This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/1E921060D44011F0A4A387A0DAE4EC9C.roa
File:                     1E921060D44011F0A4A387A0DAE4EC9C.roa (raw, json)
Hash identifier:          ZmxXNvJNA2cteoevmdjOrvR4YYH0ZJ9UvQnApp9Oi7E=
Subject key identifier:   80:92:84:16:F0:65:8A:73:2B:6C:53:F1:FF:4C:7E:5A:E7:EA:4C:91
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0A3C
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/1E921060D44011F0A4A387A0DAE4EC9C.roa
Signing time:             Mon 08 Dec 2025 14:13:51 +0000
ROA not before:           Mon 08 Dec 2025 14:13:45 +0000
ROA not after:            Mon 31 Dec 2035 14:13:45 +0000
asID:                     834
IP address blocks:        165.49.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 17 Dec 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2620 (0xa3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Dec  8 14:13:45 2025 GMT
            Not After : Dec 31 14:13:45 2035 GMT
        Subject: CN=6936dd1f-1fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c2:90:fe:7d:08:14:28:fa:cd:3e:fa:f1:9b:
                    f8:a9:c2:63:41:c1:c1:8e:4f:2e:14:2c:a9:52:1e:
                    f7:c1:71:9a:c4:df:f1:ed:5e:ff:c5:71:a4:eb:ce:
                    73:e9:33:6c:50:f0:0f:55:d8:cb:b8:74:0a:7a:8e:
                    e4:2f:e8:77:62:94:35:9e:19:bd:cb:73:5d:0a:66:
                    ce:61:00:37:c8:9c:41:d2:b5:f0:7e:3d:b4:a4:42:
                    c6:58:f0:9a:30:ca:6b:97:38:0d:47:56:50:fd:15:
                    3e:6d:1a:86:d2:2c:2f:29:89:fb:c7:e0:21:0b:e3:
                    9c:6b:bb:1c:32:f3:fb:5d:d2:ed:39:35:5d:0d:71:
                    92:49:f9:77:ab:18:90:15:66:98:ad:6c:62:40:23:
                    b3:8e:c2:53:66:7b:ca:40:a2:54:8e:a7:e0:86:19:
                    3b:ad:14:74:75:ad:0d:95:34:f9:eb:d4:b1:b9:78:
                    b4:1a:eb:d0:a0:a9:40:ae:db:39:12:f0:58:0c:c9:
                    fe:9f:b9:0b:00:73:b5:e6:63:26:db:30:88:53:eb:
                    cd:e8:72:c9:cd:5b:59:b6:07:3e:46:32:42:ed:29:
                    a9:9b:57:e3:4b:d7:12:fe:99:bc:04:dc:0b:6d:cc:
                    68:cc:99:a4:cb:d7:bf:fe:ab:60:a3:74:b2:a2:75:
                    c1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:92:84:16:F0:65:8A:73:2B:6C:53:F1:FF:4C:7E:5A:E7:EA:4C:91
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/1E921060D44011F0A4A387A0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:2e:60:7f:cf:31:e7:ef:62:be:5d:9d:cd:de:ee:6a:ce:c4:
         3c:fe:8c:c0:95:26:6b:96:f9:3b:f7:7f:48:be:a2:1a:d5:74:
         d0:d0:24:fe:47:37:67:5a:43:6d:e6:f6:4a:96:95:18:11:35:
         dd:56:5f:11:37:8c:8b:bb:bf:1c:2d:fc:2a:7a:c9:1c:20:4c:
         78:09:47:03:ac:8c:5c:77:54:ca:f7:f5:38:8a:c8:b6:5c:6f:
         26:f0:82:d0:7d:a7:c3:38:ac:d9:70:86:ed:24:37:72:f5:a2:
         fb:b1:cf:ec:d3:75:1b:e1:97:06:5d:dd:f4:03:36:83:56:67:
         41:59:d1:fc:79:27:91:64:77:d9:f6:15:76:74:75:ed:2b:57:
         69:e7:0b:39:80:a7:ee:7e:db:88:d8:c4:41:78:a0:19:19:64:
         6e:db:1c:c9:1c:48:79:73:b3:0d:1a:70:16:a4:7e:6f:5e:7c:
         f4:c7:3b:4f:00:af:77:5e:82:d6:dc:13:de:f1:74:1d:8a:69:
         5d:f6:72:74:89:5f:d1:02:62:8a:3d:4e:da:b6:ba:3a:1c:b0:
         bd:dc:64:b5:1d:42:af:b2:96:93:6f:ff:79:56:15:5d:c4:81:
         f6:5c:27:2e:f2:d8:2b:7e:84:cf:94:d6:c6:b4:68:b6:37:fe:
         f0:b3:e5:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 15 17:19:26 2025 by rpki-client