This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/D58D35F0CFB411F08C034B9CDAE4EC9C.roa
File:                     D58D35F0CFB411F08C034B9CDAE4EC9C.roa (raw, json)
Hash identifier:          drYb/Mzs9lAY1gFSlF8WTX0aJ5jYnq/Lar8E/17vb1g=
Subject key identifier:   27:22:80:55:47:7D:D9:D3:69:61:73:A3:CC:38:77:11:FB:49:81:AB
Certificate issuer:       /CN=F361F1DAAR/serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D
Certificate serial:       0314
Authority key identifier: 86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/D58D35F0CFB411F08C034B9CDAE4EC9C.roa
Signing time:             Tue 02 Dec 2025 19:26:44 +0000
ROA not before:           Mon 08 Dec 2025 19:26:38 +0000
ROA not after:            Wed 08 Dec 2027 19:26:38 +0000
asID:                     327907
IP address blocks:        169.239.8.0/22 maxlen: 24
Validation:               Failed, certificate is not yet valid

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F1DAAR, serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D
        Validity
            Not Before: Dec  8 19:26:38 2025 GMT
            Not After : Dec  8 19:26:38 2027 GMT
        Subject: CN=692f3d73-039a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3e:7a:49:b0:3f:d4:f4:75:9e:e9:a9:9d:ed:
                    37:b2:bc:b8:63:e8:6c:60:93:f8:1e:9b:e0:d5:8b:
                    1d:1a:f3:d3:c4:2a:e6:35:78:d1:b7:f8:37:76:e6:
                    2f:72:dd:75:52:e0:81:c2:c1:89:55:f9:47:ba:69:
                    c6:66:1c:e2:da:7e:f6:ab:44:0e:3e:61:07:2b:22:
                    bd:57:b8:47:6f:37:cf:4c:fe:ec:a3:0e:e8:aa:17:
                    2a:df:61:78:12:31:68:ed:3a:2d:8f:50:57:b0:84:
                    8b:53:1e:62:07:9d:70:95:24:50:dc:d3:e3:d6:cd:
                    bf:d1:e5:9f:23:82:64:e9:a6:99:fe:25:52:00:99:
                    31:b0:1b:92:ee:97:88:7f:8d:36:8b:4e:aa:cd:f6:
                    9b:38:91:76:f7:0d:a6:e1:8b:29:c4:87:21:1c:9a:
                    d2:be:e7:f8:15:f7:a0:52:af:02:58:ca:fb:e0:2e:
                    e9:dd:ae:3d:73:66:c8:87:02:0b:e8:45:e8:fc:eb:
                    c6:af:a9:5a:13:36:90:0b:9c:1e:ee:ba:f3:c7:0b:
                    b7:20:77:86:6f:e5:67:20:12:ec:d9:25:ee:cf:66:
                    00:3a:60:cc:ab:2c:c9:7a:1b:77:f5:c7:1e:27:73:
                    bc:47:e1:e1:f0:cc:a4:7e:0e:37:e4:2f:0e:98:60:
                    67:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:22:80:55:47:7D:D9:D3:69:61:73:A3:CC:38:77:11:FB:49:81:AB
            X509v3 Authority Key Identifier:
                keyid:86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/D58D35F0CFB411F08C034B9CDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:a8:c2:7d:e5:aa:6a:23:26:ed:aa:af:e2:65:a0:d8:92:2a:
         9c:a4:cb:df:26:b1:51:af:b0:f5:d8:64:5c:dc:32:7a:24:47:
         ad:d8:66:03:6f:9b:28:05:75:be:32:68:73:b9:5d:8e:46:38:
         fb:39:74:6a:57:4e:0d:42:2b:c8:cc:d5:13:eb:ea:ff:9f:cb:
         f2:79:70:13:c0:ac:e3:b9:0e:ea:44:86:a3:7e:e6:d3:99:3d:
         b3:01:6f:11:6f:45:d7:da:81:55:8e:bf:67:f1:c8:59:9e:16:
         39:9a:15:33:b0:55:5b:55:5d:59:36:b0:1e:9a:8f:e1:5b:00:
         03:a7:c5:a0:30:3b:23:97:d9:c6:2b:21:53:6a:f5:64:ad:37:
         a3:50:10:87:57:51:45:0e:51:9c:2f:bc:8e:49:e8:15:5c:ea:
         4b:a2:5f:5f:43:e7:9c:32:90:17:58:94:e8:a8:8d:55:bd:d2:
         db:95:2e:69:52:2f:33:46:20:63:78:4b:2f:84:5b:ea:3b:e0:
         8a:cb:b8:57:6a:d1:80:09:88:2c:83:97:d7:a3:45:8d:05:35:
         09:c4:c7:a6:e9:70:0c:1c:cc:5f:d3:39:8f:68:47:cf:0d:33:
         49:71:e8:33:65:9d:62:f8:ce:92:37:6e:04:ae:5d:75:8f:4c:
         d2:6d:b2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 00:15:03 2025 by rpki-client