This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44DCAAE0F41C11F08E5A09F1DAE4EC9C.roa
File:                     44DCAAE0F41C11F08E5A09F1DAE4EC9C.roa (raw, json)
Hash identifier:          +m+80o5aBAqd9lAuv1oPsGeVklcVZi+zAmtCtK15uXQ=
Subject key identifier:   15:34:34:58:8D:77:A5:3D:EA:E7:8A:70:5D:2F:86:8E:0A:89:11:49
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       019784
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44DCAAE0F41C11F08E5A09F1DAE4EC9C.roa
Signing time:             Sun 18 Jan 2026 03:17:50 +0000
ROA not before:           Sun 18 Jan 2026 03:17:45 +0000
ROA not after:            Sun 25 Jan 2026 03:17:45 +0000
asID:                     154321
IP address blocks:        156.239.0.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104324 (0x19784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 18 03:17:45 2026 GMT
            Not After : Jan 25 03:17:45 2026 GMT
        Subject: CN=696c50de-7d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3e:e0:8b:cb:1b:fe:8b:e6:c1:01:41:be:7e:
                    4f:77:66:b6:8a:28:6d:fa:09:b9:6e:9b:a0:fd:a1:
                    d7:77:5c:8e:1b:b9:d2:e4:f9:c1:77:85:f9:2d:ba:
                    6e:7a:92:8f:e9:97:fa:1a:59:ec:a9:e6:71:3f:18:
                    7a:25:2f:09:aa:52:89:3a:76:77:c7:28:b5:d7:db:
                    75:ea:72:4a:3b:88:1a:08:31:ac:15:f3:b9:be:0d:
                    60:4c:e0:e1:19:23:c9:58:df:0c:58:a5:63:47:54:
                    73:4b:0b:6e:a9:44:cc:18:02:a6:a7:9e:03:cf:c0:
                    65:1a:7c:f1:1e:7f:d2:07:56:1b:17:34:d3:3e:fd:
                    44:59:c5:94:5e:e6:ca:1a:a7:61:36:d2:3d:99:0a:
                    11:3c:21:89:a5:2d:1b:22:ec:3b:56:26:50:a5:f8:
                    8c:3e:fd:40:4d:76:97:9c:11:94:0a:d2:14:4d:3c:
                    fb:97:75:04:74:e7:c8:f1:3d:95:f8:2b:bb:37:cb:
                    1b:45:e2:05:07:85:80:39:0e:08:2c:fb:e0:31:70:
                    30:f5:58:82:28:fb:2b:ac:8e:20:10:1d:8e:f4:39:
                    bc:b9:7a:40:79:2f:44:a1:a5:18:d2:20:c3:41:05:
                    aa:e2:f2:3c:3d:e2:5e:4d:0e:49:59:58:53:59:81:
                    ff:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:34:34:58:8D:77:A5:3D:EA:E7:8A:70:5D:2F:86:8E:0A:89:11:49
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44DCAAE0F41C11F08E5A09F1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:7c:ed:1d:23:6d:da:40:17:e3:fb:e2:ae:f6:76:c0:2b:5c:
         09:f2:07:1c:2f:d7:ed:9c:c2:b9:fc:f6:fa:93:df:f3:a7:f3:
         6d:ce:5d:e1:08:a2:b8:2e:00:bb:68:5d:2b:51:70:2e:22:05:
         03:b9:54:a2:27:1a:d8:cc:93:73:8c:60:5d:48:d5:c3:0c:52:
         68:32:6d:2c:aa:a9:f6:65:23:f4:04:d3:dc:8a:3f:1b:9c:f5:
         81:4b:6b:15:3e:3c:63:02:cf:6b:3f:3a:95:35:23:96:7b:ad:
         86:41:36:4f:e5:fd:20:a7:80:a3:d8:cc:1f:ab:4a:ec:6c:41:
         64:bd:58:4f:42:36:3e:be:1f:6e:d2:3e:d5:25:4c:81:c3:2f:
         bd:6a:3a:f8:6a:e4:ba:16:2f:02:c5:21:8d:ed:12:42:ba:32:
         b0:ac:51:6a:fa:2d:a6:1f:aa:6b:07:93:70:e0:f8:a8:93:df:
         0d:b4:ee:27:42:db:c1:0c:99:6a:80:99:49:6a:59:e4:de:67:
         09:77:09:0f:9e:3e:3a:6d:3a:26:6c:35:6b:7c:d3:43:5b:e2:
         f0:64:0a:53:f8:29:e5:f4:63:e6:bb:e8:d3:45:61:20:3c:92:
         ec:27:4f:1e:8d:2b:0e:58:2b:fa:e9:dd:d1:c4:cc:1a:35:18:
         06:8f:8b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----