This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/04ABF1AEE64A11F093E8A98FDAE4EC9C.roa
File:                     04ABF1AEE64A11F093E8A98FDAE4EC9C.roa (raw, json)
Hash identifier:          pSK0A3chYWoQubNtKNkL9OYMMGfR1GDlRn3g+It17Ec=
Subject key identifier:   46:11:F4:9F:9B:72:E8:C9:91:F7:62:42:A8:9D:5B:69:BD:E2:75:CE
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0A77
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/04ABF1AEE64A11F093E8A98FDAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 13:10:03 +0000
ROA not before:           Wed 31 Dec 2025 13:09:58 +0000
ROA not after:            Mon 31 Dec 2035 13:09:58 +0000
asID:                     213607
IP address blocks:        165.49.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2679 (0xa77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Dec 31 13:09:58 2025 GMT
            Not After : Dec 31 13:09:58 2035 GMT
        Subject: CN=695520ab-4352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:68:7d:69:00:a5:f3:dd:b2:d2:fb:49:62:
                    de:bc:46:e9:9c:3d:5e:24:c1:5c:ad:d5:ac:13:ab:
                    8a:4f:c5:00:83:c6:30:ad:08:de:c0:7b:94:9e:4a:
                    7b:ba:a3:ca:0c:03:79:8c:40:83:99:8c:0f:0f:01:
                    be:47:50:7a:43:6b:b4:8e:dc:51:1d:77:b8:4f:48:
                    11:17:4e:11:b2:f3:3e:db:95:2e:38:0d:9a:d7:cb:
                    c3:ff:7c:82:8a:10:32:39:63:b2:bf:e4:65:99:d7:
                    7e:81:27:68:92:63:fe:c2:09:a4:53:84:39:95:ec:
                    6f:0f:58:db:43:a3:f9:0a:27:b7:b6:33:84:fa:33:
                    b0:a7:b3:2d:d8:35:69:3f:24:76:fa:55:1f:5c:06:
                    97:10:1a:46:ad:77:2b:3e:c1:66:78:9f:9c:9f:4c:
                    b3:f6:62:0e:b6:1c:26:bc:8d:f2:c4:14:29:52:ee:
                    5f:67:42:22:f3:af:67:d7:fe:5e:ff:d1:f6:de:1a:
                    ba:36:08:5d:9f:41:58:2f:ce:a8:e6:f9:38:4e:c2:
                    fe:9d:58:f3:62:72:d7:51:8a:b4:93:d0:7c:3b:7b:
                    00:db:cc:81:ca:c9:da:a0:a8:45:fc:a6:b3:29:c6:
                    14:5f:8e:97:87:cb:b4:71:8c:78:7e:93:23:de:de:
                    55:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:11:F4:9F:9B:72:E8:C9:91:F7:62:42:A8:9D:5B:69:BD:E2:75:CE
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/04ABF1AEE64A11F093E8A98FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:c0:98:ac:cd:1b:a5:77:63:eb:a4:05:b9:d1:e6:a8:0f:2a:
         9d:40:42:97:1d:24:b1:25:b0:98:03:da:14:b3:64:82:da:3f:
         62:34:7c:88:82:85:b0:ce:94:7e:65:68:d8:e9:d3:12:7b:08:
         c3:87:2a:ea:99:05:1b:47:be:07:3b:c0:92:b9:35:a0:38:71:
         56:25:e8:08:21:4f:7e:d6:a3:98:4a:d1:b8:3a:de:b5:12:6e:
         f9:1f:94:b6:94:fb:56:5e:aa:e6:6b:36:7e:54:29:52:a8:05:
         63:9c:ae:cd:2e:a7:26:9f:9b:1e:db:8a:87:57:54:3c:1e:b5:
         f4:ac:fd:c9:ec:c5:0c:4b:3f:b0:f6:74:4c:9b:db:18:20:55:
         53:59:ce:a7:b8:47:8e:cb:6e:b9:84:f6:6b:6d:38:2a:52:15:
         63:6c:9c:18:95:7f:5e:dc:97:00:b2:84:fb:58:48:e0:5e:f4:
         a6:8e:27:06:69:e0:a5:d1:7c:0f:0b:36:3c:16:1d:89:da:dc:
         5d:20:46:cf:73:46:19:34:6e:c8:4b:f2:63:65:e3:ad:2b:4c:
         62:21:7a:91:16:0e:ff:15:0a:ee:20:c3:a9:ab:49:8d:17:6f:
         7d:cf:de:ff:9a:51:4a:5a:f9:63:fd:98:9a:e4:e9:3b:21:80:
         13:a3:0d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:52:46 2026 by rpki-client