This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C8CB3FB2C15C11F088ECF6E8DAE4EC9C.roa
File:                     C8CB3FB2C15C11F088ECF6E8DAE4EC9C.roa (raw, json)
Hash identifier:          O5/a6dj4gr2AqUz3iI1J8Z1+jPCHARttHgnA8BGyJxM=
Subject key identifier:   CD:BA:8D:47:18:E5:48:C2:99:8A:54:C1:38:91:D2:7B:04:44:6C:A1
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       09F4
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C8CB3FB2C15C11F088ECF6E8DAE4EC9C.roa
Signing time:             Fri 14 Nov 2025 13:21:10 +0000
ROA not before:           Fri 14 Nov 2025 13:21:05 +0000
ROA not after:            Mon 31 Dec 2035 13:21:05 +0000
asID:                     11426
IP address blocks:        165.49.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2548 (0x9f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Nov 14 13:21:05 2025 GMT
            Not After : Dec 31 13:21:05 2035 GMT
        Subject: CN=69172cc6-95f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:25:f2:f0:a4:32:e1:d0:e4:10:b2:1a:93:2d:
                    e2:a9:5c:26:40:a8:6d:07:93:49:2a:1c:9f:9b:2d:
                    02:f4:e3:a7:4d:62:43:64:b0:5b:98:69:50:c9:61:
                    99:ca:f6:2e:d2:21:8a:ef:be:36:e6:2d:62:36:65:
                    6c:a5:df:3e:87:12:e0:0c:07:51:29:48:be:17:8b:
                    fe:a9:d1:c4:fe:89:8e:fd:b5:cb:0b:c4:71:d0:3a:
                    e6:68:ea:28:c8:c5:da:a7:fc:b1:d1:b3:d9:c5:67:
                    87:47:aa:f8:92:3b:40:c0:b1:3a:1b:26:2f:66:61:
                    e1:92:64:1f:5c:db:66:5c:c7:f9:4c:29:81:a2:75:
                    04:0b:d8:f5:5f:97:b8:1d:81:fd:2d:56:c6:cf:f1:
                    4b:85:9c:8a:23:1a:67:95:7b:e0:df:7c:81:ad:01:
                    d7:33:51:10:c2:98:5f:26:e5:30:26:13:26:8b:5d:
                    6e:a6:4e:20:54:c0:c1:98:ed:dd:54:40:d4:49:b5:
                    77:61:ee:51:6c:12:4f:44:97:de:83:43:2c:3a:cf:
                    1a:2b:0c:e4:6c:a7:bb:32:fa:b2:42:4a:c1:7d:3b:
                    03:5e:10:bb:8e:77:50:5d:6e:87:f2:cb:25:4e:45:
                    36:39:ef:b3:0a:da:d9:47:0f:88:48:28:47:21:d4:
                    34:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BA:8D:47:18:E5:48:C2:99:8A:54:C1:38:91:D2:7B:04:44:6C:A1
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C8CB3FB2C15C11F088ECF6E8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:2b:ec:74:33:26:20:79:eb:42:05:ab:af:29:a5:31:b6:48:
         03:d1:ef:4e:5c:0d:91:54:54:52:4b:2b:43:b4:f8:aa:f0:b0:
         f4:37:21:6a:61:49:09:bc:aa:6a:41:18:e7:d2:91:29:93:7c:
         f9:f0:0f:6e:d0:19:18:57:a3:79:7c:3c:3a:7d:1f:e1:66:f5:
         bd:f0:56:b7:10:a7:5e:6d:9a:05:b4:3e:7a:a3:32:78:e1:43:
         c5:93:a7:91:1e:0d:51:c2:56:7c:1b:79:ed:f3:96:b5:14:44:
         27:f2:73:dc:dc:26:26:24:86:78:16:bb:75:ea:d4:27:a3:fb:
         ac:71:ba:c4:49:7a:9b:9c:e0:bf:c9:54:11:f7:8f:1f:54:92:
         99:67:b4:e6:ce:69:d3:a7:1f:4d:12:de:48:73:97:e2:fa:50:
         58:3f:49:b0:0a:4d:15:8f:05:82:ad:1c:61:c5:a8:b7:d4:ec:
         e0:5e:f8:cb:75:02:76:78:4c:27:89:bd:07:02:9c:3b:86:dc:
         a0:b0:72:3c:c9:a9:01:f8:7e:0d:c5:95:df:fd:fe:16:a6:a3:
         0b:96:ad:26:c0:0c:c1:cc:d2:f1:96:2f:67:d9:03:ab:fd:d3:
         3e:27:a6:d6:24:85:d6:4e:5d:2f:33:7e:b6:b9:a0:16:8d:e6:
         0c:98:20:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:31:59 2025 by rpki-client