This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/074BE93CF17611F0A88022C9DAE4EC9C.roa
File:                     074BE93CF17611F0A88022C9DAE4EC9C.roa (raw, json)
Hash identifier:          QlDjUcIW1/q5cGfX0nPGZm/oOcFlcVXqLkCIGFhv7vg=
Subject key identifier:   C0:3A:03:20:B9:38:06:8D:C2:C8:79:21:E4:26:53:6F:C7:3B:24:B1
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0AA3
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/074BE93CF17611F0A88022C9DAE4EC9C.roa
Signing time:             Wed 14 Jan 2026 18:22:48 +0000
ROA not before:           Wed 14 Jan 2026 18:22:44 +0000
ROA not after:            Wed 31 Dec 2036 18:22:44 +0000
asID:                     401322
IP address blocks:        165.49.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2723 (0xaa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Jan 14 18:22:44 2026 GMT
            Not After : Dec 31 18:22:44 2036 GMT
        Subject: CN=6967def8-9388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:db:c5:87:ac:cf:88:26:15:1a:99:2c:d7:e9:
                    d9:e7:42:f3:2b:8e:73:98:ff:27:cb:70:ae:37:4c:
                    0a:3e:00:99:54:b8:09:74:3b:d8:29:23:f8:50:f7:
                    fa:97:bb:4d:dd:5c:8f:68:ee:ca:b4:85:c3:bb:c1:
                    88:db:c3:de:62:45:5f:f4:2b:f5:ca:a5:bc:4c:af:
                    c9:53:ee:97:a6:ae:98:58:15:b1:a0:f5:94:8d:3c:
                    b8:7a:6d:11:15:c1:7e:6a:23:e7:c1:7a:3c:b9:23:
                    93:0c:17:ed:31:7d:85:58:00:9f:29:3b:a9:6a:c7:
                    b1:b7:2c:0d:7b:78:1d:64:5b:11:5a:26:20:3c:57:
                    8f:21:59:25:45:4f:ae:50:27:41:71:63:0a:96:ee:
                    71:bb:35:e4:25:51:44:03:c6:50:7e:fe:09:d0:b5:
                    52:21:a4:c4:a6:41:7c:74:60:7e:ee:1c:3e:a2:43:
                    f3:65:ee:99:3e:57:e9:65:e2:c5:fe:57:42:86:5d:
                    34:72:3b:a2:e3:ff:1f:81:54:d4:2f:4d:89:d4:70:
                    8b:f1:84:3e:2b:2c:d9:37:50:6d:20:ee:2a:c2:b2:
                    2d:8e:a0:7d:5e:b2:72:16:4b:f8:49:3f:86:f6:0a:
                    b1:9d:87:37:aa:36:f2:a2:6e:3a:fa:3c:ee:ae:58:
                    b0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3A:03:20:B9:38:06:8D:C2:C8:79:21:E4:26:53:6F:C7:3B:24:B1
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/074BE93CF17611F0A88022C9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:e6:ff:73:14:4a:43:b3:8c:79:71:cf:86:48:90:7e:d0:68:
         01:d7:85:00:35:9b:a1:de:da:08:1a:a0:9b:15:90:80:db:71:
         5d:e9:1f:08:e6:20:f7:ed:98:41:8f:d1:fd:50:53:db:75:3e:
         39:a6:f4:8b:26:49:76:1f:1c:af:2c:18:3a:72:f0:25:53:14:
         1e:27:00:34:b7:e1:5b:b1:db:49:15:3d:a8:df:16:12:30:be:
         1c:ab:18:a4:58:9a:19:03:7f:46:df:11:bf:77:ab:9e:ae:52:
         f5:de:0a:70:2f:04:14:e9:d5:00:f6:5b:38:d3:4e:a1:c7:ac:
         1a:f6:2d:cf:87:25:4c:29:7c:94:2f:2f:cc:56:77:d9:e7:e6:
         e3:19:a3:18:f1:bb:84:0e:a2:47:0d:a2:1a:b8:78:7a:81:ef:
         6a:05:fc:33:45:c3:82:77:c7:dd:27:6c:67:f6:60:96:a5:1c:
         b9:ce:a0:c0:87:54:b8:5a:3d:2c:2a:d7:fa:d2:05:0f:0c:68:
         e3:59:ed:71:06:49:f9:5e:0f:e2:ab:da:19:97:e0:9f:ae:37:
         6c:4f:2b:eb:70:93:de:8c:5a:e3:e3:71:5d:03:3c:67:f6:36:
         21:54:3a:4f:cd:8e:ea:a3:9c:7b:41:7b:af:ec:04:24:56:4e:
         30:8f:02:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:01:46 2026 by rpki-client