This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC34DB74265D11F099E8CBACDAE4EC9C.roa
File:                     EC34DB74265D11F099E8CBACDAE4EC9C.roa (raw, json)
Hash identifier:          LgmgXpD1jVIqlUT9fG16TAsjIdS8JEBVdFiHo2M7u0A=
Subject key identifier:   B8:49:54:59:FF:C3:F4:59:E0:88:FA:4E:E1:42:4B:55:8F:EF:35:CE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       017DD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC34DB74265D11F099E8CBACDAE4EC9C.roa
Signing time:             Thu 01 May 2025 07:28:50 +0000
ROA not before:           Thu 01 May 2025 07:28:44 +0000
ROA not after:            Fri 09 May 2025 07:28:44 +0000
asID:                     9009
IP address blocks:        154.218.217.0/24 maxlen: 24
                          154.218.219.0/24 maxlen: 24
                          154.218.224.0/24 maxlen: 24
                          154.218.225.0/24 maxlen: 24
                          154.218.227.0/24 maxlen: 24
                          154.218.242.0/24 maxlen: 24
                          154.218.244.0/24 maxlen: 24
                          154.218.249.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97750 (0x17dd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May  1 07:28:44 2025 GMT
            Not After : May  9 07:28:44 2025 GMT
        Subject: CN=681322b1-e3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ec:4f:63:6a:db:56:87:52:ac:be:79:56:c4:
                    a4:3c:87:09:40:c1:ae:bb:52:70:ac:9c:41:ed:c8:
                    ef:59:30:0d:bd:23:a1:74:62:d1:36:33:ff:5e:c3:
                    12:5e:d3:a4:79:94:40:29:1b:5d:fb:7e:c3:82:ca:
                    b4:35:47:77:c5:03:1b:bf:ab:4b:ef:13:8b:83:6d:
                    d7:fc:48:3f:5b:e8:eb:60:a8:48:ee:65:79:e5:da:
                    1c:32:5a:96:09:90:73:29:25:1b:0f:bf:b1:29:50:
                    a2:67:ea:4d:c4:2e:96:a7:12:ba:5a:ba:e2:39:a7:
                    9d:13:e9:10:60:f6:2a:c7:92:e8:48:7b:aa:fd:31:
                    a3:91:20:e7:8a:73:60:51:a8:0c:15:f8:0e:c8:8c:
                    03:f7:17:0c:b2:8c:42:43:67:71:58:2b:b0:d3:3d:
                    54:18:ca:45:dc:31:9f:7f:6b:b0:19:a5:3c:19:67:
                    ea:b1:aa:c8:53:a3:6b:27:53:06:6d:32:d8:b1:63:
                    c7:e7:ae:e7:2e:83:1a:b1:88:b9:b1:d8:7f:35:31:
                    2e:f0:f7:d0:2b:d4:86:27:3a:d8:89:9f:35:1a:5b:
                    fe:ee:12:57:d1:34:bb:11:7e:4c:e2:dd:73:0b:b4:
                    d4:81:31:bb:3b:86:d6:62:55:39:d1:c6:cb:0c:a3:
                    1f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:49:54:59:FF:C3:F4:59:E0:88:FA:4E:E1:42:4B:55:8F:EF:35:CE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC34DB74265D11F099E8CBACDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.218.217.0/24
                  154.218.219.0/24
                  154.218.224.0/23
                  154.218.227.0/24
                  154.218.242.0/24
                  154.218.244.0/24
                  154.218.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:c7:bb:ea:4f:96:00:73:c5:db:01:48:f8:84:6c:82:b5:73:
         58:74:5a:63:74:b0:d3:d6:87:c7:37:d9:00:ed:de:16:27:6a:
         60:6c:36:9e:cb:53:f7:97:b7:7a:e8:e8:7a:ac:67:54:5f:9e:
         dc:0d:bc:93:54:40:c5:78:a6:45:8f:22:fa:1c:1c:73:1c:6b:
         b2:de:1b:ec:e1:0d:18:a5:ce:6e:14:7e:be:5b:19:9e:30:e0:
         d0:27:0a:46:a0:9c:8a:e9:4c:50:39:b0:b5:ba:af:b2:30:99:
         26:20:ba:40:a5:5d:35:0d:61:de:64:97:20:ce:5a:fe:a4:27:
         5a:78:2b:64:f6:24:84:68:37:3a:12:89:ad:d4:60:67:8d:41:
         a6:68:16:4a:b8:11:82:dd:61:f2:d4:88:01:f9:cf:6f:9e:59:
         98:29:e7:cd:ac:82:26:57:52:6f:09:be:28:56:ca:a3:c3:16:
         9e:f8:18:2f:18:fc:6c:b8:4c:9b:21:ee:36:63:ad:3f:36:84:
         4c:e7:3f:68:6c:5c:d4:f7:ec:10:d8:bb:16:5f:21:af:4e:c9:
         4a:de:24:6f:50:0a:8d:87:36:a1:8a:0a:0b:f2:a1:d7:cb:43:
         17:bb:be:80:20:de:7a:05:fc:59:2d:b9:0e:2a:c5:9c:f0:88:
         52:52:d2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:23:03 2025 by rpki-client