This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/07754516C01B11F0BBE1BEECDAE4EC9C.roa
File:                     07754516C01B11F0BBE1BEECDAE4EC9C.roa (raw, json)
Hash identifier:          rLhDM+dPF4KYaP0otxmJHcYKsChctKj+mpUPxKoC/Rw=
Subject key identifier:   49:BF:DA:7C:C8:1F:C5:B8:8F:D8:B4:D7:55:7B:62:94:81:58:76:EF
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       09EA
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/07754516C01B11F0BBE1BEECDAE4EC9C.roa
Signing time:             Wed 12 Nov 2025 22:57:57 +0000
ROA not before:           Thu 13 Nov 2025 22:57:53 +0000
ROA not after:            Mon 31 Dec 2035 22:57:53 +0000
asID:                     834
IP address blocks:        165.49.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2538 (0x9ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Nov 13 22:57:53 2025 GMT
            Not After : Dec 31 22:57:53 2035 GMT
        Subject: CN=691510f5-683f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:b6:df:d6:4b:9e:d6:79:4e:8f:50:33:f0:
                    5a:16:ab:65:b5:84:9f:46:64:7e:0e:db:0b:10:f6:
                    2a:b5:c5:53:9d:8e:f9:17:d9:97:d4:b9:e5:73:df:
                    40:d4:82:77:69:8c:46:9b:63:57:82:25:15:a5:54:
                    37:6b:22:98:7a:83:34:0e:fe:5b:1e:53:b6:c5:f7:
                    07:88:d1:ad:d7:96:6a:98:3f:5b:e7:58:45:2b:09:
                    ed:ad:85:2f:b4:15:42:ef:f5:10:07:ef:1a:9b:df:
                    d2:1c:96:b7:3f:62:b9:de:1f:19:8d:e6:f1:23:07:
                    ed:34:e4:e9:20:f9:30:50:78:dd:e4:4e:93:01:2d:
                    83:df:71:de:bf:8f:f9:d6:d3:30:68:85:8e:bc:18:
                    47:34:75:77:b2:19:80:ef:d5:f9:12:af:58:50:15:
                    1b:15:61:58:fa:a0:b5:7d:d3:59:7d:80:b0:9a:00:
                    10:ab:7d:52:4c:ad:e9:b8:8c:f6:19:cf:3c:3d:32:
                    03:4a:9e:dc:3b:e4:d5:29:0f:75:00:e8:76:8c:07:
                    23:99:25:30:61:03:a9:88:ac:87:d7:ed:27:2b:50:
                    e1:73:d4:e4:b3:2c:5f:66:da:47:ca:f2:da:da:86:
                    82:91:9c:e5:17:10:00:96:52:7e:ad:86:cb:92:95:
                    ea:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BF:DA:7C:C8:1F:C5:B8:8F:D8:B4:D7:55:7B:62:94:81:58:76:EF
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/07754516C01B11F0BBE1BEECDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:3f:aa:4b:4c:69:7a:ab:8f:47:35:7c:bd:42:c9:4e:2c:0f:
         72:27:82:dd:af:88:83:14:da:59:b4:91:7d:51:c2:d3:4a:c2:
         58:07:19:49:f8:a8:78:66:eb:a6:1a:c7:fb:56:ef:ca:1e:8e:
         e6:ba:cc:5a:de:f6:21:08:eb:91:8e:ce:c0:ad:46:e8:c4:6e:
         80:63:aa:77:85:e5:80:f6:8e:0d:2b:41:f0:a0:bb:b1:fc:f2:
         7b:51:75:e1:22:38:86:8f:51:f0:6c:e2:74:1a:4d:0d:a3:bc:
         c7:75:64:c3:e9:87:11:0f:a0:d0:c3:84:51:45:02:72:b9:03:
         77:22:fe:8c:ff:9f:02:02:1a:c6:10:b6:ee:7f:f5:e2:8a:3b:
         c7:0a:58:3c:93:ed:8d:92:85:5a:86:c4:d3:cd:a8:fa:7f:29:
         d8:86:08:76:b8:86:93:9c:5a:57:b0:57:55:a3:c5:5e:c9:43:
         ef:81:7f:72:0f:59:4b:36:45:9f:69:d2:5b:ec:80:7b:35:c7:
         51:7e:7b:da:7c:f9:56:ff:8b:08:0d:6f:78:42:0a:43:27:57:
         f7:d4:f4:1c:fc:df:3c:33:82:71:c9:ff:7e:b4:b2:bc:59:d2:
         6c:df:2a:20:ca:7e:6d:13:ed:a8:17:27:64:cf:8a:28:49:97:
         3e:e7:67:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:05:19 2025 by rpki-client