This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/B89AAB64058111F1972D80EDDAE4EC9C.roa
File:                     B89AAB64058111F1972D80EDDAE4EC9C.roa (raw, json)
Hash identifier:          Wb1UA5bhzuCB4MSE13Y3F+3pfpA34GeOuB2RQRuB+1c=
Subject key identifier:   4E:40:70:AC:44:DF:E7:80:D0:E5:E3:A6:AE:07:79:0A:AE:20:12:58
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0AD7
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/B89AAB64058111F1972D80EDDAE4EC9C.roa
Signing time:             Mon 09 Feb 2026 06:36:54 +0000
ROA not before:           Mon 09 Feb 2026 06:36:48 +0000
ROA not after:            Wed 31 Dec 2036 06:36:48 +0000
asID:                     834
IP address blocks:        165.49.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Feb 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2775 (0xad7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Feb  9 06:36:48 2026 GMT
            Not After : Dec 31 06:36:48 2036 GMT
        Subject: CN=69898085-757f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:70:d6:66:ba:e2:a8:2d:ed:c2:9a:e1:74:17:
                    73:de:b2:0a:3a:5c:c6:e8:d0:5b:0b:4a:50:17:0b:
                    8e:03:5e:5d:b6:a2:b5:2d:d7:96:15:79:6d:6a:b9:
                    d5:8e:0b:6a:52:88:25:05:71:34:5a:29:06:9e:61:
                    e0:0c:5e:0b:05:66:04:eb:6e:2f:29:d6:e4:b3:4d:
                    c3:9d:f7:89:b7:99:a6:a8:a2:c1:7a:12:c3:4e:cb:
                    af:4a:8f:47:1f:e3:5f:0e:cd:04:4f:3c:a6:a2:92:
                    9b:32:a3:fd:8f:43:ed:99:f9:2d:26:01:9e:28:ca:
                    cc:df:94:19:35:c6:55:c4:9e:31:53:4f:c9:57:78:
                    10:57:d2:89:6e:8d:6a:27:0b:b9:fd:56:46:c1:11:
                    fb:aa:8f:d5:7f:73:cd:08:9f:af:38:9c:48:f3:3c:
                    cf:5a:ce:44:14:64:c6:ad:a2:b1:dc:d3:fd:74:e6:
                    3f:e1:3d:b5:9e:64:2c:da:05:e2:cc:47:6b:02:f5:
                    ea:08:53:45:2d:3e:a4:fd:c4:77:ea:19:ab:05:00:
                    1d:28:07:d4:41:cf:bb:6a:c4:19:06:59:d4:a1:2d:
                    d8:c1:71:1f:8f:9b:f7:0d:49:da:7e:d1:44:81:f6:
                    fc:02:0e:fc:ce:f3:d2:fd:39:36:f5:67:95:1a:36:
                    d6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:40:70:AC:44:DF:E7:80:D0:E5:E3:A6:AE:07:79:0A:AE:20:12:58
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/B89AAB64058111F1972D80EDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:9e:80:c4:8f:48:5a:6b:17:2e:81:90:f1:e9:16:20:c8:c0:
         26:5d:c1:9e:21:11:0c:dd:a2:60:8e:3f:6c:cc:96:f6:90:4b:
         f0:62:21:b9:cf:e4:d3:b6:03:8c:eb:80:53:e5:c4:4e:17:90:
         85:a9:ef:9e:df:1f:34:2d:22:ba:00:0d:4f:b1:8c:a4:1b:2e:
         4b:fe:28:06:3b:ac:f3:2f:49:95:70:03:7f:1f:e7:a0:8f:69:
         a7:7a:96:d5:a8:6e:cd:61:a9:38:8a:05:9c:7f:34:cf:e2:0d:
         20:61:6d:18:98:e4:fc:7f:5a:8f:30:3e:2d:56:fc:53:25:6f:
         f2:b0:70:45:65:c5:b6:21:91:d8:ca:72:43:a5:5b:9b:99:4d:
         a0:37:dc:5e:25:a2:5f:2b:69:db:8e:d8:da:05:aa:00:9e:be:
         41:30:e0:19:65:b7:c5:6d:b7:7e:67:b8:9b:dd:ad:ff:06:c7:
         a2:58:47:27:95:57:4d:27:e5:c7:47:13:08:2f:ea:c8:4e:c8:
         bc:32:c5:19:cc:0d:b9:18:e8:36:87:b0:ef:2d:0e:4f:84:a8:
         fc:56:be:f7:b0:0b:c8:27:73:e8:63:5d:cc:da:47:be:39:cf:
         35:8e:56:2d:6a:89:7d:2b:90:76:f5:be:3a:cf:aa:c3:a1:f2:
         3e:2b:86:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 14 17:25:18 2026 by rpki-client