This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C53CA4F2D14311F0990712E6DAE4EC9C.roa
File:                     C53CA4F2D14311F0990712E6DAE4EC9C.roa (raw, json)
Hash identifier:          POUOtZRXOot30U8oVnLK28Efwy977T/x1IMb3jx6ofA=
Subject key identifier:   9F:36:BA:8C:CF:1B:B9:5A:FC:0A:27:69:0B:76:C0:A8:67:37:24:87
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0A2A
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C53CA4F2D14311F0990712E6DAE4EC9C.roa
Signing time:             Thu 04 Dec 2025 19:02:25 +0000
ROA not before:           Thu 04 Dec 2025 19:02:17 +0000
ROA not after:            Mon 31 Dec 2035 19:02:17 +0000
asID:                     9318
IP address blocks:        165.49.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2602 (0xa2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Dec  4 19:02:17 2025 GMT
            Not After : Dec 31 19:02:17 2035 GMT
        Subject: CN=6931dac1-9309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:5e:05:ec:c7:fb:57:a4:cc:03:77:2c:f2:
                    f5:5a:e5:e4:5d:0f:6c:62:7c:35:a0:00:61:f4:4b:
                    c0:0e:ad:7d:0c:4e:22:a0:2f:e7:f5:68:a0:ff:75:
                    23:57:9e:12:2f:69:87:3a:7a:04:54:4c:83:6d:08:
                    96:ae:3f:02:71:3a:0e:47:34:3b:ba:17:e0:ff:25:
                    31:d0:72:7c:a9:66:0d:27:ec:49:9a:53:b9:4d:6f:
                    5c:a3:a6:c5:56:cd:e2:44:38:28:7d:6b:44:17:c6:
                    0e:e7:cd:8d:ac:9d:2e:95:c7:cd:e3:86:69:31:f0:
                    88:86:ee:b3:bd:47:e5:ba:93:27:46:01:63:36:3f:
                    a8:73:7c:c6:e4:8c:29:e8:b4:47:18:d0:3b:2f:d6:
                    ae:04:d8:73:51:1e:86:ae:56:f2:c5:0e:1b:8e:79:
                    90:86:f8:63:be:64:55:3a:bf:55:4a:f7:68:47:f3:
                    a6:0a:74:38:92:95:4d:27:42:91:00:3f:cc:50:9b:
                    1d:34:65:79:c7:b3:69:63:cd:96:f0:24:d5:2d:45:
                    60:b3:20:f2:86:cb:f9:02:3a:f2:c1:65:da:df:31:
                    1a:de:fe:74:c2:79:e1:4e:12:90:e3:d5:09:6c:f7:
                    d8:90:51:d4:7f:e4:2c:58:c9:b1:cc:97:90:07:72:
                    93:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:36:BA:8C:CF:1B:B9:5A:FC:0A:27:69:0B:76:C0:A8:67:37:24:87
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C53CA4F2D14311F0990712E6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:32:d2:f0:0f:f1:49:2a:92:81:e2:bf:d0:fd:b3:66:9f:09:
         86:39:cf:12:97:0a:00:0b:95:55:83:d8:54:2d:aa:e9:9a:8b:
         c8:36:90:2e:24:70:36:22:4b:55:08:dc:6b:1d:f1:41:24:13:
         a4:8c:2a:a1:2f:1a:85:cb:b5:d2:a9:db:fe:5d:a8:02:27:60:
         77:56:26:2f:c2:13:19:5e:1c:d7:a8:60:e9:e2:1a:df:53:48:
         a1:7e:78:ac:46:02:2c:33:94:2b:39:9e:c6:a1:23:9f:86:f6:
         9b:e8:a2:92:d9:eb:15:42:1b:5c:c6:18:46:d8:f8:65:35:f6:
         38:1e:03:a0:92:8e:41:a6:1d:41:ba:a6:c2:13:3c:ea:8a:fe:
         45:ad:8a:f2:e0:11:2e:ea:de:df:c2:a4:eb:ca:d2:ce:a2:2a:
         34:1a:6e:b2:bf:e4:0a:20:f1:58:97:ab:3e:11:fb:5a:b5:51:
         71:cb:86:b8:3a:52:74:9e:c1:93:b2:18:2d:86:b0:44:be:7f:
         89:a4:c4:f1:4d:b7:eb:eb:ab:bb:bc:82:47:ee:dd:65:2d:c8:
         5f:1d:73:09:cc:db:07:4e:80:d1:cf:52:93:5a:89:4d:6e:84:
         06:74:d5:77:96:7a:e7:ac:da:4e:f7:17:90:ad:39:c9:04:e1:
         2f:d1:e5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:39:34 2025 by rpki-client