This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/4389E468FC1A11F0916903A2DAE4EC9C.roa
File:                     4389E468FC1A11F0916903A2DAE4EC9C.roa (raw, json)
Hash identifier:          2tXNfh+6eRJ9qPoYXsrsZcsCCMCemsxCWE1mzMZJNrM=
Subject key identifier:   E0:2A:2F:17:64:BE:D9:ED:D6:D3:6C:F0:76:4C:67:4C:35:3A:49:6A
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0ABA
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/4389E468FC1A11F0916903A2DAE4EC9C.roa
Signing time:             Wed 28 Jan 2026 07:23:38 +0000
ROA not before:           Wed 28 Jan 2026 07:23:32 +0000
ROA not after:            Wed 31 Dec 2036 07:23:32 +0000
asID:                     834
IP address blocks:        165.49.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Feb 2026 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2746 (0xaba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Jan 28 07:23:32 2026 GMT
            Not After : Dec 31 07:23:32 2036 GMT
        Subject: CN=6979b97a-52ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:66:7e:ce:01:bb:2b:c5:f0:99:5c:d8:99:
                    8e:c6:06:e7:1c:d4:c8:dd:d5:8f:fa:d6:41:0e:4a:
                    ae:e7:ff:0f:29:b8:d2:84:dd:48:5d:32:38:ce:28:
                    7a:f9:9e:0c:bb:96:8e:69:2f:b8:1e:26:d7:53:61:
                    d1:60:7c:e3:ab:3d:c6:ad:b5:0a:22:50:3f:05:6f:
                    95:48:2c:23:33:11:54:68:c0:16:1d:0f:cc:86:9e:
                    d4:6a:de:d9:0d:fb:43:ae:92:ca:2e:7a:7f:ed:92:
                    ce:ba:61:f2:ac:03:10:df:1d:10:db:6b:e7:0b:c4:
                    21:c6:32:61:c1:f0:92:c0:0d:4d:bb:af:ef:2b:72:
                    1c:a7:04:e7:df:ad:eb:60:e0:9a:06:ab:18:4b:51:
                    66:3e:0e:e9:dc:fe:fb:fe:5e:e9:92:9e:5a:2d:31:
                    c7:e2:ad:d6:da:4e:81:0c:3d:6f:96:89:b5:62:46:
                    98:1b:01:72:74:ed:53:84:bf:96:5e:b8:1d:2a:50:
                    8e:ba:0c:5b:a2:0c:f1:82:65:15:2e:14:38:fd:fe:
                    7c:69:c3:2c:ba:c4:66:d9:cd:8d:e2:e4:f5:af:bc:
                    4a:59:b0:20:5a:81:36:86:55:ed:0f:d4:e6:a5:89:
                    1a:bb:c8:ac:9d:6a:7d:ae:95:c2:2c:aa:e0:19:de:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2A:2F:17:64:BE:D9:ED:D6:D3:6C:F0:76:4C:67:4C:35:3A:49:6A
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/4389E468FC1A11F0916903A2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:42:c6:b2:23:30:e5:2b:a7:0f:36:92:60:75:35:c6:79:53:
         0d:3d:a7:89:f8:9b:09:9a:15:eb:5f:9f:d2:8a:8a:90:d5:23:
         a5:0f:45:1a:90:09:bf:0f:79:c6:4d:30:c9:65:ce:c6:04:09:
         35:a5:60:60:73:9d:25:37:26:da:af:6f:3b:00:7e:68:4c:99:
         95:c0:f8:bd:99:9f:45:2c:1d:74:93:3f:f3:a7:29:b0:3c:00:
         3d:b7:c5:15:72:a1:3d:f9:91:0c:f5:c9:90:97:03:83:cc:3c:
         f5:84:ea:92:16:b2:2c:a1:1e:fd:37:e4:51:2a:86:94:df:c5:
         84:63:f2:a7:9e:51:a6:bb:f9:93:f6:27:90:83:fd:a0:9f:38:
         2e:e6:97:0f:83:b4:a0:20:30:e1:12:67:b2:15:33:0b:51:05:
         83:4c:dc:c8:5b:78:98:0f:14:6e:a2:90:25:26:b1:f2:7e:c4:
         d0:19:99:24:d9:41:07:cb:3c:bc:37:6d:8e:92:43:69:1c:71:
         46:82:55:50:06:32:d3:c9:0d:fd:79:f2:60:09:fc:5b:34:ca:
         49:dc:90:6a:9a:c6:df:84:1f:a3:99:bf:b8:71:bf:bb:a6:0a:
         ee:b1:70:6e:65:8b:10:fe:54:2c:3a:12:30:a8:a0:60:1d:56:
         03:e9:a6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 03:30:51 2026 by rpki-client