This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C8511D52067D11F19DDD4AF4DAE4EC9C.roa
File:                     C8511D52067D11F19DDD4AF4DAE4EC9C.roa (raw, json)
Hash identifier:          1N79oh9lR6yHwdjmHFuCKgJ4MaVPJEPm7I456oN9QQw=
Subject key identifier:   2A:8F:75:0D:3C:C5:E5:A6:F1:C2:F5:90:71:66:B1:9A:5F:83:A7:F4
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0ADF
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C8511D52067D11F19DDD4AF4DAE4EC9C.roa
Signing time:             Tue 10 Feb 2026 12:41:13 +0000
ROA not before:           Tue 10 Feb 2026 12:41:08 +0000
ROA not after:            Wed 31 Dec 2036 12:41:08 +0000
asID:                     834
IP address blocks:        165.49.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Feb 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2783 (0xadf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Feb 10 12:41:08 2026 GMT
            Not After : Dec 31 12:41:08 2036 GMT
        Subject: CN=698b2769-ba1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:84:db:2c:64:ec:d5:b2:f1:11:15:85:cb:
                    9d:56:88:ea:9c:87:ba:05:28:43:8d:87:06:61:52:
                    ce:c4:13:66:ea:b7:69:41:f9:56:1a:73:ca:7f:3e:
                    e9:37:b1:8c:90:e6:22:c6:95:9d:4a:ef:c5:6b:69:
                    83:89:34:0c:14:f1:1f:56:c4:32:7f:f9:45:8a:8a:
                    f8:43:33:fc:67:b7:1c:f1:34:cb:67:09:e6:7d:ce:
                    e7:b9:e0:22:4f:c9:73:23:44:33:98:58:c3:78:e6:
                    ac:6e:a3:3f:2f:f4:88:41:16:1e:f9:16:8e:b2:9d:
                    33:5f:6a:ed:89:d7:d2:37:1c:d3:4e:4b:13:3d:90:
                    5c:74:82:51:60:22:d7:fc:2b:ee:61:9e:20:3a:32:
                    d3:6f:69:e0:40:79:2b:46:2f:c8:79:d0:f3:d7:92:
                    52:f8:a1:d0:36:41:e8:23:4b:69:e1:75:ba:c0:35:
                    3c:eb:37:b4:d4:57:b7:a1:ea:8d:d9:71:4b:64:3e:
                    9b:99:1c:e0:e6:b6:78:a0:00:cb:48:c8:d5:00:af:
                    34:9d:fb:9e:5c:3b:44:b0:27:cc:83:c0:7d:53:93:
                    25:05:f3:54:6e:bf:21:63:cf:8b:31:c7:4a:78:e1:
                    bc:7d:f1:b9:39:4f:cd:d8:72:42:66:14:48:13:86:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8F:75:0D:3C:C5:E5:A6:F1:C2:F5:90:71:66:B1:9A:5F:83:A7:F4
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C8511D52067D11F19DDD4AF4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:81:15:8c:8c:73:52:05:5a:be:00:5c:99:8f:17:4f:67:78:
         e8:dd:bc:0b:8d:0e:c2:5a:a3:65:78:33:ff:20:e7:1c:79:f4:
         95:c5:0c:28:47:30:a6:df:38:c9:80:c6:41:6c:54:3f:5c:4f:
         28:b1:79:4b:72:d6:44:a4:1e:72:45:14:ea:85:f9:e8:cb:8a:
         0f:b7:60:5b:a9:d3:81:44:09:57:48:50:85:33:1d:8e:63:c0:
         75:4e:83:4a:3a:7c:0b:1a:eb:08:e5:ee:c5:29:1b:bf:86:36:
         bb:02:e5:e0:67:20:9c:b1:a2:b3:42:a7:9f:6b:25:22:20:57:
         31:ab:06:59:6a:13:c9:9d:6c:80:2a:65:01:4a:bb:68:1a:22:
         f3:c9:be:c6:84:01:4f:8c:a2:ca:4c:db:cb:50:fc:88:c4:39:
         03:bb:e1:0d:a5:c6:9d:5a:17:da:82:c8:e0:fa:71:ec:b0:e6:
         66:8f:0a:86:9a:68:7d:da:e5:a1:c2:d5:b4:6d:de:ea:94:cc:
         ba:1a:db:6b:a5:31:66:0e:8a:5d:51:42:2d:b6:2f:5e:13:4d:
         a7:49:9d:8a:5e:ca:d4:c7:ae:1a:3e:28:22:8e:5f:05:af:f4:
         21:36:5a:f4:60:bf:3a:70:6d:13:b0:b3:33:44:46:d3:cd:f3:
         c7:92:af:8a
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCt8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjAyMTAxMjQxMDhaFw0zNjEyMzExMjQxMDhaMBgxFjAU
BgNVBAMTDTY5OGIyNzY5LWJhMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDC74TbLGTs1bLxERWFy51WiOqch7oFKEONhwZhUs7EE2bqt2lB+VYac8p/
Puk3sYyQ5iLGlZ1K78VraYOJNAwU8R9WxDJ/+UWKivhDM/xntxzxNMtnCeZ9zue5
4CJPyXMjRDOYWMN45qxuoz8v9IhBFh75Fo6ynTNfau2J19I3HNNOSxM9kFx0glFg
Itf8K+5hniA6MtNvaeBAeStGL8h50PPXklL4odA2QegjS2nhdbrANTzrN7TUV7eh
6o3ZcUtkPpuZHODmtnigAMtIyNUArzSd+55cO0SwJ8yDwH1TkyUF81RuvyFjz4sx
x0p44bx98bk5T83YckJmFEgThrZHAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUKo91
DTzF5abxwvWQcWaxml+Dp/QwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0M4NTExRDUyMDY3RDExRjE5RERENEFGNERBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMewwDQYJKoZIhvcNAQELBQAD
ggEBAIyBFYyMc1IFWr4AXJmPF09neOjdvAuNDsJao2V4M/8g5xx59JXFDChHMKbf
OMmAxkFsVD9cTyixeUty1kSkHnJFFOqF+ejLig+3YFup04FECVdIUIUzHY5jwHVO
g0o6fAsa6wjl7sUpG7+GNrsC5eBnIJyxorNCp59rJSIgVzGrBllqE8mdbIAqZQFK
u2gaIvPJvsaEAU+MospM28tQ/IjEOQO74Q2lxp1aF9qCyOD6ceyw5maPCoaaaH3a
5aHC1bRt3uqUzLoa22ulMWYOil1RQi22L14TTadJnYpeytTHrho+KCKOXwWv9CE2
WvRgvzpwbROwszNERtPN88eSr4o=
-----END CERTIFICATE-----
Generated at Sat Feb 14 17:25:18 2026 by rpki-client