This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3D6A90A8D5C511F094C5E8ABDAE4EC9C.roa
File:                     3D6A90A8D5C511F094C5E8ABDAE4EC9C.roa (raw, json)
Hash identifier:          sJnNHPus5Y4c3YMVNYlz/CHf4/hjtHv6JE/jzOFQzjs=
Subject key identifier:   6F:1E:D1:3A:4A:04:2A:A6:34:6E:B3:55:DD:CC:DE:5A:64:89:22:B1
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0A46
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3D6A90A8D5C511F094C5E8ABDAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 12:39:17 +0000
ROA not before:           Wed 10 Dec 2025 12:39:12 +0000
ROA not after:            Mon 31 Dec 2035 12:39:12 +0000
asID:                     834
IP address blocks:        165.49.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 17 Dec 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2630 (0xa46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Dec 10 12:39:12 2025 GMT
            Not After : Dec 31 12:39:12 2035 GMT
        Subject: CN=693969f5-5d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:18:80:37:a9:8c:f7:f5:42:b0:76:9b:9a:
                    d4:a5:a4:93:43:65:77:05:e3:03:21:bd:1a:b1:d3:
                    37:ba:a2:32:6d:a5:15:8f:ca:1b:6c:50:bb:77:90:
                    ee:3c:60:88:b4:f7:90:c3:6f:82:99:77:d5:92:f8:
                    16:fb:c2:4a:f8:e6:4c:5e:1f:85:7b:ee:30:ae:cb:
                    53:91:e5:17:5b:ec:1b:b6:28:1f:fc:9f:20:21:61:
                    a1:e3:04:b6:8f:aa:7f:e1:2a:34:db:16:c7:07:43:
                    60:16:f7:b9:82:84:c2:ec:36:1f:63:44:76:9e:63:
                    d3:87:44:71:8a:dd:23:2c:f8:e5:86:dc:38:3f:c4:
                    5a:1f:f3:ac:0f:aa:17:12:8e:b8:ce:df:58:d3:aa:
                    af:1b:47:62:0a:17:e6:73:ad:26:14:59:68:48:f0:
                    b8:f4:e9:5e:ce:8b:84:77:b5:7b:8a:83:77:1b:82:
                    b3:e7:c9:55:8b:bd:86:a7:8f:93:df:29:59:cd:c5:
                    36:f2:d7:be:1e:ec:8b:e5:49:54:05:de:e9:81:8c:
                    e0:f8:cf:79:36:3b:80:d7:ec:cd:20:18:2d:27:2f:
                    1a:b1:17:f6:78:49:1f:4d:32:47:7a:f0:09:ce:64:
                    42:6e:0f:94:80:a1:e6:76:44:10:29:ca:2a:34:f8:
                    7a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1E:D1:3A:4A:04:2A:A6:34:6E:B3:55:DD:CC:DE:5A:64:89:22:B1
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3D6A90A8D5C511F094C5E8ABDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:55:4a:f7:82:77:dc:d2:0b:03:ac:3a:67:e6:8f:a8:dc:c5:
         76:b6:3f:6f:ae:56:12:17:71:b7:fa:04:91:19:67:6d:74:35:
         04:b9:fa:06:af:cb:18:b5:84:80:c7:02:3c:48:bc:81:37:02:
         02:64:43:68:4b:47:25:6d:03:7a:31:61:05:5a:ba:3e:5e:71:
         f7:f5:b7:f3:fd:55:ee:a5:ad:ad:06:75:f8:ad:72:af:de:b7:
         43:c0:b6:c7:8f:ef:d8:6b:92:bc:07:c4:ea:c7:21:90:e6:ed:
         56:64:72:56:5a:cd:c2:bb:10:94:11:09:c4:14:4d:c2:64:73:
         a6:e8:eb:5c:00:59:63:4e:c6:16:e8:77:82:19:91:e2:91:7b:
         ad:a3:08:f0:bd:50:ab:36:c6:8d:d8:a1:1e:7e:2e:12:72:a3:
         f1:af:e6:2a:d0:10:e7:84:21:26:c0:7d:38:6c:2a:ec:a6:ce:
         5f:ac:83:4d:fe:3c:05:e0:fe:69:a7:a2:20:a7:e1:60:5c:52:
         45:d6:1e:06:b4:65:58:a1:d9:c0:e3:fc:44:a6:d8:98:95:a5:
         f4:22:e8:6e:fd:9a:91:81:10:c1:68:9d:ed:7a:14:fb:5c:2f:
         c7:e8:34:2f:ae:38:ed:32:97:a6:7e:93:b0:5e:8b:93:44:69:
         69:ec:17:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 23:27:03 2025 by rpki-client