This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/A4D3D332CAAB11F0BF62A89CDAE4EC9C.roa
File:                     A4D3D332CAAB11F0BF62A89CDAE4EC9C.roa (raw, json)
Hash identifier:          8Fj1L7SwyiRZgevRrpIHsBkA1dmnoAeBcDZKJmM0/8Y=
Subject key identifier:   0E:C7:D8:28:9E:96:D0:2F:33:5B:21:8E:82:9C:F6:25:96:03:D0:35
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0840
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/A4D3D332CAAB11F0BF62A89CDAE4EC9C.roa
Signing time:             Wed 26 Nov 2025 09:38:20 +0000
ROA not before:           Wed 26 Nov 2025 09:38:16 +0000
ROA not after:            Sat 06 Dec 2025 09:38:16 +0000
asID:                     397423
IP address blocks:        102.177.182.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2112 (0x840)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Nov 26 09:38:16 2025 GMT
            Not After : Dec  6 09:38:16 2025 GMT
        Subject: CN=6926ca8c-ad16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:43:a8:07:a7:5b:02:e0:e3:5e:2e:9d:df:
                    50:02:c5:67:fa:07:b4:32:4a:ff:62:3a:63:53:9f:
                    17:15:5e:01:9d:a2:4a:9b:9f:8d:3f:3c:13:b7:05:
                    c6:c9:87:05:78:f5:f4:84:83:9a:6d:ab:5d:e8:f7:
                    69:3b:1a:58:44:b3:b8:f6:fd:01:54:fe:6b:48:ba:
                    e0:43:d6:75:55:9f:1c:78:fa:6a:65:0a:e9:9e:74:
                    7c:b6:44:42:14:df:6a:0e:e8:3d:8f:a3:78:c8:2e:
                    c8:82:1f:a9:fd:a5:7c:48:37:ee:9f:09:9c:a3:22:
                    77:61:9c:58:88:6c:24:f6:4e:e4:23:41:0d:bb:e4:
                    2c:cb:3b:5a:d1:a0:3a:0c:72:a0:c5:2a:1d:27:2c:
                    0b:b0:7b:64:98:72:8f:4d:f8:6e:f3:a9:56:42:c5:
                    9e:e8:6f:bc:59:d2:13:23:cc:c5:27:b9:0e:14:f1:
                    d4:8b:04:61:6a:7f:66:ff:aa:f3:39:f8:e0:3a:97:
                    1e:e5:54:4d:c0:49:e4:60:9c:bc:d2:ab:3e:ee:b1:
                    31:87:60:f6:ba:b0:6a:0a:4b:aa:22:b4:5a:e0:98:
                    33:8b:42:2f:19:63:17:d7:38:81:b5:0f:01:f2:d6:
                    71:bb:d0:8e:53:21:e3:c2:ed:03:de:f2:31:41:59:
                    84:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C7:D8:28:9E:96:D0:2F:33:5B:21:8E:82:9C:F6:25:96:03:D0:35
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/A4D3D332CAAB11F0BF62A89CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.177.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:15:cd:38:ab:ff:83:33:49:36:5f:c2:c3:a7:fe:a9:5d:49:
         3a:31:85:23:24:c5:b4:5f:25:6b:8c:b9:08:db:f2:10:e9:85:
         77:7e:57:6d:20:2c:95:5f:1f:e8:12:71:d2:32:20:54:b0:89:
         d6:94:4b:48:54:8e:6e:ea:03:9c:f0:e7:ba:4f:99:93:8b:55:
         a3:f5:6b:95:03:9d:e3:96:09:46:78:ea:1b:46:cb:5e:87:f4:
         77:d3:be:ef:5c:60:00:d3:e7:5c:9f:ec:2d:ef:09:fe:24:80:
         26:84:c0:5e:42:9c:36:76:70:f7:a9:15:84:39:4d:9b:92:c2:
         e8:8d:f0:b6:32:70:0b:f9:60:e2:bb:c4:1f:24:0c:d0:a4:36:
         71:7c:5c:ec:9a:f3:ba:08:b5:99:4b:ba:62:35:30:ed:cd:df:
         05:a1:5a:58:ed:1e:52:66:50:cb:4b:6b:c0:e0:c1:81:13:41:
         54:c8:fd:bc:92:fb:ef:43:6c:d8:72:d8:3e:47:91:64:2b:cf:
         c9:41:30:46:a4:af:19:2b:b3:1b:ce:0c:1b:e5:f9:31:e8:f5:
         07:cd:8f:be:5b:39:fd:b4:6d:8c:c1:6a:fb:46:ce:da:6b:38:
         85:b5:a3:5a:3f:2b:a6:5c:0f:eb:ee:c4:a6:9a:13:39:60:73:
         57:19:39:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:27:26 2025 by rpki-client