This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/9884A7A6DC1611F08554FAC6DAE4EC9C.roa
File:                     9884A7A6DC1611F08554FAC6DAE4EC9C.roa (raw, json)
Hash identifier:          gWmtab9NB6YFJ1wPo16mnZTzUWphKA4gz/9pRUM2s8I=
Subject key identifier:   88:11:5A:C0:24:03:EA:DC:EC:51:54:96:62:F7:93:DE:6B:A4:FD:EB
Certificate issuer:       /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial:       043A
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/9884A7A6DC1611F08554FAC6DAE4EC9C.roa
Signing time:             Thu 18 Dec 2025 13:36:46 +0000
ROA not before:           Thu 18 Dec 2025 13:36:40 +0000
ROA not after:            Tue 31 Dec 2030 13:36:40 +0000
asID:                     15964
IP address blocks:        165.211.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
                          rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082 (0x43a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
        Validity
            Not Before: Dec 18 13:36:40 2025 GMT
            Not After : Dec 31 13:36:40 2030 GMT
        Subject: CN=6944036e-6a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:3f:32:15:fd:1d:f5:7d:dc:f4:ce:4a:29:
                    58:a3:aa:92:d8:1c:7b:56:0b:4e:61:f4:67:d0:62:
                    1f:db:b2:55:ec:63:a1:95:18:c9:61:e7:a2:57:26:
                    19:2a:a2:96:1b:fb:cc:9a:cf:ed:24:59:95:95:bf:
                    ef:02:9b:45:c2:97:99:1e:1b:40:04:1d:61:34:0c:
                    55:90:68:1b:06:b1:7e:70:26:2b:92:f5:e7:3e:52:
                    c7:d5:96:15:ea:37:9b:56:2b:75:ed:aa:16:ce:d9:
                    3e:49:c2:b9:42:3f:62:7c:56:93:68:9c:1f:c7:18:
                    21:33:d1:b7:fa:9c:99:0f:37:2d:d5:9a:19:08:5b:
                    27:24:11:7a:c6:d0:b1:51:ad:f0:3e:3d:61:be:a7:
                    2b:13:66:25:d8:c4:81:3b:58:32:97:ec:20:a2:d5:
                    e9:d6:38:d1:1d:06:11:d4:fe:b9:95:a5:a3:a4:84:
                    17:96:cd:0d:45:35:d3:7b:78:b5:17:95:49:6a:e7:
                    ec:5a:7f:ba:ac:8f:99:3c:2e:fd:d9:2b:6f:18:93:
                    8e:1c:7c:d3:b2:fe:84:4d:d3:4b:9f:48:92:16:3e:
                    f7:ce:6c:14:38:db:43:75:c5:e0:c4:cb:99:14:bf:
                    f8:ae:c7:3e:3a:64:12:b1:30:c7:35:7a:ee:53:ed:
                    51:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:11:5A:C0:24:03:EA:DC:EC:51:54:96:62:F7:93:DE:6B:A4:FD:EB
            X509v3 Authority Key Identifier:
                keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/9884A7A6DC1611F08554FAC6DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.211.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:a5:e6:a6:0f:cc:41:3d:07:f5:a8:43:dc:d3:cc:b3:93:54:
         44:02:2e:53:89:f7:f8:e9:bc:52:86:07:8f:b1:6e:93:dd:f8:
         9c:31:f1:43:ec:64:ea:5a:7b:6b:b8:34:9a:28:b9:1b:cc:36:
         21:90:8b:27:fe:a6:0c:47:7c:61:76:ea:9b:24:4a:11:dc:e8:
         85:c2:99:53:de:ce:f1:7b:35:c1:22:cc:0c:0a:16:41:be:d8:
         11:7d:17:98:7e:31:eb:d1:81:a0:0a:92:d2:23:12:6b:17:d2:
         1b:da:a3:b6:d6:1f:3e:fd:e8:40:a2:6a:0e:34:ea:fc:e5:2b:
         fc:f4:db:c4:1a:ef:2f:2c:8a:09:34:5b:52:89:5f:7f:22:5f:
         16:0f:48:a7:4e:39:96:fa:58:98:e9:9a:ae:9b:d1:1f:21:b3:
         41:74:04:46:ab:de:19:de:48:46:f5:3d:9d:48:24:b5:e6:58:
         7b:92:db:43:5b:98:35:18:1e:17:7e:13:bc:4a:00:e0:a0:ee:
         7b:da:24:b1:1f:12:bf:ac:8f:a5:e2:7c:a7:08:63:fe:6b:bd:
         5c:9a:c7:02:29:5a:7a:5f:ff:0c:76:5a:bf:42:3b:dc:e0:70:
         e8:11:72:e1:8d:c4:b2:f4:22:18:b7:18:7e:af:89:8e:d1:bd:
         e2:3e:ec:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 09:19:23 2025 by rpki-client