This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/91BDC14CED3B11F0AA1DB5D0DAE4EC9C.roa
File:                     91BDC14CED3B11F0AA1DB5D0DAE4EC9C.roa (raw, json)
Hash identifier:          2kFKdA78TjXTzLODUxhdcCTkxBflRBV04zvqKoE+Xp0=
Subject key identifier:   C4:ED:F2:CF:AA:DE:C8:E5:DE:36:B9:2E:B9:EC:E3:19:7F:F8:08:9B
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0A8C
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/91BDC14CED3B11F0AA1DB5D0DAE4EC9C.roa
Signing time:             Fri 09 Jan 2026 09:14:16 +0000
ROA not before:           Fri 09 Jan 2026 09:14:09 +0000
ROA not after:            Wed 31 Dec 2036 09:14:09 +0000
asID:                     9457
IP address blocks:        165.49.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2700 (0xa8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Jan  9 09:14:09 2026 GMT
            Not After : Dec 31 09:14:09 2036 GMT
        Subject: CN=6960c6e8-bd06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:42:e1:ca:4c:7f:0f:f4:6a:20:ff:d8:57:09:
                    28:a5:07:4d:06:39:88:f5:56:f4:cb:4e:9d:4b:6b:
                    21:79:e8:be:8e:1e:68:c2:b3:99:fe:15:1e:e4:e1:
                    50:07:07:de:41:f0:4c:fb:13:19:8f:fa:55:ae:2d:
                    86:29:8c:f2:3a:6d:f2:45:f9:f4:77:8d:5d:d4:56:
                    f2:d1:ce:5d:be:23:61:45:3d:63:0b:c8:95:0b:08:
                    c7:28:6e:b8:b8:6c:6d:87:ed:36:61:62:dd:dd:be:
                    97:b7:e1:e7:fb:98:6b:ca:85:3e:3a:5a:30:49:9d:
                    b6:10:4b:6b:bd:84:1a:4c:a1:a2:4b:ea:17:01:b7:
                    18:11:d3:f9:ec:70:bd:0f:0a:c6:b5:05:d5:82:79:
                    37:39:35:fe:8a:83:36:e0:9e:3f:59:36:fe:1e:5f:
                    f3:81:0a:78:39:ea:54:21:22:05:ff:eb:14:a5:83:
                    81:a9:27:15:2f:c3:ad:1e:32:2b:c1:fc:13:9c:9f:
                    00:3f:7d:a8:c9:66:ee:13:86:e8:40:a0:d1:82:e6:
                    be:2c:a3:c3:5f:aa:e5:ef:01:33:fe:d1:29:dc:5f:
                    e5:57:6a:b8:e8:bb:77:1b:8a:8b:d1:9f:03:5f:37:
                    45:3a:c2:bb:59:7f:f2:e1:34:1c:33:8a:91:07:c6:
                    eb:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:ED:F2:CF:AA:DE:C8:E5:DE:36:B9:2E:B9:EC:E3:19:7F:F8:08:9B
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/91BDC14CED3B11F0AA1DB5D0DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:92:c0:ef:18:45:a2:ea:81:c0:ef:13:ff:59:2b:a2:c1:21:
         07:78:26:5e:06:10:03:f5:a2:75:35:b5:74:4b:01:2c:db:4d:
         4b:9e:e8:d4:d5:dc:99:98:f5:57:61:c0:8f:ff:d7:36:b2:0f:
         4b:ba:6d:9a:1e:f7:31:47:1d:d8:04:ad:3f:d0:18:5d:c9:f0:
         25:9c:ff:49:f7:0b:c6:c2:68:8b:b0:04:ea:37:34:a5:f2:ad:
         e4:e1:67:97:e9:8c:4c:f9:88:ca:7e:1c:6c:6f:9f:10:be:50:
         f3:0b:7b:28:c5:93:19:f3:72:85:35:c0:4b:f5:12:56:c4:bf:
         3d:33:41:f3:c9:bc:df:aa:8f:0a:b7:63:95:c6:5a:e8:c3:75:
         9a:cc:c7:50:00:24:f0:84:bf:32:10:98:c3:95:e1:51:60:2d:
         80:4f:95:0a:60:db:14:e2:5a:23:7d:b9:88:11:d6:6d:59:72:
         0c:e3:d3:a3:3d:12:82:cf:85:5f:48:b8:79:fb:15:13:25:fb:
         e7:e3:be:13:3a:db:19:61:74:b6:f6:42:04:9a:9c:e3:94:a9:
         58:5a:57:51:71:d7:01:8c:23:40:11:73:61:1c:32:af:20:0a:
         fd:55:f9:83:8a:2a:22:f0:e8:fb:7d:1e:d0:6d:68:03:81:47:
         fc:1b:7d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:13:29 2026 by rpki-client