This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/BF8F48A6F6BF11F095810AAFDAE4EC9C.roa
File:                     BF8F48A6F6BF11F095810AAFDAE4EC9C.roa (raw, json)
Hash identifier:          VEsebwVhKZL3/XUSHJqAh+mFFUO9Y2ZvSaUxglQg0CQ=
Subject key identifier:   1D:02:6D:F8:83:DD:E3:D6:7D:21:5D:79:D2:D9:9B:11:BD:16:FA:71
Certificate issuer:       /CN=F36F9BF2AR/serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
Certificate serial:       05FF
Authority key identifier: AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/BF8F48A6F6BF11F095810AAFDAE4EC9C.roa
Signing time:             Wed 21 Jan 2026 11:53:06 +0000
ROA not before:           Wed 21 Jan 2026 11:53:01 +0000
ROA not after:            Mon 31 Jan 2028 11:53:01 +0000
asID:                     37154
IP address blocks:        165.56.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
                          rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Jan 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F9BF2AR, serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
        Validity
            Not Before: Jan 21 11:53:01 2026 GMT
            Not After : Jan 31 11:53:01 2028 GMT
        Subject: CN=6970be22-a507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c2:d5:be:2c:6b:d9:c5:be:ea:03:50:06:7e:
                    c9:ba:c4:f7:f4:89:5d:fb:51:3a:88:53:10:c2:e4:
                    b9:26:7f:4d:b6:c7:b3:d3:44:c0:b2:c0:af:da:7d:
                    c6:f6:02:1d:95:b1:13:b5:99:00:56:10:04:7a:64:
                    0d:39:22:81:a0:1d:22:6e:e1:38:93:d7:9b:3e:90:
                    34:17:6a:0d:aa:71:c5:97:18:c0:07:44:9f:02:0d:
                    bc:e5:66:96:8d:8e:32:a6:06:a9:64:6b:b8:7c:42:
                    b9:27:75:e6:1c:b3:39:38:19:2b:ad:42:05:e6:d0:
                    7e:08:e7:89:24:85:61:f9:4b:dc:3e:19:fb:e8:31:
                    be:27:91:9d:9f:9f:a7:9c:4a:13:be:97:fc:16:6f:
                    d8:e1:c8:cb:c2:76:ab:99:0e:17:60:76:48:19:7c:
                    cd:ce:a6:34:0e:4c:e8:85:27:9b:a2:16:54:10:d3:
                    32:58:1a:db:53:82:9d:33:16:6b:8b:51:6f:80:ff:
                    d5:fd:ed:6d:15:cc:1d:5c:67:8f:16:76:22:8c:2e:
                    45:98:29:f2:26:80:45:9e:ac:3f:09:9e:69:57:5b:
                    54:cd:13:47:75:ee:52:06:ea:a5:7e:5a:46:a4:cb:
                    10:fb:14:e7:81:68:38:db:68:be:42:40:e6:77:3a:
                    b4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:02:6D:F8:83:DD:E3:D6:7D:21:5D:79:D2:D9:9B:11:BD:16:FA:71
            X509v3 Authority Key Identifier:
                keyid:AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/BF8F48A6F6BF11F095810AAFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.56.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:75:62:62:53:04:32:d6:c4:fa:f4:8f:d9:fc:97:96:8b:29:
         5c:0e:3f:dd:b8:d3:60:11:33:4e:9f:18:f0:5b:d5:ca:ea:e4:
         b7:40:a8:94:2f:a1:a8:6d:e8:f8:c7:e3:46:39:7a:a6:57:3e:
         7d:de:88:aa:08:aa:5a:85:71:d5:9f:79:c5:c3:62:dd:58:04:
         70:11:ce:74:be:50:55:4f:b6:39:6a:4a:2f:79:5f:dc:87:36:
         6b:2c:60:9c:4d:72:2f:59:c8:50:1f:c1:6c:6e:ec:8b:6b:38:
         d1:a2:16:6f:ae:ca:ac:0d:0f:84:03:40:db:43:05:43:7d:d5:
         34:d5:9f:18:13:9a:91:02:f7:c9:2f:c8:43:49:18:88:45:e1:
         72:bf:5f:7e:16:01:07:14:e7:31:e5:b5:f6:fd:b5:0c:c2:a9:
         5e:bd:81:c8:b0:f2:98:06:1f:bf:62:6e:aa:bf:f2:e2:3c:8f:
         8f:31:bb:03:bd:4a:d1:7b:5b:cf:4e:4d:22:eb:14:e2:21:77:
         64:ba:ed:5c:d9:02:76:14:21:54:93:d0:57:e6:a6:74:57:77:
         b2:64:ea:4d:80:b2:f7:23:1d:bd:4e:73:91:94:72:20:96:84:
         ea:cc:51:75:54:a7:a0:35:cd:95:0e:dd:7e:53:9f:64:79:50:
         b1:3d:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:29:00 2026 by rpki-client