This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3F48FDC6F17511F087E3FBC4DAE4EC9C.roa
File:                     3F48FDC6F17511F087E3FBC4DAE4EC9C.roa (raw, json)
Hash identifier:          U2cDVHg0S6zsv2XKcgxz8vT4S8HMQ6gYYgyzgOcIzU4=
Subject key identifier:   B0:D1:4B:A3:31:9E:07:75:A3:78:A5:C1:1B:56:FE:36:19:EC:F4:46
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0A9E
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3F48FDC6F17511F087E3FBC4DAE4EC9C.roa
Signing time:             Wed 14 Jan 2026 18:17:13 +0000
ROA not before:           Wed 14 Jan 2026 18:17:08 +0000
ROA not after:            Wed 31 Dec 2036 18:17:08 +0000
asID:                     6079
IP address blocks:        165.49.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Jan 2026 01:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2718 (0xa9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Jan 14 18:17:08 2026 GMT
            Not After : Dec 31 18:17:08 2036 GMT
        Subject: CN=6967dda9-84b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:43:e7:db:0d:3d:b9:3a:ac:18:88:4a:13:74:
                    e9:72:f9:de:e8:31:db:af:b8:7c:41:2a:96:f0:5b:
                    6c:88:67:b7:f1:cf:b2:34:98:11:34:2a:e9:9c:71:
                    98:1f:50:7d:aa:dd:6b:4d:26:af:2d:8f:94:e1:ca:
                    e7:e5:0a:06:04:35:99:d2:9a:79:a9:82:e8:7a:e8:
                    3f:e8:53:c3:28:85:89:da:a5:9c:72:af:64:3e:c4:
                    61:63:99:6d:5d:f9:8c:02:cf:22:d6:43:4e:9d:dc:
                    3f:d3:9c:a2:b8:a7:a6:a4:82:2e:91:69:30:4c:ad:
                    42:80:63:d4:4a:a7:d9:b6:5a:ef:87:79:74:4e:ce:
                    37:12:16:9e:37:73:5d:d1:cc:0d:57:6c:e9:a4:64:
                    a8:ee:05:72:e2:f6:4d:ac:92:ed:d4:fd:03:21:24:
                    d0:09:09:c3:a9:c3:e0:5f:91:0c:5d:bd:16:f0:80:
                    17:2e:cf:26:1d:6d:10:5d:e2:b3:94:6e:35:01:a3:
                    f0:cd:76:bb:e1:06:09:20:cd:b3:57:e7:92:ee:6c:
                    5c:23:27:6a:af:c5:dc:b7:2f:ea:47:2a:27:4f:60:
                    d9:1d:d3:06:83:9a:e7:7f:d9:52:88:05:9a:42:4f:
                    6b:c4:e9:d6:7f:50:07:70:27:f4:71:42:4a:16:2d:
                    b7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:D1:4B:A3:31:9E:07:75:A3:78:A5:C1:1B:56:FE:36:19:EC:F4:46
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3F48FDC6F17511F087E3FBC4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:03:3d:f7:d4:95:0b:93:4a:ec:18:26:4b:5b:0e:36:a7:a8:
         be:82:c3:30:f3:8c:5e:d9:8e:81:6b:a1:88:64:12:08:e8:ef:
         a1:48:37:c0:d1:ab:21:14:18:0a:61:05:93:27:28:b5:1f:8a:
         13:4a:89:7d:f0:7d:96:bd:83:10:2b:e3:5e:43:43:84:79:70:
         f4:e2:9b:7c:13:99:97:63:32:24:cb:55:49:7a:42:2d:06:c6:
         e0:c3:53:43:88:88:76:fb:fc:91:94:62:13:0f:ac:7a:ef:39:
         4f:22:d7:55:61:6f:1c:4d:94:96:85:13:e7:d8:91:c0:ef:45:
         98:4a:b3:3d:e7:fd:a9:54:cc:51:9f:3a:56:8c:29:b6:8d:ca:
         3c:5d:da:a4:32:cf:c9:10:c3:76:e1:9c:f5:35:36:10:83:ad:
         60:e0:bd:07:ef:a6:3f:db:7b:9d:6f:ad:64:da:6c:74:98:2b:
         61:1e:e7:ea:50:1a:ed:04:4c:e9:e8:d3:55:fa:7e:40:90:9a:
         ce:5d:59:b4:75:54:cd:51:c2:2b:69:9a:56:1e:0a:57:d0:0c:
         68:3a:3c:57:21:04:b3:cc:c7:3c:41:bf:8b:b5:c7:c2:f1:cd:
         db:e7:7c:85:43:f6:ce:fb:e3:59:95:3d:45:28:08:29:b5:3f:
         1f:a5:bc:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 16:53:16 2026 by rpki-client