This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FF8BA162D4BD11F091AD4EBDDAE4EC9C.roa
File:                     FF8BA162D4BD11F091AD4EBDDAE4EC9C.roa (raw, json)
Hash identifier:          XePCVsu8ZLG/RjHT6DZir9EJBWWIYEk6JFVhKgTRsLg=
Subject key identifier:   D7:4F:0B:02:E8:E8:CF:79:3F:02:CE:3B:EC:EA:BD:63:CB:C3:87:76
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0A41
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FF8BA162D4BD11F091AD4EBDDAE4EC9C.roa
Signing time:             Tue 09 Dec 2025 05:14:55 +0000
ROA not before:           Tue 09 Dec 2025 05:14:49 +0000
ROA not after:            Mon 31 Dec 2035 05:14:49 +0000
asID:                     834
IP address blocks:        165.49.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 17 Dec 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2625 (0xa41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Dec  9 05:14:49 2025 GMT
            Not After : Dec 31 05:14:49 2035 GMT
        Subject: CN=6937b04f-e2f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:56:6b:0b:a0:fa:f8:6f:77:07:06:d2:38:94:
                    32:69:d0:a5:3e:c4:01:48:54:d9:cf:80:1b:eb:13:
                    53:be:b9:2f:85:73:b2:8b:6f:5b:3b:d5:00:bf:df:
                    17:15:0e:55:4d:f6:69:00:26:f1:7d:6a:3c:de:fd:
                    35:e8:37:8d:d5:df:59:9b:4f:a1:22:48:99:5f:10:
                    2d:a0:a7:83:2b:df:75:5e:ae:19:94:a7:f7:94:ed:
                    ad:9f:84:e6:38:f6:eb:28:c5:a1:14:b1:e9:7d:0e:
                    82:65:b1:bc:6f:f8:9e:ed:67:7a:2f:bd:3f:71:ec:
                    c0:78:48:2a:6f:af:b5:81:27:e5:1b:26:45:55:94:
                    f0:4f:f7:7c:67:43:52:c7:80:e8:3c:f3:57:74:f7:
                    89:8a:f2:48:22:7f:c5:87:55:54:a9:83:a3:3f:10:
                    93:58:8b:0e:c0:e8:d2:5d:29:d5:69:0e:8c:78:d9:
                    ee:09:09:3e:62:a1:3c:e7:f2:4e:75:33:7a:18:5f:
                    d7:a5:fb:f3:fd:8b:64:69:9c:d6:9a:ff:4b:89:68:
                    ca:79:0b:55:43:55:97:c8:f4:c2:e9:b6:ed:5b:fe:
                    df:90:c8:60:55:b2:cb:dd:e0:50:9b:b4:dc:89:e8:
                    78:18:a4:80:6f:89:4f:87:6a:1f:e7:77:3b:f1:6a:
                    a7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:4F:0B:02:E8:E8:CF:79:3F:02:CE:3B:EC:EA:BD:63:CB:C3:87:76
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FF8BA162D4BD11F091AD4EBDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:6e:33:e3:fb:90:39:8a:e4:ff:62:98:4a:9c:ec:d2:ed:be:
         b0:97:93:0d:90:4a:9b:e2:64:79:96:5c:0b:34:8a:9a:45:69:
         da:dd:61:17:ba:a4:e4:44:3d:09:87:3f:c8:52:a3:36:c4:60:
         a0:99:12:7b:89:ef:8e:83:b6:b8:70:82:e0:aa:c6:f0:a5:37:
         bb:a5:6e:2f:63:90:32:2a:57:28:bf:8c:05:fe:02:81:cc:22:
         7a:bb:ca:fe:71:37:2d:1c:d2:50:de:34:d0:b4:d1:d2:71:7c:
         09:f5:b5:61:e2:a0:46:3f:57:9b:68:db:8a:98:b1:73:db:c7:
         23:ab:0b:59:14:44:b2:90:4a:f3:8c:33:46:23:17:f9:08:75:
         c2:22:de:ab:53:56:0d:28:1b:0b:27:7e:3d:8c:12:a0:16:83:
         de:3f:c9:be:84:bb:cb:ae:5f:fc:91:05:26:b1:68:b8:05:f1:
         62:98:b6:82:3d:90:22:f2:4c:55:1f:c7:aa:f2:d1:f8:f5:bd:
         d1:4a:40:9f:cb:ab:76:75:7c:a2:2c:28:3a:4a:7f:5a:fa:e1:
         ab:4d:fe:0e:8f:1f:60:ad:d7:73:8b:66:72:a7:2d:e1:63:32:
         12:7e:41:df:f4:27:2a:22:a6:84:a3:e2:1c:d0:43:e4:0c:53:
         40:ca:bd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 23:27:58 2025 by rpki-client