This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C7F43FC8CDD11EE99391D634AD9E6FC.roa
File:                     2C7F43FC8CDD11EE99391D634AD9E6FC.roa (raw, json)
Hash identifier:          I5OYo9TcVfKuuvjd2vkSyISTC23bo8lPVNDpk/Jx2yo=
Subject key identifier:   28:90:EE:F2:EC:27:E6:4D:46:34:8D:35:F6:3F:F5:86:BE:2B:03:8A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       54ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C7F43FC8CDD11EE99391D634AD9E6FC.roa
Signing time:             Mon 27 Nov 2023 04:26:46 +0000
ROA not before:           Mon 27 Nov 2023 04:26:43 +0000
ROA not after:            Tue 26 Dec 2023 04:26:43 +0000
asID:                     62240
IP address blocks:        154.195.111.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21741 (0x54ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 27 04:26:43 2023 GMT
            Not After : Dec 26 04:26:43 2023 GMT
        Subject: CN=65641a86-45da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:05:c8:58:03:76:8d:b9:e2:62:e8:95:93:
                    af:ff:00:a4:3a:eb:8a:37:7c:82:ca:b9:43:d0:da:
                    b9:ad:45:c5:b1:f1:14:8e:b2:bd:3c:89:1f:f4:7a:
                    b6:c3:59:26:4a:d9:5c:8d:e8:cd:99:d6:49:fe:7e:
                    9c:b6:e6:93:0d:01:d7:73:96:f9:22:46:e3:ca:45:
                    c9:b7:f3:d1:ce:0a:71:a5:9a:98:b9:eb:48:f3:ff:
                    75:70:3b:38:e2:13:8c:8c:35:f7:5c:5c:31:9a:eb:
                    93:a0:15:53:53:4b:fd:4c:c6:32:07:f7:88:11:03:
                    d8:d2:d9:8b:e3:20:cb:b5:51:4b:2b:82:3d:35:58:
                    97:4f:4b:eb:ed:d6:f6:2a:3d:43:86:a8:30:86:1f:
                    7e:32:21:68:bf:cc:cd:fb:24:75:d7:54:de:30:4c:
                    67:64:5d:f2:a2:14:6a:c2:50:75:05:b0:07:6b:d5:
                    cf:7d:cb:63:7d:3b:74:aa:1b:8d:f7:d9:0b:b4:22:
                    4d:9b:b0:bc:40:15:56:04:24:db:54:4c:33:a1:70:
                    4a:62:95:ef:b8:d1:72:b2:a1:b3:f9:7b:b0:c0:81:
                    2e:bc:70:3a:0c:69:ca:39:ef:73:a1:ef:05:0b:20:
                    3a:3b:f4:59:c3:04:81:7b:7f:86:16:13:28:5a:b1:
                    a7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:90:EE:F2:EC:27:E6:4D:46:34:8D:35:F6:3F:F5:86:BE:2B:03:8A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C7F43FC8CDD11EE99391D634AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:86:44:d2:4f:ee:fe:25:1e:29:73:d0:dc:a8:21:04:e4:6d:
         bc:7f:a4:ff:7e:af:59:a7:a2:2e:d0:db:ed:a0:4c:b4:94:f5:
         4b:6a:c3:d8:51:90:31:e5:7c:13:75:d6:62:18:f6:b8:8b:8a:
         75:0a:39:37:08:fc:91:9a:51:fd:bf:cf:9a:c2:fe:11:4d:ca:
         c0:0f:31:96:7c:9e:61:aa:60:6e:f1:b8:43:de:c7:a3:4c:4b:
         3b:52:e2:49:46:f5:81:0d:f6:78:a2:d8:35:46:5e:d5:72:4e:
         d8:43:21:fa:bd:0d:d8:61:cc:b0:bb:f0:af:ad:e8:be:c6:0d:
         21:7d:90:8e:3f:25:a5:82:2c:78:f0:ea:13:3b:dc:ac:cc:2d:
         f9:e6:36:f9:7d:d3:8e:cc:b2:d7:11:65:0d:c6:c7:19:7e:8c:
         50:a2:1a:96:c2:3d:16:0e:69:82:6b:46:4e:ba:78:25:73:02:
         7d:87:c0:62:8f:5f:b7:15:92:cf:b5:04:62:2c:a6:93:63:51:
         2f:90:45:a2:95:90:e4:67:a8:c8:0a:cc:0b:dc:d1:28:44:85:
         49:07:f3:bc:72:c8:31:06:86:a1:07:b1:f4:4c:db:de:40:34:
         e2:6b:b4:68:49:2f:d0:de:1f:37:a7:9a:99:36:42:0b:f1:8b:
         1d:6b:04:a9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICVO0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBRjExMC8GA1UEBRMoMjVENjNFMDhFQUJFN0NGQTY3ODVENEMxRDZEMzQx
MTZERTE1QjNEQzAeFw0yMzExMjcwNDI2NDNaFw0yMzEyMjYwNDI2NDNaMBgxFjAU
BgNVBAMTDTY1NjQxYTg2LTQ1ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCbXgXIWAN2jbniYuiVk6//AKQ664o3fILKuUPQ2rmtRcWx8RSOsr08iR/0
erbDWSZK2VyN6M2Z1kn+fpy25pMNAddzlvkiRuPKRcm389HOCnGlmpi560jz/3Vw
OzjiE4yMNfdcXDGa65OgFVNTS/1MxjIH94gRA9jS2YvjIMu1UUsrgj01WJdPS+vt
1vYqPUOGqDCGH34yIWi/zM37JHXXVN4wTGdkXfKiFGrCUHUFsAdr1c99y2N9O3Sq
G4332Qu0Ik2bsLxAFVYEJNtUTDOhcEpile+40XKyobP5e7DAgS68cDoMaco573Oh
7wULIDo79FnDBIF7f4YWEyhasadBAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUKJDu
8uwn5k1GNI019j/1hr4rA4owHwYDVR0jBBgwFoAUJdY+COq+fPpnhdTB1tNBFt4V
s9wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4QUVBMjI4L0pkWS1D
T3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pkWS1DT3EtZlBwbmhkVEIxdE5CRnQ0VnM5dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjhGMkQwLzdGNEE5OEVBNkUwNTExRTg5QzBENkU0QkY4
QUVBMjI4LzJDN0Y0M0ZDOENERDExRUU5OTM5MUQ2MzRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaw28wDQYJKoZIhvcNAQEL
BQADggEBAG2GRNJP7v4lHilz0NyoIQTkbbx/pP9+r1mnoi7Q2+2gTLSU9Utqw9hR
kDHlfBN11mIY9riLinUKOTcI/JGaUf2/z5rC/hFNysAPMZZ8nmGqYG7xuEPex6NM
SztS4klG9YEN9nii2DVGXtVyTthDIfq9DdhhzLC78K+t6L7GDSF9kI4/JaWCLHjw
6hM73KzMLfnmNvl9047MstcRZQ3Gxxl+jFCiGpbCPRYOaYJrRk66eCVzAn2HwGKP
X7cVks+1BGIsppNjUS+QRaKVkORnqMgKzAvc0ShEhUkH87xyyDEGhqEHsfRM295A
NOJrtGhJL9DeHzenmpk2Qgvxix1rBKk=
-----END CERTIFICATE-----
Generated at Mon Dec 22 20:47:03 2025 by rpki-client