This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0222DE16355B11F0B162DDF2DAE4EC9C.roa
File:                     0222DE16355B11F0B162DDF2DAE4EC9C.roa (raw, json)
Hash identifier:          wq/Y5lyCUe7syQNcLj90VOpqpXvcZDCavAzj03iK4/k=
Subject key identifier:   A6:77:46:16:99:7F:91:DC:87:66:ED:63:79:43:E6:EC:0F:43:46:31
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       018199
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0222DE16355B11F0B162DDF2DAE4EC9C.roa
Signing time:             Tue 20 May 2025 09:15:45 +0000
ROA not before:           Tue 20 May 2025 09:15:40 +0000
ROA not after:            Fri 27 Jun 2025 09:15:40 +0000
asID:                     54801
IP address blocks:        154.213.176.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98713 (0x18199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 20 09:15:40 2025 GMT
            Not After : Jun 27 09:15:40 2025 GMT
        Subject: CN=682c4840-3dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ad:0d:d9:6c:3f:cc:61:43:07:7b:f3:86:b0:
                    b1:45:6e:71:00:dc:b9:7c:87:cc:3d:91:37:14:6d:
                    26:55:f1:7c:29:a5:5c:fe:37:c1:4f:7c:c4:ff:e8:
                    6a:d2:84:c7:7b:12:1e:75:dc:53:b5:5f:a4:3d:6a:
                    ef:9c:67:00:03:ce:5b:c3:c0:fd:b3:97:44:a1:3b:
                    6a:ea:df:c3:3f:c0:c0:31:63:de:97:eb:5d:ea:8a:
                    95:65:3b:68:0d:8a:70:06:83:89:c0:d9:50:f8:38:
                    41:33:e2:f1:5a:db:50:57:7d:ac:56:d4:3d:73:69:
                    93:56:d4:92:4c:47:65:59:75:f3:d9:39:92:10:a3:
                    e2:29:d3:22:85:c8:dd:ac:92:5c:e8:5d:a5:96:07:
                    59:ce:c8:f4:72:84:1a:f2:b3:9e:02:c7:c2:f7:30:
                    bb:6f:31:2b:8a:a4:7b:14:08:05:9c:b5:f5:8a:62:
                    b6:a4:92:41:58:0c:89:b7:88:a7:49:58:22:63:7e:
                    82:a9:52:8d:20:9f:93:17:79:09:31:be:c6:65:9b:
                    c8:cf:57:58:83:17:39:55:df:9c:1f:b2:a6:4f:cf:
                    2f:b4:6e:13:64:2f:62:2a:dd:40:55:63:b1:b7:89:
                    7c:16:75:b5:1f:16:32:af:12:56:96:bf:8b:b8:b1:
                    be:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:77:46:16:99:7F:91:DC:87:66:ED:63:79:43:E6:EC:0F:43:46:31
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0222DE16355B11F0B162DDF2DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.213.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7c:32:b8:15:af:cb:62:6e:13:ea:bf:42:60:2d:93:f9:92:6a:
         10:6c:4c:2b:e8:45:49:a9:0b:4d:5a:1a:9c:51:db:85:fd:a0:
         16:74:08:39:2c:fa:0f:4f:ad:86:ad:0e:55:10:6f:ed:74:21:
         c7:5e:e0:78:93:0d:fc:84:28:1d:40:02:c0:26:ad:f8:05:ca:
         32:81:db:a8:1a:60:c6:cb:4c:87:47:cf:10:99:28:46:45:4b:
         65:12:dc:f0:c1:42:a1:2c:89:d1:1d:e7:e3:26:0b:a6:f8:a6:
         b8:de:0c:11:f2:6c:cc:7b:a6:cd:6b:c8:97:77:be:3a:a9:87:
         e2:0f:c8:94:8b:c0:fd:1b:3f:77:2b:e0:67:0f:73:21:0a:b1:
         6d:70:ab:40:51:31:93:ca:40:91:19:61:49:26:bc:a6:fe:ed:
         1d:5e:58:ed:ee:93:e4:9e:aa:73:ca:8d:87:7c:ef:5e:2e:53:
         05:67:4b:02:ac:e0:4a:78:b6:08:31:62:cc:a0:cd:88:e9:ac:
         47:0f:4d:83:d3:04:b5:de:90:b8:72:27:46:0f:83:63:77:e5:
         96:0b:2e:ac:8e:96:24:da:1c:10:ae:fa:70:18:09:b8:cf:f7:
         f2:d5:13:57:e3:44:13:d5:fe:28:2e:61:f7:b6:80:dd:8c:5e:
         40:e5:20:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----