This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/491376663BAD11F0A556AAE1DAE4EC9C.roa
File:                     491376663BAD11F0A556AAE1DAE4EC9C.roa (raw, json)
Hash identifier:          pcDf7D/MN2bQM8P6B2fgkXslUCWQSryJbs6VjmplRhQ=
Subject key identifier:   86:54:2A:3C:CB:1A:95:D4:89:95:EF:62:AE:66:3C:91:2F:2A:9A:63
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       018344
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/491376663BAD11F0A556AAE1DAE4EC9C.roa
Signing time:             Wed 28 May 2025 10:19:49 +0000
ROA not before:           Wed 28 May 2025 10:19:45 +0000
ROA not after:            Sat 07 Jun 2025 10:19:45 +0000
asID:                     9009
IP address blocks:        154.194.10.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99140 (0x18344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 28 10:19:45 2025 GMT
            Not After : Jun  7 10:19:45 2025 GMT
        Subject: CN=6836e345-f26a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6f:47:f4:ba:47:97:db:dd:b2:60:57:09:d6:
                    9d:1d:e4:94:10:0b:c4:99:24:8e:89:04:2d:d9:1a:
                    59:98:8a:f1:a2:4b:8f:95:b0:56:5f:d4:03:85:6c:
                    16:32:b3:a4:7a:0d:75:44:c6:6e:a4:5f:d8:10:12:
                    19:67:0c:5a:9c:a7:54:6d:e8:1d:91:c8:ca:2a:14:
                    17:df:a7:a9:9a:9a:8d:18:f6:5d:2d:e0:eb:fd:a5:
                    2c:0b:16:eb:78:ff:b2:8f:20:09:1d:af:3a:a0:8f:
                    2e:f3:e4:ab:37:0c:15:09:aa:38:2a:8c:6f:60:54:
                    10:8a:7d:eb:6c:23:35:2e:46:11:5c:aa:2a:00:17:
                    4a:12:76:26:93:bc:71:de:4d:81:c7:a7:01:48:59:
                    10:1b:7f:4c:25:65:59:2c:0e:4e:03:08:b1:74:82:
                    ac:2a:c1:8f:84:73:25:6a:16:48:e7:49:79:22:33:
                    94:92:41:64:b1:a0:ac:ca:7c:cb:ac:c0:e5:e6:7e:
                    42:37:8d:94:73:b7:fa:78:38:c9:0d:d4:59:ec:57:
                    8f:63:ed:18:9f:b2:f6:6b:68:af:af:3c:07:36:7e:
                    07:6a:64:bc:cd:62:fc:09:85:ff:cd:44:05:cf:97:
                    42:33:e4:da:57:eb:fe:5b:4b:b8:cd:4e:d6:b3:24:
                    e3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:54:2A:3C:CB:1A:95:D4:89:95:EF:62:AE:66:3C:91:2F:2A:9A:63
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/491376663BAD11F0A556AAE1DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:25:4d:68:1d:8a:80:a2:eb:7e:67:ce:02:e7:fe:ca:a6:0a:
         53:cc:7f:bd:05:d5:58:ca:5b:48:47:72:db:ee:a0:2d:03:2c:
         58:9c:f6:37:c4:ff:b4:33:71:ed:14:f2:f7:b7:70:b2:40:e1:
         30:91:e3:60:c9:62:ff:16:ed:c4:99:34:26:1c:a4:ef:d5:f9:
         e3:b5:f7:bc:4a:e0:77:02:72:81:23:44:1f:6b:b6:07:b0:2c:
         75:94:1f:fd:d9:49:b7:e8:88:5b:0a:81:c0:06:67:77:3d:61:
         8d:c9:ea:07:e5:9a:9b:f3:fc:44:fc:c6:0b:41:8e:c7:d0:4b:
         81:c0:8b:57:85:e8:8f:e2:12:34:74:13:fa:bb:73:41:87:6f:
         b0:5e:0c:89:e6:24:d5:2d:f6:83:7f:e5:80:7f:24:2c:2a:e0:
         5f:9e:3f:17:9f:04:61:d3:1a:d6:f8:02:76:ca:fc:56:45:2a:
         84:3f:dc:2e:19:3a:26:97:b6:05:c0:8a:16:1c:75:83:6b:20:
         f0:83:24:93:20:91:c5:88:5e:18:09:bf:dd:9e:b0:17:4f:11:
         b7:2f:af:a5:0b:0a:95:f0:24:75:0e:ed:5b:42:08:1f:24:a0:
         c6:ec:49:b1:28:dc:9e:02:0e:cb:0a:cd:82:12:db:90:85:da:
         1d:cc:ad:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----