This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8EFDB1CACEA411F0AB7A05F6DAE4EC9C.roa
File:                     8EFDB1CACEA411F0AB7A05F6DAE4EC9C.roa (raw, json)
Hash identifier:          fN2sRhdfXzm/M3gxZQN0LANGhIj5qwNEsXQ1O0q1P2M=
Subject key identifier:   E5:8A:6E:08:CB:6D:26:58:75:6D:C5:88:45:28:5F:F7:1B:A0:A6:3C
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       102D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8EFDB1CACEA411F0AB7A05F6DAE4EC9C.roa
Signing time:             Mon 01 Dec 2025 10:57:42 +0000
ROA not before:           Mon 01 Dec 2025 10:57:37 +0000
ROA not after:            Sat 01 Dec 2035 10:57:37 +0000
asID:                     327790
IP address blocks:        161.123.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 08 Dec 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4141 (0x102d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Dec  1 10:57:37 2025 GMT
            Not After : Dec  1 10:57:37 2035 GMT
        Subject: CN=692d74a6-e024
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1f:6b:e5:87:7e:f2:5a:a8:e2:4a:a8:5f:b5:
                    24:12:5a:93:b6:aa:f8:08:38:a2:d4:c6:a9:64:f0:
                    ff:b5:3b:18:d7:83:fe:5e:53:97:66:87:e3:89:5e:
                    cb:c7:ef:10:39:20:8e:98:59:0c:fc:c0:73:27:f6:
                    64:2e:36:53:8f:a3:74:b9:a8:0b:01:16:8e:ca:a6:
                    43:6b:af:f1:50:f6:cb:c4:a8:4a:c6:fd:ee:44:13:
                    98:98:eb:35:24:b0:43:14:49:5a:dd:3d:6c:cd:f2:
                    a4:b3:b9:98:6d:00:16:ba:8e:1c:d0:e7:61:8f:c9:
                    0e:07:29:01:15:a5:5f:1e:7c:c3:94:e6:00:fa:48:
                    5d:a9:12:6f:a5:d8:a5:e8:e1:34:b8:c7:97:8c:f4:
                    28:77:5e:98:cc:e2:7f:f5:9f:56:46:07:02:ef:4a:
                    e2:92:55:4f:a9:6e:66:65:d3:62:22:f6:12:12:78:
                    31:17:2d:d6:a8:d8:08:72:02:e7:dd:fd:e1:51:76:
                    2b:2c:35:f1:88:0f:c3:c1:5a:92:e0:a3:97:27:b3:
                    c5:81:d0:ab:a4:46:dd:1d:52:76:3e:e9:6a:e4:62:
                    69:6e:d9:12:11:91:61:fa:9d:47:c0:c9:a4:0e:42:
                    fb:da:4c:5a:eb:8e:4e:30:03:33:da:28:e3:40:f7:
                    f1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:8A:6E:08:CB:6D:26:58:75:6D:C5:88:45:28:5F:F7:1B:A0:A6:3C
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8EFDB1CACEA411F0AB7A05F6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:1b:75:96:f1:38:9c:8d:5b:c7:86:e5:c7:65:52:ef:5d:1b:
         1d:1f:74:b4:07:5a:89:64:b5:a8:2f:dc:5e:5e:49:f8:cb:25:
         4a:7d:26:b0:d0:f4:15:9c:d6:84:78:bc:41:c9:f6:f0:92:f9:
         f6:00:b2:b1:aa:3e:27:30:a3:cf:65:0f:47:45:8e:2a:0d:71:
         ba:4c:b3:8f:e4:a8:45:c3:91:1c:08:a8:9c:8e:5b:b1:5d:74:
         26:52:25:85:61:76:ac:76:75:9a:0c:14:b9:b8:1e:1b:d4:50:
         80:b8:4d:3e:62:9f:9c:ae:b9:41:26:02:8e:67:93:6f:9e:d5:
         96:57:74:b0:0d:7d:93:ce:44:e7:19:28:c9:9c:98:bc:64:16:
         58:11:2a:95:bd:2c:57:bc:a3:35:68:33:c7:54:07:b9:43:9e:
         4c:29:5b:a6:ba:34:57:43:6d:67:d9:b8:6c:a3:a6:f4:ec:78:
         e1:f1:30:9e:0b:b7:39:95:65:f2:83:52:a4:11:41:df:92:84:
         6e:c9:20:46:3f:ba:09:cc:cf:bc:89:f1:44:70:ba:bc:a7:62:
         67:79:6d:28:dd:55:0d:67:b7:09:4b:2b:23:c0:e6:bb:0b:8f:
         c3:b7:cd:c3:70:74:17:ca:ae:e4:63:f3:bd:94:8d:c3:57:f1:
         cf:ea:be:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:40:03 2025 by rpki-client