This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1553F56AF11711F0B84D9A8EDAE4EC9C.roa
File:                     1553F56AF11711F0B84D9A8EDAE4EC9C.roa (raw, json)
Hash identifier:          oycAQXF6fEQpbS4RxZ3yp+JlxdKzREYiTMDWVjiuS84=
Subject key identifier:   FA:B5:24:73:2B:C4:CA:67:E8:70:5C:4E:6A:6C:E4:30:F5:3A:08:9D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01B493
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1553F56AF11711F0B84D9A8EDAE4EC9C.roa
Signing time:             Wed 14 Jan 2026 07:03:10 +0000
ROA not before:           Wed 14 Jan 2026 07:03:05 +0000
ROA not after:            Sun 25 Jan 2026 07:03:05 +0000
asID:                     54801
IP address blocks:        154.201.40.0/23 maxlen: 24
                          154.222.136.0/23 maxlen: 24
                          154.222.146.0/23 maxlen: 24
                          154.223.230.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111763 (0x1b493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan 14 07:03:05 2026 GMT
            Not After : Jan 25 07:03:05 2026 GMT
        Subject: CN=69673fad-a15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:5f:e3:9b:9c:a1:45:88:7c:d6:f1:de:26:
                    a4:da:20:81:fa:40:23:71:f5:04:fc:b2:92:f5:16:
                    38:d2:57:a9:2d:fe:12:ad:94:f4:de:f3:ea:f5:78:
                    df:b3:0f:ce:b7:74:05:20:f1:88:e6:41:dd:0b:cd:
                    b5:9a:d8:8c:b2:1a:23:77:af:bb:4f:fb:00:1f:84:
                    fc:fb:23:3d:c8:e1:87:a9:ac:5b:4a:0b:e3:53:df:
                    62:96:d3:12:73:06:2f:8a:ab:0e:4a:f5:41:43:97:
                    d8:54:85:a6:0b:49:ab:38:f3:da:2d:d5:76:ea:29:
                    13:bd:6c:82:69:49:d4:c0:5c:0a:2a:db:35:8a:0d:
                    cb:fb:6a:71:c4:b4:0f:cd:be:a1:0c:60:7e:5c:74:
                    49:f3:05:2f:03:f9:39:de:66:3b:42:d5:49:48:7f:
                    12:21:c6:d6:f1:c1:71:e4:2d:a9:37:b0:93:0a:53:
                    62:8d:ad:5d:54:19:7b:c1:67:67:ae:05:9c:20:0e:
                    68:ba:8a:44:7c:36:8f:19:5e:3e:66:13:84:f2:a5:
                    11:a6:f5:db:d9:9c:89:7c:00:0a:b3:68:f6:d2:1d:
                    21:65:8e:ad:16:54:08:a5:ae:40:04:34:c0:ea:cc:
                    b8:8d:0c:37:b7:d8:3e:b3:6f:a1:db:d5:50:dc:b5:
                    cc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B5:24:73:2B:C4:CA:67:E8:70:5C:4E:6A:6C:E4:30:F5:3A:08:9D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1553F56AF11711F0B84D9A8EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.40.0/23
                  154.222.136.0/23
                  154.222.146.0/23
                  154.223.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:5c:0b:dc:5c:68:14:4a:75:f7:21:e9:48:4a:e3:4a:47:58:
         a1:08:fb:a9:6e:d2:8e:ca:5f:94:44:e9:1b:2e:61:f2:0a:5d:
         a7:f3:41:91:97:f8:4d:d3:ac:43:eb:5d:b7:9b:92:0d:d1:d2:
         ed:bb:9a:35:7c:7b:97:2c:da:fa:5d:57:3d:48:bd:ee:38:b9:
         8b:b0:9f:41:40:e9:68:b0:8a:47:31:a1:03:16:9f:72:02:f4:
         fd:89:c3:16:33:6c:0d:07:8e:c8:16:08:9e:2b:3b:d9:92:ff:
         4e:54:3c:c4:83:98:27:64:d6:c7:37:1a:52:c7:6b:1c:6c:f9:
         2a:a4:37:0a:72:a4:01:94:20:78:2e:7f:44:8c:0c:7c:54:60:
         9c:e5:0f:8f:6e:c7:90:e9:d1:fc:3a:4c:be:eb:8e:9c:84:52:
         52:25:a8:c5:14:49:01:d5:df:4c:0b:e9:3d:52:0e:24:6e:52:
         f1:9f:21:16:13:b5:f6:04:2f:a0:fb:6e:b9:14:60:b2:0d:bd:
         8f:06:be:6a:24:d1:a7:e8:a6:55:97:89:43:8e:3b:c5:6e:37:
         40:27:1e:03:16:f1:32:d2:38:ae:70:35:51:00:18:33:de:20:
         5d:b7:0b:77:86:bc:ce:5f:66:d2:14:4f:1f:38:0c:b1:71:14:
         64:60:ab:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:40 2026 by rpki-client