This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/765F8FF82BED11F0A8F162DDDAE4EC9C.roa
File:                     765F8FF82BED11F0A8F162DDDAE4EC9C.roa (raw, json)
Hash identifier:          NuJArvrq2Nss/KkjhBMF/GKn/DTBwZE0Ee6Eq6PdWLE=
Subject key identifier:   8A:95:DC:D7:4A:09:38:C3:95:F9:99:16:41:1C:B3:D5:A4:CA:35:BA
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       017F84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/765F8FF82BED11F0A8F162DDDAE4EC9C.roa
Signing time:             Thu 08 May 2025 09:18:54 +0000
ROA not before:           Thu 08 May 2025 09:18:50 +0000
ROA not after:            Sun 18 May 2025 09:18:50 +0000
asID:                     63888
IP address blocks:        154.207.64.0/20 maxlen: 24
                          154.207.80.0/22 maxlen: 24
                          154.207.88.0/23 maxlen: 24
                          154.207.98.0/23 maxlen: 24
                          154.207.100.0/23 maxlen: 24
                          154.207.104.0/23 maxlen: 24
                          154.207.126.0/23 maxlen: 24
                          154.207.142.0/23 maxlen: 24
                          154.207.188.0/22 maxlen: 24
                          154.207.220.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98180 (0x17f84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May  8 09:18:50 2025 GMT
            Not After : May 18 09:18:50 2025 GMT
        Subject: CN=681c76fe-056d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:2f:3c:ff:ca:fe:4e:56:25:3c:94:73:c3:
                    88:ff:d5:21:ef:ec:93:86:b3:7b:dc:9a:e1:30:23:
                    87:60:30:3e:d6:11:1a:1c:7f:69:2c:58:7d:ad:30:
                    6a:c0:b6:13:44:70:15:91:38:c7:1f:c0:2a:8a:a4:
                    b4:be:a5:19:43:f3:cc:43:46:49:ba:09:5f:59:d2:
                    31:77:4d:20:9a:db:99:fd:7d:71:f8:72:7b:99:d4:
                    e0:dd:2e:93:b2:20:8a:62:65:49:97:dc:bb:f5:b8:
                    38:da:f0:38:d1:ca:fc:87:ac:09:66:ca:5c:97:f0:
                    d3:99:35:1a:a6:7a:ac:3a:c2:33:fa:b0:b7:c2:7a:
                    01:ee:4b:ba:26:71:87:93:da:6e:e4:a5:97:f4:05:
                    0f:d3:18:06:6e:e1:58:d9:09:2e:2e:c5:19:bb:e6:
                    6e:a6:91:5d:29:14:2d:63:22:72:bc:04:d8:99:ae:
                    57:c7:78:04:0f:eb:fe:ff:27:32:0e:5f:42:95:22:
                    b8:33:57:78:3d:6a:92:dd:f9:a9:5c:74:2f:36:ce:
                    16:87:db:70:89:26:8c:19:89:46:5f:1c:7a:15:11:
                    54:76:f6:2a:4c:6d:f7:c2:e4:aa:8f:55:ea:b4:7e:
                    b8:e3:1e:be:32:7a:d5:18:01:0e:b1:f8:c4:20:5f:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:95:DC:D7:4A:09:38:C3:95:F9:99:16:41:1C:B3:D5:A4:CA:35:BA
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/765F8FF82BED11F0A8F162DDDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.207.64.0-154.207.83.255
                  154.207.88.0/23
                  154.207.98.0-154.207.101.255
                  154.207.104.0/23
                  154.207.126.0/23
                  154.207.142.0/23
                  154.207.188.0/22
                  154.207.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:7e:64:03:e0:20:6d:5d:9f:d6:68:bb:e4:62:51:08:c4:a1:
         63:ce:f5:ee:fa:86:b1:0f:fd:ab:46:d8:c6:75:11:8c:1d:e6:
         84:c8:53:df:aa:61:e5:89:a3:56:86:15:ef:f8:ba:64:76:3f:
         9e:b0:5d:6f:94:cf:32:27:a9:82:59:a8:c1:e4:22:a8:a7:3c:
         af:44:95:b8:ea:3c:d7:b0:e9:66:c9:c1:38:28:99:cd:28:68:
         b0:f0:40:9c:1b:cd:d2:49:69:4a:53:a2:eb:f8:d7:27:e1:ba:
         f4:f7:12:6c:ae:d5:fc:0e:a6:bf:a6:79:5e:b5:ef:c4:2c:f1:
         97:da:16:50:d7:a6:7e:1e:b9:00:60:8f:32:5f:53:0f:71:b5:
         34:6c:d0:18:2f:b9:bd:31:23:63:25:0a:17:20:af:4b:a7:42:
         bb:08:05:42:6d:89:5e:30:66:03:b8:90:c2:b1:ed:5e:5e:9b:
         05:56:21:2e:ff:f3:1d:1f:0d:13:80:16:12:a5:35:e7:4f:30:
         88:a1:95:0a:9a:76:81:d7:70:e0:0c:27:a1:5e:30:ab:92:9b:
         87:25:2a:85:41:41:f8:a1:59:19:4a:67:ac:64:02:85:a2:7b:
         31:7e:77:e3:77:0e:54:2d:2e:3c:ae:95:aa:d1:c3:e5:b9:18:
         45:77:58:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 05:42:53 2025 by rpki-client