This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AAE42BDEC3BF11F0AA2897F5DAE4EC9C.roa
File:                     AAE42BDEC3BF11F0AA2897F5DAE4EC9C.roa (raw, json)
Hash identifier:          bB6zDq+7AmDv8q4GtqptbZmNc/xfl5EBEbkLIkg85dg=
Subject key identifier:   65:EC:12:9C:9F:B2:5A:63:4C:C3:4C:D5:75:E5:9E:F5:6A:C3:4B:97
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       09F9
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AAE42BDEC3BF11F0AA2897F5DAE4EC9C.roa
Signing time:             Mon 17 Nov 2025 14:14:02 +0000
ROA not before:           Mon 17 Nov 2025 14:13:58 +0000
ROA not after:            Mon 31 Dec 2035 14:13:58 +0000
asID:                     998
IP address blocks:        165.49.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2553 (0x9f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Nov 17 14:13:58 2025 GMT
            Not After : Dec 31 14:13:58 2035 GMT
        Subject: CN=691b2daa-f5a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7d:0a:dc:b4:e3:58:1b:34:d1:de:86:ca:e3:
                    22:ba:36:f5:57:87:1e:f0:13:1c:05:e3:36:c3:59:
                    b3:25:ed:3a:db:2f:35:c5:f4:5d:2d:a7:52:f9:89:
                    59:ca:24:2e:cd:4d:6e:9a:87:6e:c1:c1:ef:08:13:
                    50:38:a7:3d:42:d5:e8:36:40:d3:55:12:14:af:9e:
                    71:cf:6a:a3:92:13:d1:9b:b4:06:27:e5:a3:7a:59:
                    df:2f:ea:8e:27:dc:1c:09:82:c0:9b:39:9b:e2:a1:
                    d2:14:03:5e:33:25:1f:3b:0e:e3:05:74:a0:98:6a:
                    61:27:b7:b9:f7:71:69:2a:d6:39:2d:87:6b:68:f4:
                    ef:c0:65:96:1e:e6:05:a3:5c:99:97:d1:28:04:e8:
                    bf:31:a9:9d:82:a8:b7:87:57:76:b9:fb:a4:cf:48:
                    b4:2a:42:1a:e3:4b:59:80:f0:91:ba:50:0f:b5:b0:
                    ee:44:65:14:08:cd:e8:05:9c:e5:9e:1a:19:53:9e:
                    d1:94:34:4f:7f:04:45:31:d2:f6:70:7e:73:da:a5:
                    c1:3f:9d:71:e8:4b:44:b8:ac:3c:fd:c1:be:c0:e3:
                    72:fd:e8:67:36:01:43:84:d1:a8:eb:00:63:b2:bd:
                    f3:96:31:c4:ea:e2:c0:c2:7a:c7:cc:9c:7c:34:7c:
                    53:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EC:12:9C:9F:B2:5A:63:4C:C3:4C:D5:75:E5:9E:F5:6A:C3:4B:97
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AAE42BDEC3BF11F0AA2897F5DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:5d:96:18:f9:fa:7b:a5:33:db:6c:3c:0a:14:63:86:ae:c4:
         98:33:f4:8d:84:17:a7:64:7e:87:c3:a6:be:90:63:9c:a4:de:
         02:1b:93:9c:0b:ac:22:00:c3:b3:76:37:64:e2:5d:a4:5c:5c:
         45:e3:c8:3a:d1:d9:4f:68:2d:b7:94:7b:0b:8f:26:b4:5e:f0:
         66:f1:72:b9:3b:91:e9:5a:ac:67:0c:bb:a1:7b:86:fb:ff:a8:
         a4:eb:73:d2:48:cb:33:3e:c7:37:02:d8:be:27:b1:e3:12:bf:
         f5:2e:a0:00:a7:9e:8f:27:f8:b6:81:e6:e9:a2:32:5f:32:56:
         f5:4c:bd:d1:e6:12:24:0e:9f:4f:d4:25:f1:2d:49:e8:7a:12:
         4a:72:e5:44:c0:a0:cc:f5:56:4b:67:3c:dc:9d:34:85:a0:e7:
         b0:ee:40:4d:b8:92:f7:d1:26:fa:36:53:cd:04:7e:ab:dc:86:
         40:4f:29:c1:92:ca:e6:40:1b:1d:e6:d2:f0:2c:e7:4e:e4:31:
         d9:d1:26:e6:5b:d3:a8:5a:80:e4:fb:b4:47:7d:ec:0e:6c:ce:
         6a:87:19:25:1c:13:12:12:8f:54:9f:70:e3:5c:a9:b6:b2:a5:
         a6:24:59:c5:a1:66:46:3c:61:0f:98:b0:b6:b5:74:75:d9:c8:
         5c:2e:e7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:29:44 2025 by rpki-client