This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/C7A1013EEB4711F0B5BAA0BADAE4EC9C.roa
File:                     C7A1013EEB4711F0B5BAA0BADAE4EC9C.roa (raw, json)
Hash identifier:          48f5gP3VbZLP65vW4gGKLtERnOxtpC1Gss5JvOP+GJI=
Subject key identifier:   91:49:C8:D7:29:10:7D:9E:0D:4D:75:4F:3E:77:BC:65:20:82:8A:7E
Certificate issuer:       /CN=F36580B0AR/serialNumber=E8A285E7A9119CC130CA29F73579DB06824F83B5
Certificate serial:       0380
Authority key identifier: E8:A2:85:E7:A9:11:9C:C1:30:CA:29:F7:35:79:DB:06:82:4F:83:B5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/6KKF56kRnMEwyin3NXnbBoJPg7U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/C7A1013EEB4711F0B5BAA0BADAE4EC9C.roa
Signing time:             Tue 06 Jan 2026 21:36:38 +0000
ROA not before:           Tue 06 Jan 2026 21:36:33 +0000
ROA not after:            Sun 06 Jan 2036 21:36:33 +0000
asID:                     327992
IP address blocks:        169.239.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/6KKF56kRnMEwyin3NXnbBoJPg7U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/6KKF56kRnMEwyin3NXnbBoJPg7U.mft
                          rsync://rpki.afrinic.net/repository/arin/6KKF56kRnMEwyin3NXnbBoJPg7U.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896 (0x380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36580B0AR, serialNumber=E8A285E7A9119CC130CA29F73579DB06824F83B5
        Validity
            Not Before: Jan  6 21:36:33 2026 GMT
            Not After : Jan  6 21:36:33 2036 GMT
        Subject: CN=695d8065-8b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e0:bd:7c:18:6d:6e:93:7d:c8:94:3f:ac:f8:
                    42:62:2a:b7:dd:f3:03:3f:46:a2:89:44:cc:88:f4:
                    9a:50:b6:e6:29:db:d6:04:42:6a:b1:86:3c:c7:5c:
                    49:06:6b:ec:65:47:a1:e3:a1:be:24:6a:1d:54:dc:
                    43:0a:86:b4:48:f8:61:39:d7:9b:ba:8d:98:1e:1b:
                    45:e0:01:91:73:3e:38:94:32:a6:c6:32:4c:21:11:
                    42:17:c0:aa:08:49:98:91:d7:f5:20:2e:3d:78:39:
                    aa:c9:da:22:6e:af:6b:72:29:f1:0c:02:bf:87:10:
                    8c:d7:4d:23:5a:8d:2a:26:eb:06:bb:72:91:ec:43:
                    d9:61:5a:d0:8b:e7:c1:54:b4:c3:2b:f9:9d:ad:e3:
                    21:18:cf:0c:41:63:e3:9c:51:4a:9a:6d:7c:9d:63:
                    e0:6b:19:84:8f:82:5b:d5:4d:36:d0:a4:aa:88:ac:
                    5d:fb:6b:f1:5b:68:80:92:72:b9:18:37:a0:11:f6:
                    19:7e:9f:81:11:80:2b:c2:d9:b5:ee:53:52:29:78:
                    dc:7c:fd:64:88:71:ba:58:d9:5c:ae:07:6a:7e:0f:
                    05:55:0a:67:7d:05:f9:a6:a9:03:1e:95:12:d6:fd:
                    00:45:2d:4f:6e:50:19:3b:da:44:4d:3e:94:a7:b7:
                    b0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:49:C8:D7:29:10:7D:9E:0D:4D:75:4F:3E:77:BC:65:20:82:8A:7E
            X509v3 Authority Key Identifier:
                keyid:E8:A2:85:E7:A9:11:9C:C1:30:CA:29:F7:35:79:DB:06:82:4F:83:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/6KKF56kRnMEwyin3NXnbBoJPg7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/6KKF56kRnMEwyin3NXnbBoJPg7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/0AC199A441CE11EEBCA91D114AD9E6FC/C7A1013EEB4711F0B5BAA0BADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:0e:fc:03:c6:0a:95:71:cd:04:99:ca:6c:27:85:fa:d1:f8:
         e0:1d:26:f3:cc:39:b9:b6:82:19:68:5a:92:59:51:94:1b:8d:
         e7:66:63:61:64:62:d6:f8:a7:31:8c:c2:86:96:6c:3c:5d:d5:
         33:4f:eb:6b:95:03:4e:b1:c2:c4:ec:d0:16:a2:75:db:63:e4:
         77:af:cd:17:51:15:75:8c:7a:e2:2c:a0:3b:be:20:b3:17:27:
         df:d8:f6:3b:e4:3b:4b:4f:a7:e7:c0:1e:50:c6:12:5b:1d:ff:
         a5:cc:38:b0:fb:95:34:79:e4:8f:6e:b0:cd:60:2a:16:d6:63:
         34:1a:35:31:d5:e2:82:25:bd:e2:86:2a:b8:ea:21:02:1c:fc:
         b7:2a:81:cb:5a:91:f9:14:f5:49:a3:2c:0f:ec:2c:50:ee:e1:
         2e:5f:c2:47:83:27:58:16:53:80:3d:15:9b:22:93:16:a7:e1:
         a9:68:de:9c:92:7d:d2:7f:78:5f:29:45:63:82:9f:51:87:12:
         9d:d3:a1:de:dc:b2:d8:c0:12:b2:a9:81:c5:ea:04:20:48:f0:
         0e:9e:de:45:f0:11:48:f2:ac:9e:d6:6a:be:68:aa:c0:34:37:
         b7:ca:1f:63:21:22:b7:4e:d5:71:1a:b0:f1:3e:6b:54:4e:e0:
         e6:af:dd:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:01:54 2026 by rpki-client