This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13758330F06811F0B765E6D4DAE4EC9C.roa
File:                     13758330F06811F0B765E6D4DAE4EC9C.roa (raw, json)
Hash identifier:          hooKeZQkh9cdpZZL3ZGIzkmg158GXzYfQsCB57GlErI=
Subject key identifier:   8B:FE:49:17:40:7A:12:10:7E:2C:7B:EA:F1:5F:FB:D0:8D:BA:B9:B6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01968A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13758330F06811F0B765E6D4DAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 10:10:25 +0000
ROA not before:           Tue 13 Jan 2026 10:10:19 +0000
ROA not after:            Sat 13 Jan 2029 10:10:19 +0000
asID:                     17561
IP address blocks:        45.207.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104074 (0x1968a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 13 10:10:19 2026 GMT
            Not After : Jan 13 10:10:19 2029 GMT
        Subject: CN=69661a11-d5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:2e:32:74:86:36:52:7b:aa:f0:57:5a:bf:
                    2b:a0:ad:4d:95:b5:96:2a:63:26:be:87:91:3c:76:
                    5c:76:de:96:b7:ef:9a:db:5d:7f:33:52:a2:42:cf:
                    03:15:09:aa:54:eb:0e:65:45:01:af:cb:0a:d5:3d:
                    e0:e9:7f:21:84:76:3d:56:4d:cd:8b:67:33:d3:08:
                    db:cc:43:07:ae:4a:23:ed:7f:3e:18:0e:63:8b:82:
                    0d:29:b7:ff:bf:f8:74:7c:3f:c9:ac:13:d0:5f:6f:
                    1e:f2:cd:32:11:46:19:fa:bd:16:54:0a:7c:81:3d:
                    24:a8:cc:f2:44:e6:92:8e:f4:b3:2e:ee:be:9d:ab:
                    42:a5:56:c4:e7:82:16:15:6c:e3:ae:11:25:7e:e1:
                    f0:9d:be:4b:3a:fc:23:d6:3c:ee:2c:76:0f:ca:cd:
                    ed:b8:57:85:a7:bd:af:2e:26:45:65:2a:c5:ab:e0:
                    ba:a5:e3:73:32:51:df:8c:39:a5:09:0d:6f:8b:c5:
                    60:e1:34:41:2b:fd:b6:e1:66:ad:d0:cb:07:60:0e:
                    3b:21:6b:ab:a8:ef:e2:0c:42:a6:cc:3f:9b:f4:87:
                    8d:b8:77:df:8f:09:ca:ba:f6:fd:db:51:18:ec:38:
                    57:b5:64:dd:db:29:b3:10:94:15:24:5a:86:67:38:
                    97:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FE:49:17:40:7A:12:10:7E:2C:7B:EA:F1:5F:FB:D0:8D:BA:B9:B6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13758330F06811F0B765E6D4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:61:23:b6:3d:3f:b4:8c:e2:64:88:b3:f4:c0:7e:dd:86:ad:
         a4:81:11:ee:41:6d:33:ea:31:fb:30:da:66:e8:5d:bb:f5:b7:
         e0:ea:aa:e3:09:5c:fd:f7:7e:5c:18:97:e1:c3:57:35:58:9b:
         49:36:30:f8:13:d6:af:9e:c2:b6:cf:a9:13:68:2e:ef:a6:55:
         26:36:b1:ed:fc:1f:a0:6d:02:eb:fc:47:e4:45:bb:8b:3f:30:
         46:69:02:09:c2:ce:eb:52:0f:5b:58:e2:42:f5:18:66:43:f4:
         34:ab:15:4f:0d:e1:54:0d:4c:75:50:d6:a4:21:5c:5d:4e:94:
         fc:7e:20:e6:07:1f:37:48:32:eb:1f:1e:2b:67:c5:6d:e7:7f:
         96:43:58:9b:b1:03:e5:dc:10:3d:f0:ab:d6:51:82:10:44:86:
         f2:c2:7a:42:23:8c:f6:da:3a:41:67:8e:42:49:0f:1a:78:00:
         e2:0f:6a:22:73:cf:51:6f:6b:c8:ea:c1:88:b9:19:55:01:12:
         95:53:0b:85:df:80:1f:37:bf:dc:ff:f2:8c:a6:44:2d:b9:c2:
         0b:85:1c:0a:df:8a:f6:a4:8e:5e:a7:a7:7f:f0:4a:ab:42:e4:
         71:4d:e8:13:66:be:db:e3:e4:12:9c:b4:d8:7d:b4:ce:4e:74:
         fb:38:ea:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:19 2026 by rpki-client