This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BDDD78C8E15911F0BC254AD9DAE4EC9C.roa
File:                     BDDD78C8E15911F0BC254AD9DAE4EC9C.roa (raw, json)
Hash identifier:          QXUdnVAuMppFUdBlWhLwKl2tWizLueEWsRmZPQjLWpk=
Subject key identifier:   C7:D7:77:45:1B:93:7F:6D:2F:CB:E5:26:9E:13:B6:9D:9C:EB:2B:EC
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0A63
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BDDD78C8E15911F0BC254AD9DAE4EC9C.roa
Signing time:             Thu 25 Dec 2025 06:20:01 +0000
ROA not before:           Thu 25 Dec 2025 06:19:55 +0000
ROA not after:            Mon 31 Dec 2035 06:19:55 +0000
asID:                     834
IP address blocks:        165.49.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Dec 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2659 (0xa63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Dec 25 06:19:55 2025 GMT
            Not After : Dec 31 06:19:55 2035 GMT
        Subject: CN=694cd790-5ae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:0b:cc:91:55:22:3d:b4:ba:08:10:26:8b:dd:
                    20:a5:15:25:9a:43:28:42:64:a8:32:18:d9:38:c7:
                    dd:b8:de:55:07:f8:7e:c3:1c:3e:bf:21:08:41:45:
                    32:7f:90:57:df:06:4d:5d:bd:23:fc:3e:2b:17:36:
                    01:45:d5:e2:14:81:5b:05:35:a4:05:e9:a2:b7:1c:
                    db:63:88:89:21:58:ba:1c:d4:8f:8c:56:d6:01:69:
                    09:1a:46:69:a8:ee:c2:03:66:b5:a4:37:ae:1a:81:
                    8b:59:1a:c3:26:5e:10:49:84:35:e7:aa:c5:ba:fa:
                    ac:ba:a3:b0:cd:3b:dd:0f:66:30:4e:fc:02:28:9e:
                    81:ad:60:18:ad:2c:22:ce:ae:dd:9e:83:33:35:df:
                    d4:c6:74:b8:e6:8e:2d:37:71:dc:05:43:59:d4:26:
                    64:77:fb:38:08:a4:4a:40:35:7a:44:55:ae:68:2a:
                    f0:23:74:83:c6:58:2c:57:9f:02:ba:12:71:98:7b:
                    66:91:f6:ee:2e:bd:25:b1:f8:5e:b6:91:89:52:39:
                    df:59:9e:78:49:53:2e:89:9e:86:43:ac:81:27:b9:
                    2d:7d:0a:72:7e:ba:94:8f:fd:29:10:39:73:4a:42:
                    c8:7e:7a:ad:e1:e8:69:0d:6a:b6:53:6e:4b:f6:52:
                    ba:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D7:77:45:1B:93:7F:6D:2F:CB:E5:26:9E:13:B6:9D:9C:EB:2B:EC
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BDDD78C8E15911F0BC254AD9DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:fb:34:3a:d2:54:34:7f:6e:05:56:3c:d2:e6:34:ba:45:f2:
         19:9f:26:2c:bd:6d:1d:e1:c2:56:f2:38:a8:47:53:de:25:87:
         20:db:ec:e0:a5:2a:0e:b4:f7:06:0f:fe:70:aa:fd:b5:d0:43:
         b8:89:d5:2c:d0:81:b8:00:f5:c2:e7:13:28:94:d2:e1:12:c9:
         f1:4d:01:86:44:ce:0e:06:f4:d1:c0:df:bf:31:26:13:ce:fd:
         72:b1:64:47:a4:72:0e:c9:d4:1a:20:e9:da:50:f2:ec:a8:04:
         a2:e3:49:05:ac:53:a2:55:e2:62:fb:42:15:7c:26:7d:0d:0c:
         d6:2b:bd:b5:bd:22:0b:e2:ee:4f:ff:13:8f:c7:61:43:75:81:
         38:60:d1:5d:dd:cf:ff:cc:f8:2f:48:a1:6d:9b:67:67:e9:59:
         6b:d2:11:fc:08:15:28:eb:79:64:e9:44:e2:3d:51:27:ec:9f:
         20:9b:d4:cf:3e:71:e9:a3:6b:cb:5c:fd:c0:95:c2:bb:b0:93:
         f5:a9:f3:f4:3f:68:b4:39:4d:dd:fd:d9:91:67:cd:90:46:5d:
         a2:e7:0b:08:fc:5f:0e:5b:57:d8:dc:97:c5:97:56:ff:93:47:
         c4:01:2c:0a:fc:4a:3f:a4:65:89:93:ed:b6:5c:05:b6:ea:4e:
         cd:0f:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 07:14:51 2025 by rpki-client