This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/701F7DCE3BD811F0ACADD6F4DAE4EC9C.roa
File:                     701F7DCE3BD811F0ACADD6F4DAE4EC9C.roa (raw, json)
Hash identifier:          HzaikB+md7lYzRnCkAcx4vZyc+hlxxaOzFvp8cGuY9k=
Subject key identifier:   9D:C9:E1:AA:1F:A7:6A:21:38:01:C5:C7:39:94:92:5D:C6:BF:2C:90
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01838C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/701F7DCE3BD811F0ACADD6F4DAE4EC9C.roa
Signing time:             Wed 28 May 2025 15:28:43 +0000
ROA not before:           Wed 28 May 2025 15:28:38 +0000
ROA not after:            Sun 08 Jun 2025 15:28:38 +0000
asID:                     132839
IP address blocks:        154.195.192.0/19 maxlen: 24
                          154.195.224.0/19 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99212 (0x1838c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 28 15:28:38 2025 GMT
            Not After : Jun  8 15:28:38 2025 GMT
        Subject: CN=68372bab-0f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:fd:69:9c:fb:ab:29:ff:b5:07:7b:c1:ae:
                    fc:85:fd:09:ae:b4:6d:e2:33:75:64:8e:3d:5b:84:
                    6a:7d:60:63:43:6e:1f:32:58:c1:2c:04:ac:2b:de:
                    d4:76:ad:87:40:83:d6:f8:ab:51:70:b0:93:4f:1e:
                    03:8c:f9:dd:40:5a:a8:a3:58:68:b1:d9:c2:27:79:
                    ec:7b:ca:e3:97:08:4f:97:4e:59:85:b9:7a:8a:0a:
                    3a:b1:0e:ef:d3:f3:e1:5f:ef:de:10:a2:73:11:ce:
                    1c:e0:7b:26:c5:a2:34:d6:00:db:ec:8d:10:ba:c5:
                    ea:00:19:1f:e7:52:1a:d2:f9:5c:5a:64:31:ae:0f:
                    c4:32:c0:32:41:9e:f8:1a:2e:00:e3:40:0c:31:35:
                    00:43:7d:a6:b4:6d:87:aa:bd:a2:73:03:7b:e8:c7:
                    fc:c4:7a:db:6b:19:e6:c5:9c:f6:88:be:52:3b:82:
                    89:b9:ad:ca:98:ab:e0:25:2e:8e:06:42:ad:f2:9c:
                    aa:aa:9d:8f:4d:76:02:4b:9c:51:58:07:a5:00:dc:
                    02:3c:56:06:15:02:a1:23:0c:ad:ad:80:89:d3:5c:
                    73:f7:2b:2d:c9:2a:58:0b:7c:46:40:2b:9c:1d:d5:
                    b7:0d:85:66:40:d9:dd:81:9b:72:a8:b4:99:7b:a9:
                    f5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C9:E1:AA:1F:A7:6A:21:38:01:C5:C7:39:94:92:5D:C6:BF:2C:90
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/701F7DCE3BD811F0ACADD6F4DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9b:ee:8f:1e:86:b1:3b:8f:8b:04:0a:e6:0d:c8:b4:89:e3:02:
         48:9a:b4:d7:b7:e6:a2:32:30:48:5b:eb:cc:2a:39:ff:bc:cc:
         ce:cf:b7:a6:48:9e:b8:d9:f1:32:3e:4d:94:11:64:85:bf:00:
         c5:ef:4c:af:47:36:3d:45:85:5b:11:5f:81:27:48:53:29:9e:
         8a:95:81:9b:c8:d0:34:f9:65:2e:8c:36:54:3c:86:88:f5:ec:
         25:05:ce:a9:35:61:e0:5a:68:0f:8c:47:02:0e:3a:74:df:a2:
         1a:26:1e:71:86:f8:d9:8f:25:3c:50:86:98:83:6c:64:99:8f:
         a2:4c:be:fb:e7:e8:fa:a8:13:18:b3:04:04:5c:a0:f1:c6:49:
         04:6b:eb:fb:86:cd:b4:f8:df:69:51:72:46:a6:4e:9b:96:71:
         26:07:66:59:04:f2:f4:81:75:d5:62:ec:e5:59:6f:2d:da:4c:
         4b:22:d7:2f:47:8c:a9:b5:37:87:b4:ef:13:02:22:0e:38:3b:
         02:df:f0:b5:d1:c0:7c:f2:0a:d3:d3:52:b5:f9:5c:de:85:df:
         13:d3:4d:8d:f1:95:b4:f0:41:aa:9a:61:08:93:47:8b:05:02:
         f7:d3:d7:a3:93:73:a4:12:87:30:be:fa:9c:b1:58:cf:9d:55:
         8f:e8:79:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 12:08:58 2025 by rpki-client