This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16338FACEAF711F09F231FD7DAE4EC9C.roa
File:                     16338FACEAF711F09F231FD7DAE4EC9C.roa (raw, json)
Hash identifier:          ZYLIZ4cdIipcGQBbiZhOpUkr0OeFh74sodXVImo8fx0=
Subject key identifier:   D8:9D:F9:17:4D:FD:C4:7A:9E:92:60:B2:5F:1A:F8:B4:D8:C0:67:40
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019496
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16338FACEAF711F09F231FD7DAE4EC9C.roa
Signing time:             Tue 06 Jan 2026 11:59:00 +0000
ROA not before:           Tue 06 Jan 2026 11:58:55 +0000
ROA not after:            Tue 05 Jan 2027 11:58:55 +0000
asID:                     9340
IP address blocks:        45.198.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103574 (0x19496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan  6 11:58:55 2026 GMT
            Not After : Jan  5 11:58:55 2027 GMT
        Subject: CN=695cf904-81fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8d:a5:94:4e:4c:80:66:c2:a6:96:db:6b:16:
                    70:4d:22:b3:7c:e2:41:a1:f1:20:46:e8:83:af:c0:
                    8d:88:8f:db:77:da:2c:56:ab:80:e8:6a:74:b7:ef:
                    a7:a8:b0:28:5c:06:d8:a8:ea:bd:45:7b:15:fc:bd:
                    0d:01:04:88:13:7f:ee:93:5f:66:bd:fa:97:ea:c1:
                    9e:5e:0f:de:35:88:a1:9e:0c:91:52:97:b3:29:53:
                    b8:f9:58:c9:67:78:8d:bf:43:12:77:01:ef:b6:d3:
                    17:eb:96:d5:b3:fd:e3:03:ca:41:d7:72:6d:f7:9b:
                    79:f6:5e:77:99:41:ab:a2:5f:b8:b9:a7:82:4c:73:
                    bc:27:5c:ce:22:ee:6c:13:8c:cb:de:c7:af:bd:cb:
                    30:ee:03:7e:43:3e:2c:89:5e:58:97:2b:03:4f:dd:
                    04:95:96:e6:65:d6:17:72:ce:d4:5b:ea:26:4e:16:
                    ef:e7:b1:1e:0e:6e:c0:50:43:68:db:48:fd:60:da:
                    7b:bd:fb:ba:c2:13:9a:cf:0f:3d:de:e9:85:6c:6f:
                    a5:95:15:74:f6:6a:1d:71:7f:a6:a3:1b:d4:1c:3a:
                    eb:84:1a:1b:61:77:d7:6d:00:5a:dd:67:de:8b:4c:
                    91:fc:25:d5:54:e1:0d:3d:06:ec:75:37:53:74:33:
                    37:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9D:F9:17:4D:FD:C4:7A:9E:92:60:B2:5F:1A:F8:B4:D8:C0:67:40
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16338FACEAF711F09F231FD7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.198.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:59:41:e5:d5:8e:11:34:ef:11:c8:86:af:ae:98:03:97:bb:
         6d:28:50:35:2a:90:c3:27:29:f9:95:d6:1d:72:ad:08:04:b0:
         09:ef:81:45:a6:c7:b6:4d:62:ce:e2:b3:78:b4:cd:ab:98:78:
         e9:c4:2e:e2:01:e8:91:3a:ef:9d:67:28:e1:e4:b1:c0:32:6b:
         a9:74:e8:d4:69:96:8b:f1:ac:71:a3:7a:7c:54:85:87:53:7b:
         21:b3:88:98:81:83:9b:1a:e2:fe:5e:89:6c:2b:7b:b5:56:e5:
         f8:b0:44:18:f5:cb:4a:48:32:69:3b:60:44:19:e1:f9:12:a7:
         f2:c2:0f:db:05:12:dc:63:3f:fb:02:8c:0f:35:a4:e7:02:d3:
         28:da:d8:b2:2a:57:39:20:77:1c:02:ec:52:52:c9:f0:fa:32:
         63:37:ae:a1:f9:00:54:fc:4f:eb:15:93:22:25:6e:fc:ec:52:
         b1:6d:b3:2f:6e:3e:77:ff:fb:37:a1:f2:e7:1f:c0:54:6a:da:
         c6:d6:b1:dd:ea:1a:46:e9:16:1e:3b:43:da:ea:ab:1c:b1:f5:
         72:06:e0:25:6c:a2:96:d3:0a:4f:ad:7c:f1:ee:77:3f:3b:91:
         77:13:75:e2:73:41:fc:7f:7c:40:1b:18:9d:85:81:b9:26:30:
         70:fe:56:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:34:46 2026 by rpki-client