This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59CA26DE265011F0B8F26FD3DAE4EC9C.roa
File:                     59CA26DE265011F0B8F26FD3DAE4EC9C.roa (raw, json)
Hash identifier:          7xCgHcd45P3OksNXJZXQFu3wIGmFd80/HJVL79e4yY8=
Subject key identifier:   9F:16:52:01:8F:DE:C3:B2:3E:F3:C9:6A:78:50:82:8C:3C:CF:E3:9C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01510E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59CA26DE265011F0B8F26FD3DAE4EC9C.roa
Signing time:             Thu 01 May 2025 05:51:40 +0000
ROA not before:           Thu 01 May 2025 05:51:35 +0000
ROA not after:            Wed 07 May 2025 05:51:35 +0000
asID:                     26617
IP address blocks:        45.195.146.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86286 (0x1510e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  1 05:51:35 2025 GMT
            Not After : May  7 05:51:35 2025 GMT
        Subject: CN=68130bec-97ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:4c:c9:17:8f:6a:ac:98:7a:4a:31:32:17:
                    93:c7:2a:d7:6c:05:ef:c8:18:1e:3b:da:f4:24:2a:
                    9e:50:78:ec:6d:36:06:a4:b5:58:6e:5f:c0:e0:73:
                    7e:0b:66:c5:09:f7:aa:c6:b1:fe:3a:67:20:12:0a:
                    bc:a9:17:b6:b4:83:0b:29:43:2e:dd:e2:0a:06:e7:
                    09:1e:b3:3d:21:3f:68:5f:1d:7f:39:1f:6a:e0:5e:
                    58:29:96:35:7c:fa:91:eb:71:40:aa:18:7b:05:8d:
                    29:9b:e7:c7:df:15:e4:74:a9:73:48:c9:cf:6d:60:
                    d9:fa:58:61:21:76:c8:81:12:74:eb:94:28:51:6c:
                    c5:bd:e0:d4:88:e8:e0:69:6f:e8:34:5c:77:2d:1b:
                    80:6d:ea:2e:09:13:59:bd:32:40:d6:30:5e:3f:f4:
                    cf:38:a0:1b:10:88:85:7d:13:63:f2:5a:3f:b7:0c:
                    f3:dc:73:0f:8e:42:38:9d:0f:d7:67:92:3b:8a:39:
                    e2:ea:1e:11:62:87:4c:81:0c:2d:78:1a:4f:be:f0:
                    b2:3b:91:32:a3:8e:77:d9:c6:8e:5d:cc:de:71:52:
                    1e:a6:2d:ff:3e:d9:6d:66:f4:14:af:e1:0d:58:9b:
                    f1:7e:cd:f6:fb:d9:82:ec:c4:05:4c:fa:36:ba:25:
                    26:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:16:52:01:8F:DE:C3:B2:3E:F3:C9:6A:78:50:82:8C:3C:CF:E3:9C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59CA26DE265011F0B8F26FD3DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:6b:bd:e8:82:e5:e2:da:48:c5:b9:90:95:f3:2b:17:9e:66:
         bf:84:8e:61:b6:8d:65:24:5d:b1:df:a4:6a:e8:c2:19:49:c3:
         9f:c8:ad:4b:e0:b2:e4:2a:ca:d2:cb:3e:c4:34:10:67:3f:77:
         d8:71:d8:ee:22:de:a2:97:84:cb:00:db:6d:92:4b:83:e4:c8:
         c2:a9:24:98:9d:59:2e:cf:2a:9d:0b:7a:31:fb:a7:3b:1b:5f:
         bb:02:60:98:f9:b7:6e:8a:bb:9f:9d:06:c2:fb:6b:57:d3:23:
         0b:61:ef:d0:dd:05:74:41:c1:4e:ad:66:1a:12:a3:f3:14:43:
         35:91:3b:d7:45:ae:41:c9:1d:b5:6c:28:69:0e:23:14:d0:a1:
         b1:9b:e1:33:3c:fb:95:f2:f8:27:40:f4:20:60:84:0c:0d:a7:
         ce:64:9b:86:fd:b1:2f:9b:c0:68:81:82:ec:d7:a9:1e:28:41:
         fb:97:cd:7f:a7:95:69:80:86:91:c1:00:c9:e6:2e:5c:65:e3:
         99:ff:cf:50:4b:4a:34:f0:7c:2e:d4:3b:97:35:76:ae:4e:96:
         bd:75:83:ed:7a:90:68:5f:16:54:49:84:06:b5:39:76:e5:85:
         ef:b1:00:98:90:c2:fb:9b:e6:a2:55:6a:6b:ba:98:fe:bb:c9:
         6a:35:de:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----