This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/72760D10F17511F09904C9C6DAE4EC9C.roa
File:                     72760D10F17511F09904C9C6DAE4EC9C.roa (raw, json)
Hash identifier:          acbo2vebGVWbCWv/WkjZewtGLvFuUk8cyECiScXVZQQ=
Subject key identifier:   51:B6:6B:54:EB:F9:B1:59:5C:27:78:EE:46:6C:34:88:28:4F:D1:D1
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0AA0
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/72760D10F17511F09904C9C6DAE4EC9C.roa
Signing time:             Wed 14 Jan 2026 18:18:39 +0000
ROA not before:           Wed 14 Jan 2026 18:18:34 +0000
ROA not after:            Wed 31 Dec 2036 18:18:34 +0000
asID:                     9304
IP address blocks:        165.49.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Jan 2026 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2720 (0xaa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Jan 14 18:18:34 2026 GMT
            Not After : Dec 31 18:18:34 2036 GMT
        Subject: CN=6967ddfe-f23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:63:18:80:ae:e1:53:db:b1:47:5f:d2:9f:67:
                    d0:0d:f7:2e:8d:c5:c1:b9:2a:1d:7f:1e:75:20:30:
                    e0:56:8f:8f:8d:cf:6a:3e:3d:f4:d4:fd:c3:14:9e:
                    0c:36:f1:a6:32:4b:83:e4:77:2e:f2:7d:e7:e2:c0:
                    6d:fd:58:e2:0f:76:3e:ab:01:4f:d3:9d:6d:bd:8d:
                    94:8d:36:9e:b2:00:60:bd:02:37:7e:06:27:d4:0b:
                    a6:e4:9d:a4:53:93:50:2f:ea:a6:ff:c7:26:41:83:
                    b9:06:69:4e:e0:b4:d2:68:ff:59:28:18:2b:10:4e:
                    06:32:67:d5:3c:0d:5d:1d:c0:f1:58:55:03:d3:29:
                    6c:2f:b4:91:79:38:df:2f:19:ab:8d:4b:98:24:66:
                    f9:4b:c6:0a:1f:17:ec:25:d1:1d:b7:03:2f:2a:47:
                    2c:ce:1d:73:99:9c:63:13:08:bd:3d:07:05:66:58:
                    d9:2a:84:81:36:c8:8c:10:36:4d:ed:9d:b2:60:cd:
                    55:42:42:ce:6b:9c:9c:a1:d6:03:83:28:71:3c:e8:
                    fc:13:2b:29:6b:63:47:62:71:27:b5:89:4d:bc:d0:
                    5a:2b:a4:30:03:50:3b:35:dd:00:53:4c:af:82:fc:
                    16:e5:ac:9a:c6:55:cd:68:92:7b:c8:b2:c8:12:98:
                    ea:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B6:6B:54:EB:F9:B1:59:5C:27:78:EE:46:6C:34:88:28:4F:D1:D1
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/72760D10F17511F09904C9C6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:c0:8b:8a:c9:4c:92:1f:cb:a7:1a:8d:ca:39:04:1c:db:84:
         52:5b:ac:0c:8a:7f:5d:47:28:62:87:14:69:8f:83:03:10:e3:
         b0:74:d4:68:94:a2:9a:78:1a:d1:33:d3:ef:8f:fe:4d:03:45:
         cc:b2:d1:b2:20:4f:58:c6:de:27:6a:12:16:fb:f9:c4:e0:d4:
         3d:ea:98:b0:e9:7b:aa:a5:10:62:e2:4b:8e:41:8d:7e:f7:3e:
         fd:5d:bc:26:f2:d7:48:95:97:da:41:61:3c:e8:fe:98:39:5d:
         d4:b2:cd:29:e7:f1:90:9e:69:d5:7e:65:31:8b:d6:c0:cb:28:
         a9:99:38:b4:9d:02:61:8a:9f:d3:dd:a9:d6:d6:49:13:2d:c7:
         5a:cf:bb:1f:80:a4:da:7b:c1:bb:0d:29:b4:78:49:f8:c9:d8:
         8f:d7:8d:c4:19:2a:fd:b4:4e:19:2c:02:07:5e:03:83:98:65:
         09:11:3e:ca:ad:53:40:cc:dd:3b:50:48:d8:10:84:18:70:cd:
         f9:33:ab:47:0c:74:07:2b:df:cb:1e:f1:39:30:06:41:6d:9d:
         5d:a4:e0:a0:32:c9:7f:97:9d:47:be:d7:93:1c:66:69:4e:96:
         43:29:4d:62:01:ed:02:5b:da:f7:d5:83:9f:60:86:36:c4:90:
         9e:3f:c8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:54:48 2026 by rpki-client