This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/04AA1FD6D5C511F0B5CB0BAADAE4EC9C.roa
File:                     04AA1FD6D5C511F0B5CB0BAADAE4EC9C.roa (raw, json)
Hash identifier:          lBJfkgvQmD4J1yPptQlpnPyfdWJqwc5bwLypx4UCIG4=
Subject key identifier:   C8:65:1B:F8:4B:BC:76:99:A7:00:3E:AB:15:E4:4A:85:1A:B9:88:CA
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0A44
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/04AA1FD6D5C511F0B5CB0BAADAE4EC9C.roa
Signing time:             Wed 10 Dec 2025 12:37:41 +0000
ROA not before:           Wed 10 Dec 2025 12:37:36 +0000
ROA not after:            Mon 31 Dec 2035 12:37:36 +0000
asID:                     834
IP address blocks:        165.49.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 17 Dec 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2628 (0xa44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Dec 10 12:37:36 2025 GMT
            Not After : Dec 31 12:37:36 2035 GMT
        Subject: CN=69396995-9c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:15:53:74:76:df:cb:12:a0:03:a0:b9:b0:e6:
                    41:b7:16:48:38:82:25:cc:97:1c:d0:b6:2e:00:88:
                    a8:9f:4e:ba:09:f1:98:19:b8:a8:86:8c:6f:7c:02:
                    75:ec:bb:31:88:bb:9d:d3:17:e4:d0:87:7d:f5:b7:
                    ac:e6:47:95:ae:4c:a6:59:90:0a:38:0f:79:22:80:
                    eb:16:5c:4b:b5:7b:b7:2a:7a:12:6c:4d:fa:b1:ff:
                    ab:ef:bd:9c:45:f5:f4:92:98:d9:1d:5a:f0:e8:51:
                    70:64:dd:96:39:49:5c:4a:14:af:f7:db:1a:90:df:
                    71:61:a8:1c:f4:68:2a:da:52:48:e4:ac:c2:8a:0a:
                    8d:06:73:a8:de:42:20:2d:1d:86:3f:a7:79:de:37:
                    2e:d7:9d:7b:8f:6b:84:99:02:6e:f4:60:5d:52:d5:
                    ea:57:be:00:d2:19:f4:e8:dd:62:9e:5d:c5:d7:14:
                    76:76:23:f1:03:8f:3f:1a:9f:eb:11:a3:75:f1:e2:
                    de:a0:d6:d0:12:4f:c1:85:56:a4:5d:fe:c7:3b:d4:
                    16:9b:49:dc:97:db:a9:4b:45:7d:c9:58:1c:e7:a4:
                    91:35:1a:40:de:e4:c3:d5:d5:c1:d1:e3:df:a9:e9:
                    e3:93:58:52:45:25:9d:7a:27:7d:99:fc:25:9a:14:
                    3e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:65:1B:F8:4B:BC:76:99:A7:00:3E:AB:15:E4:4A:85:1A:B9:88:CA
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/04AA1FD6D5C511F0B5CB0BAADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:e5:a3:a4:ca:9b:b2:7d:80:3f:36:70:11:12:0b:98:cf:5a:
         c8:ed:5b:77:f6:e4:f9:83:83:a9:9e:a7:83:dc:61:2f:04:59:
         bb:78:44:2c:13:70:58:54:a7:05:31:5c:be:58:19:ec:1c:20:
         d0:ec:6b:5c:d1:46:3d:62:ee:50:cd:11:39:78:89:85:12:48:
         c7:25:53:a5:56:90:e8:dd:4f:5d:69:cd:cc:0e:48:ab:af:d9:
         3e:bd:6a:81:54:c1:32:92:5c:3d:57:f7:a3:16:b5:92:0e:ad:
         09:7e:cc:88:8b:99:88:cf:ae:91:ca:dc:96:d9:77:27:8d:a8:
         5d:1d:c3:5b:d3:5e:d5:89:12:e2:4c:8a:74:f1:c4:95:e8:25:
         73:c8:aa:f0:8b:4c:94:80:5d:72:a9:b8:b3:56:90:5d:dd:27:
         15:f0:c2:c3:29:f8:a7:64:ee:26:db:cc:17:64:d8:ef:0e:74:
         c2:11:6d:39:e6:a5:52:61:23:dc:09:e7:74:1c:07:f3:0d:ee:
         30:d9:29:30:c8:34:e8:0c:18:1a:31:31:f5:9e:6d:a3:f7:eb:
         b1:cf:de:a8:58:77:e8:28:83:e1:c3:7b:1a:d0:ed:c5:bf:33:
         20:29:0a:8b:98:f4:86:c4:8c:50:d5:1e:aa:15:88:7c:78:20:
         a5:f2:24:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:17:11 2025 by rpki-client