:2a:a9:7a:03:d9:0f:76:93:88:cc:e4:b2:ae:82:df:
         84:66:e4:1e:0f:ae:dd:5c:6d:09:56:20:2e:27:b8:d8:2f:df:
         d5:a1:60:e3:50:e5:6b:c5:58:d4:5f:c1:d4:76:1f:a0:eb:0e:
         68:93:0e:68:fa:52:15:79:90:fd:35:45:69:f1:fb:7b:15:92:
         ae:79:dd:c1:ac:30:bc:eb:9b:d1:29:43:bc:a0:66:a4:a8:74:
         fc:60:19:da:ee:63:33:f5:ee:cb:df:c6:15:56:db:2f:ca:39:
         25:56:85:66:8d:b5:29:8b:6f:cb:2e:8c:7e:41:df:c4:c6:01:
         38:62:84:98:cc:25:b5:55:24:f0:11:0d:e7:c1:ed:87:fb:4d:
         12:3e:d6:c5:ab:b0:59:91:cf:ef:1f:80:72:2a:b5:1d:07:09:
         40:6f:20:fa:71:c3:2b:87:4d:d5:d3:fe:70:44:56:e1:37:e9:
         78:3f:ae:4a:fb:3e:de:f9:10:c1:f8:6c:d3:94:0b:50:9d:fe:
         74:eb:00:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 22 07:30:06 2026 by rpki-client