This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E00BC3A2AF911F08D400A7EDAE4EC9C.roa
File:                     8E00BC3A2AF911F08D400A7EDAE4EC9C.roa (raw, json)
Hash identifier:          3IWq9ViWpqUa80vv2uYc+Lk8uw95I5As8BaAPX3tHQ8=
Subject key identifier:   2A:21:7C:8A:5C:79:FC:0C:09:3D:E6:0B:58:90:6F:65:3E:82:70:70
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       017F2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E00BC3A2AF911F08D400A7EDAE4EC9C.roa
Signing time:             Wed 07 May 2025 04:12:57 +0000
ROA not before:           Wed 07 May 2025 04:12:52 +0000
ROA not after:            Tue 27 May 2025 04:12:52 +0000
asID:                     400619
IP address blocks:        154.193.192.0/20 maxlen: 24
                          154.193.208.0/21 maxlen: 24
                          154.193.216.0/21 maxlen: 24
                          154.193.224.0/20 maxlen: 24
                          154.193.240.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98094 (0x17f2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May  7 04:12:52 2025 GMT
            Not After : May 27 04:12:52 2025 GMT
        Subject: CN=681addc9-5354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:78:e7:9e:a9:ad:69:e8:19:d8:02:91:a3:e6:
                    86:db:1a:6e:be:30:ad:27:98:87:fe:59:77:c5:63:
                    19:04:a1:a0:47:90:55:7b:86:a2:cd:13:d0:22:75:
                    5f:60:cc:5b:54:4e:f6:61:db:9e:06:ad:42:48:e8:
                    88:7c:99:c1:94:a8:77:f0:0a:d4:25:3a:b4:20:64:
                    1d:96:46:7f:81:e3:ab:68:4c:12:40:5d:3a:b0:a7:
                    de:8d:dd:dc:92:f5:5b:86:8c:e1:e5:f8:d0:02:4e:
                    48:8e:90:de:36:4f:ca:20:ab:dd:2c:e2:15:b5:aa:
                    87:cc:17:e1:2e:dc:89:fc:11:45:00:fb:f3:09:62:
                    bc:54:75:62:82:87:dc:bc:64:96:39:02:ca:e0:e6:
                    ad:fc:80:0a:86:97:db:21:d9:1a:4c:16:db:5d:f9:
                    43:ef:bf:96:d6:83:3b:14:99:6e:53:16:be:95:18:
                    85:73:58:f6:4b:77:f6:ec:64:4d:9f:97:4b:74:66:
                    c7:7e:00:18:02:38:6e:5b:51:23:70:e1:f7:c2:c4:
                    55:d6:dd:a5:41:8e:17:ad:c3:cf:e8:a7:c7:1e:11:
                    b5:08:a6:47:4a:2a:4a:51:57:64:8f:5b:87:d7:4e:
                    4a:62:a1:a6:65:42:24:28:58:24:34:d4:9f:eb:58:
                    f8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:21:7C:8A:5C:79:FC:0C:09:3D:E6:0B:58:90:6F:65:3E:82:70:70
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E00BC3A2AF911F08D400A7EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.193.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         bc:63:d9:47:a3:da:e2:e8:6d:02:ef:6a:17:58:b8:aa:42:d7:
         97:38:f6:e1:5f:1e:b4:c1:8b:16:54:cd:c5:76:4b:26:a8:7a:
         c4:51:28:71:26:96:bf:90:86:f0:db:2f:43:81:17:58:47:0e:
         48:a6:ab:de:3c:cd:8a:2f:d1:f2:d4:5b:75:49:da:10:8a:5a:
         1f:56:11:28:68:d3:41:f8:c6:c3:16:e2:61:75:10:a4:2d:47:
         34:8d:af:05:5c:72:35:f1:b0:34:4a:a5:26:9b:7b:6f:22:af:
         d2:4d:8d:78:3c:55:e6:ab:70:c6:82:24:a9:29:b7:f2:00:87:
         12:dd:01:e6:63:0b:be:80:da:e8:b6:55:38:97:86:ef:0e:2f:
         f2:fe:18:8d:b1:7f:67:77:9c:5d:86:f4:3b:93:dc:77:a9:a8:
         be:eb:d3:f1:44:e5:66:cc:dd:ce:82:5f:2a:71:62:ed:8c:48:
         fd:80:f7:72:2a:c2:86:dc:02:22:6e:b0:cb:13:08:48:95:83:
         3b:c6:2d:b1:1f:ab:7b:ad:7a:34:71:95:cb:5e:4c:6d:7e:f4:
         4b:e5:6c:5b:a1:b1:53:9a:74:9c:d9:67:34:3f:65:fa:a2:a2:
         4a:1c:bd:f8:89:86:96:2a:17:9d:a6:f1:c1:f6:32:4b:e3:5f:
         67:9a:9c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:52:20 2025 by rpki-client