This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9877C01CF05311F09A841DDADAE4EC9C.roa
File:                     9877C01CF05311F09A841DDADAE4EC9C.roa (raw, json)
Hash identifier:          hPQLQpE3sida0gItlIv2gx4agVNWmCislwsysja2QSE=
Subject key identifier:   18:66:62:9A:0C:D7:8E:06:16:8A:68:B6:BA:CE:A5:33:F7:08:77:CD
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019665
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9877C01CF05311F09A841DDADAE4EC9C.roa
Signing time:             Tue 13 Jan 2026 07:43:48 +0000
ROA not before:           Tue 13 Jan 2026 07:43:44 +0000
ROA not after:            Wed 13 Jan 2027 07:43:44 +0000
asID:                     151206
IP address blocks:        45.200.123.0/24 maxlen: 24
                          45.200.125.0/24 maxlen: 24
                          45.200.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Jan 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104037 (0x19665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 13 07:43:44 2026 GMT
            Not After : Jan 13 07:43:44 2027 GMT
        Subject: CN=6965f7b4-e8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:62:01:a3:54:bb:dc:6b:ce:37:a5:ae:61:
                    6c:91:12:42:48:18:2d:8c:a7:07:31:df:77:1e:9a:
                    3e:80:fc:39:b5:cb:5c:8c:cb:74:09:23:e1:92:73:
                    d3:77:d7:73:aa:88:43:43:de:75:e2:7b:14:08:d1:
                    60:d7:03:f2:9e:a7:73:bf:58:37:78:e2:df:76:e3:
                    36:89:dc:3e:3f:83:e9:bd:62:2b:59:b2:c5:4e:ec:
                    68:9c:e9:e8:82:61:d3:95:75:70:d7:39:26:70:74:
                    3d:6a:bb:8c:b0:13:9f:d3:aa:ee:f2:4f:a9:64:a7:
                    27:57:25:00:f3:ea:f0:24:d2:78:32:ae:8e:0e:e0:
                    b9:fb:e7:ec:d2:79:cd:f0:dd:40:fb:0b:7c:dd:9a:
                    83:06:50:f2:2c:d6:4c:c2:1c:fc:7a:cf:6c:84:e8:
                    52:cb:f9:6b:53:d2:f6:5d:04:09:a2:a9:f6:c5:ca:
                    ac:ba:4d:ad:74:a6:19:81:71:9a:c6:02:9e:30:81:
                    94:55:ec:b7:70:88:1a:d0:f1:f5:b7:4e:4e:eb:cc:
                    d0:b4:83:7f:09:cc:76:de:2a:94:88:55:5d:5d:56:
                    7e:b7:b9:74:09:75:e5:21:7c:9d:8c:ca:1e:e3:ec:
                    0b:d9:7e:ed:e8:ff:08:a2:63:9a:f0:79:25:83:c4:
                    7a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:66:62:9A:0C:D7:8E:06:16:8A:68:B6:BA:CE:A5:33:F7:08:77:CD
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9877C01CF05311F09A841DDADAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.123.0/24
                  45.200.125.0-45.200.126.255

    Signature Algorithm: sha256WithRSAEncryption
         23:83:81:68:8b:3d:99:a1:9e:80:c6:fd:48:9a:ef:eb:76:1e:
         5e:58:7c:88:68:b2:21:68:d9:90:ed:47:89:1a:98:40:65:46:
         45:53:51:db:52:74:2d:68:78:63:1f:03:0c:95:16:09:75:f4:
         88:53:cf:0a:f4:32:e7:bc:b8:91:2b:98:9b:d7:21:dd:f8:f2:
         3c:05:46:e0:be:b8:02:32:f1:bd:ad:4b:90:1f:a6:b9:52:0f:
         4b:b8:2c:a3:73:e9:d3:47:a9:81:b8:a3:ca:37:5c:2e:a8:e6:
         cb:14:46:e3:31:e0:21:db:3b:b7:13:1b:9c:f0:12:20:42:66:
         f3:43:85:6a:29:70:a7:1e:0c:0a:61:15:51:7f:db:63:1c:5d:
         d2:75:46:46:55:a9:07:28:88:36:45:09:91:5c:dd:35:d6:e0:
         0b:5c:b9:c2:99:70:36:6b:10:78:b7:fc:cb:eb:63:aa:d7:7d:
         0c:ca:4b:db:06:e0:c4:9d:16:cb:5c:13:54:97:e0:8f:a9:13:
         28:02:e6:50:2f:e9:96:64:cf:45:13:99:b1:4a:6e:c4:e0:30:
         15:20:4a:29:96:77:7a:c9:4f:9e:0a:0f:83:25:67:9f:e9:a8:
         b9:96:0f:8c:7b:38:b3:f3:c3:74:16:10:85:5d:6f:39:24:88:
         30:d9:f5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 01:36:07 2026 by rpki-client