This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6BFBFC78E67211F0A7E20C84DAE4EC9C.roa
File:                     6BFBFC78E67211F0A7E20C84DAE4EC9C.roa (raw, json)
Hash identifier:          9gG2ZMSK3/6siwpF3OHot8CL9UINGsFmF7NqCfNYoL8=
Subject key identifier:   D7:A7:9B:31:73:5B:83:00:1A:03:DD:36:2E:65:CD:8C:8C:70:B7:16
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0A80
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6BFBFC78E67211F0A7E20C84DAE4EC9C.roa
Signing time:             Wed 31 Dec 2025 17:59:16 +0000
ROA not before:           Wed 31 Dec 2025 17:59:11 +0000
ROA not after:            Mon 31 Dec 2035 17:59:11 +0000
asID:                     9318
IP address blocks:        165.49.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2688 (0xa80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Dec 31 17:59:11 2025 GMT
            Not After : Dec 31 17:59:11 2035 GMT
        Subject: CN=69556474-a6df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:37:eb:9d:69:c5:fe:3e:c2:a7:48:44:ad:
                    85:84:15:bc:f7:aa:5a:9f:53:e0:d6:93:ee:e1:ed:
                    76:34:67:a2:ba:71:18:fd:b3:57:e9:12:23:cf:b4:
                    49:54:5f:bd:01:5d:c5:50:8c:f3:be:65:d1:15:01:
                    97:68:93:37:ab:46:d2:b2:5f:0f:18:df:ac:aa:7e:
                    04:4b:84:9c:02:cc:18:29:10:8d:7f:cc:75:46:32:
                    6e:d8:3e:4d:ba:9c:49:87:40:2e:eb:b2:6d:5e:81:
                    c4:16:d3:58:bf:28:77:1a:ae:a1:ab:61:75:f2:50:
                    25:fc:22:74:23:d7:76:84:09:7e:d6:fa:67:ed:e5:
                    39:72:42:47:c3:86:ce:0b:5f:99:d0:8f:13:0e:b4:
                    b3:40:0c:39:5e:f4:a5:12:ac:11:ff:ea:8f:4c:73:
                    86:2c:6f:fc:94:20:f0:f5:c9:3a:e8:0c:00:49:c8:
                    9f:1e:90:d1:08:70:4b:c4:92:87:d8:4f:f6:57:18:
                    8e:0b:0d:15:97:a7:cb:45:b7:9f:a4:a7:48:ab:e2:
                    47:72:36:c2:40:4e:48:13:39:59:e0:c1:09:ec:0a:
                    05:8a:56:23:30:0a:0a:f7:f9:27:8d:27:58:d1:56:
                    e8:14:85:b0:c4:10:cc:22:04:c1:59:56:a7:47:00:
                    20:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A7:9B:31:73:5B:83:00:1A:03:DD:36:2E:65:CD:8C:8C:70:B7:16
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6BFBFC78E67211F0A7E20C84DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:3f:9b:2a:00:01:cc:a7:f8:32:de:f2:03:6f:82:7f:f5:d3:
         aa:e6:24:e1:29:6a:fa:f8:ef:bb:0c:38:3b:e8:e8:cc:ca:82:
         61:ea:70:6d:87:df:81:01:25:88:bf:58:5c:de:bd:43:45:c3:
         10:95:d4:7a:05:34:75:89:5d:ac:bb:fe:15:93:00:66:7c:8d:
         7d:4d:a3:b9:c7:99:c6:8c:9c:83:ca:7f:21:78:8c:17:6e:ec:
         d3:5e:81:39:4c:9c:8f:24:90:4a:a5:bc:0d:d9:6b:96:af:0a:
         bd:59:4e:b6:96:97:d0:d9:15:25:0f:31:e2:ca:92:3c:b5:73:
         5e:03:a2:59:81:a4:0c:e1:af:30:34:46:d8:9e:26:0c:59:cd:
         34:c3:a1:2e:cb:af:b1:4e:ac:e1:08:7b:68:d1:19:c3:ec:6c:
         08:f0:56:ce:04:82:f6:b9:f1:71:8b:29:df:21:87:79:ce:cc:
         99:cd:ca:83:ae:86:16:52:81:29:b0:e0:d3:42:af:45:3a:70:
         30:11:62:fa:ac:8e:9f:ce:25:18:cc:d7:60:ef:09:93:6a:ec:
         f6:bf:f4:21:a7:93:ec:71:c1:d3:2f:9d:28:61:06:ed:de:43:
         97:33:2e:0f:77:3d:4b:b1:98:12:15:13:33:87:7f:be:e2:bf:
         84:26:ec:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:10:52 2026 by rpki-client