This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7879394241311F08FC136D1DAE4EC9C.roa
File:                     C7879394241311F08FC136D1DAE4EC9C.roa (raw, json)
Hash identifier:          mJL/3pAqLmUJ1RwlHOrG8q1jubjWBIzBeDqIopaziyA=
Subject key identifier:   BE:48:36:E4:D2:D9:C0:BA:B6:4A:50:82:05:A2:5F:C2:29:A6:EB:61
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       017B56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7879394241311F08FC136D1DAE4EC9C.roa
Signing time:             Mon 28 Apr 2025 09:33:02 +0000
ROA not before:           Mon 28 Apr 2025 09:32:57 +0000
ROA not after:            Fri 30 May 2025 09:32:57 +0000
asID:                     142032
IP address blocks:        154.201.64.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97110 (0x17b56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Apr 28 09:32:57 2025 GMT
            Not After : May 30 09:32:57 2025 GMT
        Subject: CN=680f4b4e-cba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:34:48:07:60:20:0e:44:48:6c:85:e9:33:81:
                    7e:37:53:2b:2a:b4:e4:d4:a9:cc:3b:fa:7d:8c:8a:
                    23:b5:25:d3:5c:21:99:00:c1:3c:91:2a:73:53:f6:
                    ff:8a:64:b0:96:3d:f4:f1:5a:f1:8c:05:9e:ed:aa:
                    c4:21:07:bb:1d:fa:78:a6:fa:46:04:83:6b:33:14:
                    42:39:35:19:57:1f:c5:ce:ab:8b:08:ac:0d:b0:b4:
                    45:1b:3a:f2:1b:bf:69:e6:00:6a:8b:a6:26:c7:7d:
                    96:9d:5f:75:4f:6f:b7:f6:08:e2:38:99:d4:dd:7c:
                    fe:a9:e4:51:a0:e5:78:74:50:b3:d6:77:7e:6c:e8:
                    36:e3:aa:ce:14:42:a8:8a:1a:a0:18:fe:03:62:83:
                    4e:1b:6a:8f:44:1f:65:be:31:44:b1:06:99:b9:8f:
                    f9:5c:04:fa:39:10:aa:dd:78:85:72:99:e7:a2:55:
                    e0:c9:b6:3e:cb:6e:4b:39:d1:54:1e:2d:cf:8b:d0:
                    af:d9:b7:21:16:e4:da:a5:76:f2:e5:91:67:d4:56:
                    ef:b1:0b:09:0f:2a:54:63:54:c2:f4:39:0d:2b:ab:
                    81:7a:97:d7:ff:be:04:34:2b:c5:6e:a6:9f:e6:79:
                    8b:5d:e8:e0:d5:91:97:2a:91:84:ea:f2:1e:34:04:
                    91:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:48:36:E4:D2:D9:C0:BA:B6:4A:50:82:05:A2:5F:C2:29:A6:EB:61
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7879394241311F08FC136D1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:a9:c0:2e:ac:27:6a:9e:c1:21:d5:4d:39:53:a3:ac:35:69:
         3e:7a:5c:82:51:cb:2e:cb:2d:80:eb:28:f0:7a:52:90:14:08:
         67:79:23:d5:b5:8d:c4:1e:01:68:3a:ca:80:c1:4a:77:c7:11:
         52:8a:9a:43:09:9b:c6:67:08:58:62:61:13:12:61:9d:f7:d4:
         22:0a:09:49:b8:2f:2b:2c:c2:8e:87:31:33:59:e8:36:bb:a7:
         99:e2:ff:8b:f9:7d:6d:23:f8:37:d6:af:28:bd:52:ea:62:a3:
         48:1a:b3:c1:4d:92:05:d6:0c:3c:92:63:d8:b8:50:e8:72:e6:
         56:b2:cf:cb:00:66:86:8f:39:6e:64:b1:3c:11:02:26:e1:25:
         28:05:a2:41:ec:e6:ef:f1:4e:d7:a6:06:f0:4c:56:ca:62:ef:
         84:3e:10:83:24:bc:9a:eb:04:e7:6c:f4:9f:d9:b9:d6:fd:b7:
         1b:27:12:4b:0b:49:4a:a8:f9:d8:f6:61:d0:55:b1:d8:fb:d7:
         71:74:28:77:a5:5d:af:9c:63:c8:88:4e:fe:75:3a:35:80:87:
         84:96:12:85:b4:a9:9d:c0:8c:d7:a7:72:72:07:74:23:28:37:
         27:fa:7e:f0:e4:b3:a0:22:a6:66:73:18:90:17:9d:e9:58:47:
         03:d9:0a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----