This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7ADC96F6C51811F0AB585E83DAE4EC9C.roa
File:                     7ADC96F6C51811F0AB585E83DAE4EC9C.roa (raw, json)
Hash identifier:          u58N6VO32bNxdmiNaJU28ivFRjF3uKrIDlqxN5A9wlo=
Subject key identifier:   04:A3:37:1F:AC:37:FE:64:44:F4:D5:03:6D:AB:21:08:25:5A:C7:48
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0A08
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7ADC96F6C51811F0AB585E83DAE4EC9C.roa
Signing time:             Wed 19 Nov 2025 07:22:18 +0000
ROA not before:           Wed 19 Nov 2025 07:22:12 +0000
ROA not after:            Mon 31 Dec 2035 07:22:12 +0000
asID:                     25198
IP address blocks:        165.49.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 07 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2568 (0xa08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Nov 19 07:22:12 2025 GMT
            Not After : Dec 31 07:22:12 2035 GMT
        Subject: CN=691d702a-32de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dd:8f:23:62:80:cb:19:11:e3:cc:fd:f3:56:
                    08:43:78:05:57:84:7a:9e:39:59:60:d8:b3:8b:99:
                    12:9b:92:5c:78:c8:45:cb:56:3c:44:c2:f1:d2:75:
                    be:87:cf:1e:71:2c:24:c2:19:46:cc:b5:20:1d:60:
                    6b:d1:47:26:b8:07:8a:cf:73:e9:16:49:12:72:5c:
                    4d:99:7f:55:11:c9:fe:a7:ac:14:1e:4e:da:4d:8c:
                    f5:0c:52:d5:31:4e:d0:c9:81:05:45:68:c1:ac:27:
                    98:f3:fe:22:95:f8:cc:16:d6:af:5f:2b:67:8a:b1:
                    75:95:66:86:35:d7:13:c1:68:c5:ef:2f:c0:66:d9:
                    12:7c:bb:3d:bf:9b:08:38:2b:0e:ef:4e:33:80:c0:
                    ee:9b:ea:a0:a1:f9:85:76:9e:6c:08:fa:3e:8a:56:
                    f8:e0:27:0a:ce:c2:d0:14:ba:a6:de:6d:8c:01:53:
                    16:27:d5:38:8d:d7:72:45:95:2a:df:da:b1:6e:d9:
                    12:fc:97:87:f0:42:a7:88:88:4f:af:c2:b2:9d:4f:
                    74:8d:fb:c4:45:2f:8f:16:85:51:27:c6:7a:27:8f:
                    36:8b:75:ef:d9:a7:84:10:a3:41:c7:e0:4b:56:50:
                    c3:8e:ff:35:3f:42:89:89:8f:cd:da:53:ea:3e:bc:
                    4a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A3:37:1F:AC:37:FE:64:44:F4:D5:03:6D:AB:21:08:25:5A:C7:48
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7ADC96F6C51811F0AB585E83DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:65:86:65:83:2d:9d:61:b7:60:75:ac:32:65:67:58:2f:aa:
         35:76:62:ca:e5:ce:1b:cf:63:6a:b8:87:69:19:d0:8c:2d:50:
         7b:03:e4:02:bd:0d:ac:5a:20:b8:33:7b:92:86:10:0f:b6:8e:
         10:70:fe:e5:cf:e5:66:db:30:e5:2a:90:d6:43:55:cf:30:3a:
         f8:6a:e8:21:ff:47:76:28:19:35:95:cd:3b:90:8b:e1:19:69:
         bf:7c:c4:6e:a7:f1:ae:07:14:ac:b7:95:4f:02:5d:40:2c:0b:
         65:21:a4:2d:5f:9a:38:52:47:d0:a0:47:4e:3d:39:35:0e:13:
         90:3a:10:c1:8c:15:8e:80:c3:53:9e:12:a9:30:22:11:ed:e9:
         ea:28:c8:49:16:67:ad:bc:6f:05:58:ed:bb:17:c5:6b:61:ef:
         9e:3e:c3:48:d2:fc:a6:81:3f:b2:3f:a5:d9:8c:cf:8f:3e:71:
         ae:e6:9b:d3:6b:91:cd:5c:70:3b:5b:05:a6:28:b6:b8:6d:ea:
         16:d3:73:2d:7d:96:51:bb:f5:23:57:43:2c:a6:32:7f:d1:ca:
         c3:b6:26:85:3c:48:13:b8:f8:d4:a7:c5:3d:a8:54:2b:a5:ad:
         dc:ad:a3:bd:9f:30:61:74:29:19:7a:5e:58:ab:97:82:ff:ec:
         be:3a:f7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 09:28:45 2025 by rpki-client