This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E835DBC259311F0B188FBE1DAE4EC9C.roa
File:                     9E835DBC259311F0B188FBE1DAE4EC9C.roa (raw, json)
Hash identifier:          1Rq4Lf6QNgWeGCCJGMli5BaUD3EOS6JXCJpZ8nEGNMM=
Subject key identifier:   F0:66:01:94:C9:02:39:5B:15:A0:94:7E:20:44:2E:4B:AF:FF:34:51
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       017D12
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E835DBC259311F0B188FBE1DAE4EC9C.roa
Signing time:             Wed 30 Apr 2025 07:20:40 +0000
ROA not before:           Wed 30 Apr 2025 07:20:36 +0000
ROA not after:            Fri 09 May 2025 07:20:36 +0000
asID:                     9009
IP address blocks:        154.216.193.0/24 maxlen: 24
                          154.216.197.0/24 maxlen: 24
                          154.216.198.0/24 maxlen: 24
                          154.216.201.0/24 maxlen: 24
                          154.216.205.0/24 maxlen: 24
                          154.216.206.0/24 maxlen: 24
                          154.216.210.0/24 maxlen: 24
                          154.216.220.0/24 maxlen: 24
                          154.216.244.0/24 maxlen: 24
                          154.216.248.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97554 (0x17d12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 30 07:20:36 2025 GMT
            Not After : May  9 07:20:36 2025 GMT
        Subject: CN=6811cf48-be03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c7:ac:73:f4:28:fe:18:b0:45:77:41:a2:d6:
                    07:13:50:81:65:b8:2c:df:69:0e:df:dd:e1:f0:50:
                    8d:ee:55:23:6d:30:d6:70:ea:92:e8:43:74:f4:a3:
                    31:cc:4c:29:e1:01:d6:e5:51:9c:4c:c6:e8:38:2d:
                    80:03:0b:31:bf:67:af:3d:12:ae:5f:6b:f9:9e:9b:
                    0f:fd:e4:13:fd:c8:5c:e9:a8:3d:c4:c7:18:71:0b:
                    51:88:89:fd:2f:c9:50:ae:a4:18:c2:25:11:b4:53:
                    87:b2:53:64:5e:7e:54:0c:ba:57:4a:d2:d0:38:de:
                    cf:e1:35:3f:b2:0b:d5:da:bf:c6:40:16:1e:5b:87:
                    b9:a1:33:00:25:ca:a6:9f:f0:e3:ad:f5:0f:22:24:
                    8a:fd:2a:8c:a9:d3:90:2a:8a:7f:4b:9a:d4:44:61:
                    68:c0:0d:32:ef:fb:51:02:bf:bc:4a:70:a7:a8:14:
                    d0:a8:b5:1b:a5:ee:d4:67:96:17:dc:91:b0:d4:66:
                    ae:2f:b2:3a:02:fd:c5:f5:be:1c:f3:e0:83:e4:f4:
                    de:9a:94:35:9a:20:58:80:05:95:b7:ba:a3:43:7a:
                    f8:28:a9:8a:76:b5:69:b0:2f:a6:84:06:43:84:01:
                    ad:dd:7e:c0:0e:d8:d8:8e:44:c1:d3:72:cf:bf:f0:
                    06:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:66:01:94:C9:02:39:5B:15:A0:94:7E:20:44:2E:4B:AF:FF:34:51
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E835DBC259311F0B188FBE1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.216.193.0/24
                  154.216.197.0-154.216.198.255
                  154.216.201.0/24
                  154.216.205.0-154.216.206.255
                  154.216.210.0/24
                  154.216.220.0/24
                  154.216.244.0/24
                  154.216.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:cf:03:42:3e:41:32:9c:27:c1:19:69:9c:75:06:f8:6c:30:
         d5:c0:fb:6f:0f:9e:cd:f6:95:a9:2e:94:71:33:95:07:df:00:
         9e:d5:da:1c:62:df:2d:b8:4d:09:08:bf:02:2d:21:83:c1:ac:
         c2:99:5b:e4:78:d8:39:ba:e2:59:00:55:d2:0b:49:bc:cc:50:
         98:1b:82:2f:4c:62:3a:c1:bc:19:68:40:48:49:b2:ff:9e:58:
         c0:31:e3:2f:b6:d6:04:db:5f:d0:93:3e:de:6b:58:d3:b5:5f:
         71:49:56:04:1c:82:fd:57:00:69:7e:0d:d1:ad:1e:67:c6:59:
         82:12:68:43:59:1c:88:92:77:a7:14:73:c9:72:a8:63:ab:56:
         e3:cf:44:ef:1a:6d:f3:41:e5:e3:c4:4c:a4:1f:3f:e2:f1:cf:
         a2:f7:45:68:56:a6:3b:5c:25:90:7f:b3:83:a3:d7:42:5b:38:
         1b:61:92:81:d0:e9:48:00:c8:2b:73:e2:79:67:cf:d3:e9:05:
         f0:ab:a5:a6:50:34:2e:70:3d:e3:c6:ea:f2:fd:b1:a4:00:b7:
         0b:b2:ea:9b:24:5b:97:a9:fd:93:c3:8d:bf:d9:c8:f1:3f:6c:
         eb:03:1b:02:7b:dc:0b:d2:e1:bf:58:d8:d8:1d:ea:24:63:e4:
         66:75:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 21 02:22:43 2025 by rpki-client