This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/4EAA5F90F57011F0950ED796DAE4EC9C.roa
File:                     4EAA5F90F57011F0950ED796DAE4EC9C.roa (raw, json)
Hash identifier:          VzPkPcdolEHq2gsf/5Ij2qQzOSXvrmLYuHk4lkTKaZI=
Subject key identifier:   89:97:9A:79:1F:29:A3:C8:00:9E:73:4E:FD:8C:6E:B4:4A:D7:AB:AF
Certificate issuer:       /CN=F3652210AR/serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
Certificate serial:       09
Authority key identifier: 71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/4EAA5F90F57011F0950ED796DAE4EC9C.roa
Signing time:             Mon 19 Jan 2026 19:51:56 +0000
ROA not before:           Mon 19 Jan 2026 19:51:51 +0000
ROA not after:            Thu 31 Jan 2036 19:51:51 +0000
asID:                     37049
IP address blocks:        165.16.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.mft
                          rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652210AR, serialNumber=71BFC00D521E60C90A0026883468C9C1B5380181
        Validity
            Not Before: Jan 19 19:51:51 2026 GMT
            Not After : Jan 31 19:51:51 2036 GMT
        Subject: CN=696e8b5c-329a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:46:3a:6b:bf:32:05:ed:ec:0d:fc:7d:3d:70:
                    7c:7c:32:01:ef:96:38:99:53:bb:42:4c:21:22:8c:
                    c0:4f:37:2f:dd:9d:81:8b:cc:4e:50:9a:4f:43:f7:
                    9b:00:5d:c6:68:6c:fd:f5:39:99:6a:42:d1:b6:49:
                    93:7d:16:4c:07:35:e1:08:3e:04:51:18:e9:7e:2f:
                    8c:13:89:00:e3:00:99:88:03:da:c5:0d:e6:cc:31:
                    47:f4:97:22:96:fc:90:17:e9:21:e5:ab:1a:b0:58:
                    1b:6a:39:75:11:59:f4:2c:d4:3a:4b:85:48:83:68:
                    a8:31:e2:38:cd:bf:68:db:ec:a0:c1:88:9e:ce:38:
                    92:16:be:66:55:89:5d:53:19:c6:a4:34:25:63:19:
                    41:d0:9a:0d:cd:a2:03:bd:65:c7:6c:eb:f5:18:fb:
                    de:26:57:59:80:db:bc:ae:b7:f0:4c:e1:02:6e:84:
                    9b:6c:a5:9f:b9:d1:61:2f:ca:2c:9c:7e:8c:13:48:
                    18:1e:b7:97:17:c1:03:85:92:91:e4:f5:90:bf:64:
                    21:52:2c:24:b9:19:8b:4d:3b:77:0e:25:b7:b4:59:
                    ef:3c:39:e0:05:86:24:0e:6d:b8:8d:36:5c:e8:2d:
                    bf:a3:43:6b:ae:e9:70:6f:29:6e:46:a2:a3:86:2d:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:97:9A:79:1F:29:A3:C8:00:9E:73:4E:FD:8C:6E:B4:4A:D7:AB:AF
            X509v3 Authority Key Identifier:
                keyid:71:BF:C0:0D:52:1E:60:C9:0A:00:26:88:34:68:C9:C1:B5:38:01:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/cb_ADVIeYMkKACaINGjJwbU4AYE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cb_ADVIeYMkKACaINGjJwbU4AYE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652210/ECDF3F08F53B11F081F501DBDAE4EC9C/4EAA5F90F57011F0950ED796DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.16.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3c:d2:12:b1:05:67:27:7a:18:c0:21:91:9a:69:a8:f9:f0:51:
         47:9d:9d:75:9b:93:15:ae:1d:14:7c:4c:b6:aa:7a:e7:26:34:
         e6:2d:00:87:60:54:aa:0a:30:2c:3e:e0:d3:27:ec:f0:c3:27:
         c6:75:3a:f9:90:2f:d7:4f:9a:d4:6e:67:0d:7a:8a:b6:f5:6e:
         de:82:d2:48:14:34:b3:2f:7c:c3:98:57:1e:bb:81:07:45:6a:
         00:44:2c:92:09:f1:44:c9:02:6e:c0:10:86:e6:ba:92:b3:2a:
         90:07:c8:e8:0d:9c:e4:55:2b:9b:f7:ce:4d:ee:44:35:7b:fa:
         89:54:97:38:46:a0:24:23:60:bc:20:b5:0d:7a:b4:25:8d:f1:
         97:0c:bf:28:38:c5:8c:76:4d:05:01:d2:da:1b:2f:95:21:2d:
         de:84:e5:65:cb:79:38:32:d4:5a:66:ad:ae:b4:ce:2f:d0:29:
         10:d3:f3:43:b5:00:50:f4:ff:a2:c0:a9:6c:19:be:31:e5:92:
         45:49:84:26:c6:e7:cd:01:de:e0:e4:1c:3e:60:2b:0c:cf:51:
         0a:ed:8d:fa:6d:9b:48:70:9b:d2:ac:db:82:be:01:ef:02:01:
         00:ea:f0:f5:15:e0:5e:d3:94:ff:9a:c0:05:e5:fe:46:f3:56:
         b8:bf:64:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:12:59 2026 by rpki-client