This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2D7A70B0E56911F08681E7AADAE4EC9C.roa
File:                     2D7A70B0E56911F08681E7AADAE4EC9C.roa (raw, json)
Hash identifier:          7JBEp4ZV2L5TNTsdInzVougHo2JBJMCAGWgycswIcXo=
Subject key identifier:   62:DB:2E:8D:39:80:48:38:FE:A5:19:2A:30:17:65:1F:CA:A3:65:D9
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0A71
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2D7A70B0E56911F08681E7AADAE4EC9C.roa
Signing time:             Tue 30 Dec 2025 10:20:35 +0000
ROA not before:           Tue 30 Dec 2025 10:20:30 +0000
ROA not after:            Mon 31 Dec 2035 10:20:30 +0000
asID:                     214432
IP address blocks:        165.49.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2673 (0xa71)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Dec 30 10:20:30 2025 GMT
            Not After : Dec 31 10:20:30 2035 GMT
        Subject: CN=6953a773-b19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ba:7d:47:01:90:81:17:6d:83:e2:f6:17:cd:
                    66:52:68:15:d4:ea:4d:b9:d6:43:f1:10:cc:38:b7:
                    56:8c:00:0f:b2:62:75:19:ae:89:61:7d:9d:b7:66:
                    cb:cc:d8:92:30:76:5b:c5:70:1d:15:1a:fb:e5:28:
                    2a:53:80:49:24:7b:bb:12:b6:ec:34:af:6c:6c:7d:
                    af:5e:ab:1c:39:e4:4f:88:6e:26:9d:24:d8:ad:7b:
                    99:00:c8:95:b4:24:e6:46:33:15:ff:8a:30:c9:f4:
                    04:a6:f1:28:32:5e:1c:eb:7c:01:a0:28:51:c5:23:
                    89:96:77:2b:eb:bb:76:e8:0c:44:0a:e9:57:de:c3:
                    ad:a6:6e:8b:3b:c7:90:51:de:b4:8b:4f:b1:98:5e:
                    7d:f3:35:5f:db:b9:82:f6:2c:1e:ed:32:61:b0:6c:
                    75:be:4f:a4:7a:bc:f7:a4:c6:1e:3e:55:a5:75:5d:
                    40:b5:07:6f:13:19:8b:e3:3a:b5:95:2c:b9:3e:4d:
                    d7:fa:04:0b:c5:e4:51:bb:fc:67:12:94:37:0f:22:
                    6b:4a:16:c8:f9:06:b0:1d:52:23:5c:5d:60:17:3c:
                    fd:84:25:37:31:71:cb:70:7e:3e:11:c8:da:5f:0b:
                    37:f5:92:59:71:07:34:c5:7f:0f:73:08:29:34:7c:
                    38:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DB:2E:8D:39:80:48:38:FE:A5:19:2A:30:17:65:1F:CA:A3:65:D9
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2D7A70B0E56911F08681E7AADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:0e:b2:ef:14:55:fc:17:42:f4:6b:1b:86:b5:f2:d8:67:5f:
         1a:94:45:93:5c:71:65:17:aa:f7:fd:ce:a3:04:48:89:4c:52:
         a8:f4:16:d3:f6:e9:23:f7:66:29:4a:b8:3d:e8:42:31:8d:59:
         2e:5b:da:12:1b:0f:6e:53:9d:e8:e2:1f:68:92:f5:cc:b6:b4:
         d6:34:7a:01:8c:e4:00:e4:23:dd:e7:7f:ea:f7:67:35:68:88:
         eb:68:b7:77:25:5f:9d:23:5a:b3:75:92:6a:c7:ee:a3:6d:b9:
         cf:ca:a1:46:ab:c3:b3:7d:05:5f:fe:62:a3:c6:81:e5:77:d2:
         86:d2:3b:07:ed:72:16:d4:81:ea:21:f1:0b:64:d6:a3:a5:52:
         3c:7d:b4:6f:d8:1c:c2:c1:c2:fe:d6:f1:a4:c1:77:aa:62:70:
         3a:05:32:23:31:a0:c8:c5:03:cb:d4:d4:46:06:65:5f:ab:b7:
         60:8f:db:53:ed:b6:7f:ba:e3:3b:e1:1e:6c:ba:2f:85:89:d3:
         5f:79:1e:f1:a5:4d:3b:11:d9:1d:dd:62:5d:71:1e:7c:a3:55:
         9e:c5:27:66:af:9a:88:85:3d:f5:1f:37:35:ce:c6:e8:f0:89:
         a1:f5:42:f3:7a:34:11:78:74:58:aa:da:ca:1d:e0:df:7a:58:
         e5:24:9a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:39:15 2026 by rpki-client