This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A507CD9CFB6911F093A9D6E2DAE4EC9C.roa
File:                     A507CD9CFB6911F093A9D6E2DAE4EC9C.roa (raw, json)
Hash identifier:          y3zcWYvtryoZu39lHFnnT/n0g/OO6kwQ6OOOq+ENwSw=
Subject key identifier:   06:A1:64:A1:4E:04:EC:5D:CB:B6:5C:76:02:7E:3A:ED:A6:7D:AA:36
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B6F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A507CD9CFB6911F093A9D6E2DAE4EC9C.roa
Signing time:             Tue 27 Jan 2026 10:19:21 +0000
ROA not before:           Tue 27 Jan 2026 10:19:16 +0000
ROA not after:            Wed 25 Feb 2026 10:19:16 +0000
asID:                     54801
IP address blocks:        154.90.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 12 Feb 2026 00:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112370 (0x1b6f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 27 10:19:16 2026 GMT
            Not After : Feb 25 10:19:16 2026 GMT
        Subject: CN=69789129-1580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:71:31:be:60:2b:8a:20:4a:15:e7:6e:05:95:
                    33:d8:9d:9b:fd:87:a0:2c:49:3d:41:a4:81:5e:65:
                    98:a6:f0:21:73:74:76:83:3d:6b:f6:c6:4a:6f:9a:
                    ae:51:8b:ad:3e:32:68:8b:19:00:06:03:78:53:0e:
                    e6:23:05:d5:af:77:d1:41:81:e2:00:6f:ed:e5:82:
                    8e:59:e5:57:4f:8b:8b:17:02:1e:d2:66:af:66:8c:
                    2f:fe:76:93:52:68:16:0e:03:e3:61:09:cb:8d:95:
                    c6:8b:12:e9:cb:82:6e:f5:79:2e:f3:07:f1:43:16:
                    ce:9c:62:ac:3a:8a:01:fe:6b:4b:e0:5d:5e:3a:9a:
                    2a:00:4c:5c:06:6f:88:a9:fc:f2:a8:92:85:72:0a:
                    77:75:16:2c:ba:66:75:53:79:ab:7d:51:7c:5c:d3:
                    bb:1c:34:79:89:c9:c9:44:0c:23:7d:56:65:37:55:
                    5b:82:7e:d0:0b:ae:7a:f2:ab:13:5d:16:47:c7:e3:
                    29:e5:b6:c1:1b:51:27:cf:54:fd:e4:2c:c1:ac:ff:
                    64:28:71:a8:46:b6:e7:37:dd:a7:4a:b1:93:bc:66:
                    1d:ce:87:3e:f8:b6:8a:db:df:6d:0d:52:5b:d1:30:
                    a2:dd:b6:d7:f7:80:ea:db:94:24:80:84:ca:65:30:
                    3b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A1:64:A1:4E:04:EC:5D:CB:B6:5C:76:02:7E:3A:ED:A6:7D:AA:36
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A507CD9CFB6911F093A9D6E2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.90.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:19:cd:1a:2a:18:3f:a4:30:ac:74:d6:4f:2c:2b:36:5e:04:
         cb:82:cf:7f:14:0f:e4:eb:5c:74:b5:fc:9e:4e:68:0c:d9:2e:
         8c:09:ee:98:89:31:81:4e:6f:c6:ec:be:81:87:5d:fb:a7:b1:
         ec:e4:d1:be:58:1f:50:ff:04:b7:d3:32:ad:45:c5:17:6e:c2:
         ea:f5:48:e3:57:ff:e2:77:0a:41:5a:fe:e8:14:3e:33:6d:86:
         09:ae:f9:2a:45:f4:58:36:0b:d5:44:fa:41:09:69:1d:12:a3:
         17:f9:06:75:a8:72:6a:c7:2c:13:6e:98:3b:0d:c4:b3:da:0b:
         99:77:db:57:61:16:65:dc:6b:61:17:87:c1:8b:cf:60:aa:09:
         78:8c:0d:bf:4a:ea:f8:eb:43:7e:3d:d6:c9:5b:d3:21:ff:bf:
         8f:c8:fb:60:0a:25:aa:9d:e0:24:39:72:c7:2d:93:fe:1e:40:
         0e:47:7e:92:e2:58:d6:3b:df:da:35:1f:ee:b5:63:38:5b:ab:
         9b:1d:14:90:5f:b5:2c:54:c7:5e:66:bb:65:cc:cf:82:3f:0d:
         14:53:f7:f9:9e:27:53:37:b4:6e:65:6d:51:f7:33:61:8c:6c:
         f5:2b:75:cb:42:54:11:cf:30:92:b3:d9:f6:61:71:ed:c4:1f:
         18:20:ed:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 19:55:02 2026 by rpki-client