This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89311DA8F68811EFADCAC981762E951A.roa
File:                     89311DA8F68811EFADCAC981762E951A.roa (raw, json)
Hash identifier:          mwqKZc2JSEQ4cTyKAt3qPQoweKWK3lTvabUoWAFSk8E=
Subject key identifier:   5E:32:6A:A9:29:8D:E4:6D:83:C1:CE:26:07:69:9B:90:AF:37:3B:78
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       016DD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89311DA8F68811EFADCAC981762E951A.roa
Signing time:             Sat 01 Mar 2025 10:32:55 +0000
ROA not before:           Sat 01 Mar 2025 10:32:51 +0000
ROA not after:            Mon 31 Mar 2025 10:32:51 +0000
asID:                     202656
IP address blocks:        154.222.199.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93652 (0x16dd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar  1 10:32:51 2025 GMT
            Not After : Mar 31 10:32:51 2025 GMT
        Subject: CN=67c2e257-6faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:30:a6:45:fa:b5:44:44:f9:94:e1:7f:a0:
                    c8:b9:98:cd:fc:36:c5:ba:e7:6d:51:bb:d9:dc:19:
                    c7:a5:7d:ce:8f:c3:8f:8d:e0:2a:cf:7c:48:82:bf:
                    7d:5d:48:ce:96:eb:bb:db:25:df:b7:48:fb:7c:28:
                    ce:38:7f:13:c7:84:0f:ea:b8:fc:18:3f:d8:af:2b:
                    97:2a:b4:8d:96:83:af:ff:38:17:f3:30:a6:bd:d9:
                    ff:85:66:8e:ed:78:da:f2:0a:76:bd:ae:81:03:6d:
                    16:97:da:6a:2d:90:3b:3c:20:e8:a1:05:61:1c:eb:
                    76:4e:2b:27:c5:6f:59:46:75:af:3e:7a:69:22:9d:
                    26:d2:d0:a6:66:8a:9b:9f:78:1a:9b:e7:6c:d3:67:
                    65:cb:71:c4:bd:0f:86:d1:35:24:79:c9:b4:ca:1d:
                    55:5f:d4:60:4f:a0:27:a3:c9:cc:7c:d2:1f:d1:79:
                    b3:57:73:a7:48:8f:64:aa:09:ef:81:7a:24:66:10:
                    8f:e3:ca:74:cf:d7:c8:1a:28:f5:68:d1:5b:9f:ae:
                    54:fb:28:32:24:1b:7f:66:53:66:f8:90:7f:31:39:
                    0e:55:32:f6:cf:84:f3:c6:e6:67:f3:24:3c:bd:85:
                    70:9f:00:44:fc:cc:52:83:b7:ab:41:c0:39:9e:57:
                    86:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:32:6A:A9:29:8D:E4:6D:83:C1:CE:26:07:69:9B:90:AF:37:3B:78
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89311DA8F68811EFADCAC981762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:a7:fd:9d:cb:39:64:a9:71:a4:0b:81:55:57:1d:ed:ae:38:
         06:d0:2b:d4:99:6a:9d:a2:bd:6b:6f:67:f1:ab:6e:0b:26:4a:
         20:d8:e1:51:17:46:7d:99:8b:bc:4c:dc:89:83:93:57:9f:2e:
         46:92:50:91:63:94:9b:12:e8:61:b0:29:44:38:d0:3b:6a:e4:
         84:bb:5b:4a:51:6d:f8:f9:8d:02:32:b9:de:e7:16:bd:e8:a0:
         aa:6a:9d:eb:d2:22:d0:03:4d:4f:f1:73:34:cf:80:a0:40:34:
         b0:97:c6:5e:be:8f:93:6f:f8:79:82:fd:21:46:c8:5d:48:6f:
         d2:ea:b9:61:49:03:09:6e:14:cf:71:ed:8f:41:3b:6a:ad:6b:
         40:31:63:a6:b7:ad:03:b6:44:99:73:02:71:35:61:11:09:02:
         fa:a8:8b:96:c8:bb:c8:29:79:41:d2:38:43:31:61:81:09:6b:
         b2:eb:0b:bc:97:79:94:85:bc:88:36:a4:da:a7:1b:f8:9f:27:
         c1:94:7e:58:dc:c1:3e:36:69:78:31:25:12:be:b8:8e:15:2c:
         92:1c:8f:f3:fe:16:e4:ec:ff:6d:6a:8c:f7:b2:db:38:5b:de:
         5f:d6:68:0b:e7:bf:10:2b:f9:24:16:bd:f9:ab:98:b0:b2:16:
         af:31:c1:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW3UMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTAzMjUxWhcNMjUwMzMxMTAzMjUxWjAYMRYw
FAYDVQQDEw02N2MyZTI1Ny02ZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuLYwpkX6tURE+ZThf6DIuZjN/DbFuudtUbvZ3BnHpX3Oj8OPjeAqz3xI
gr99XUjOluu72yXft0j7fCjOOH8Tx4QP6rj8GD/YryuXKrSNloOv/zgX8zCmvdn/
hWaO7Xja8gp2va6BA20Wl9pqLZA7PCDooQVhHOt2TisnxW9ZRnWvPnppIp0m0tCm
Zoqbn3gam+ds02dly3HEvQ+G0TUkecm0yh1VX9RgT6Ano8nMfNIf0XmzV3OnSI9k
qgnvgXokZhCP48p0z9fIGij1aNFbn65U+ygyJBt/ZlNm+JB/MTkOVTL2z4TzxuZn
8yQ8vYVwnwBE/MxSg7erQcA5nleGhQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFF4y
aqkpjeRtg8HOJgdpm5CvNzt4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84OTMxMURBOEY2ODgxMUVGQURDQUM5ODE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt7HMA0GCSqGSIb3DQEB
CwUAA4IBAQBep/2dyzlkqXGkC4FVVx3trjgG0CvUmWqdor1rb2fxq24LJkog2OFR
F0Z9mYu8TNyJg5NXny5GklCRY5SbEuhhsClEONA7auSEu1tKUW34+Y0CMrne5xa9
6KCqap3r0iLQA01P8XM0z4CgQDSwl8Zevo+Tb/h5gv0hRshdSG/S6rlhSQMJbhTP
ce2PQTtqrWtAMWOmt60DtkSZcwJxNWERCQL6qIuWyLvIKXlB0jhDMWGBCWuy6wu8
l3mUhbyINqTapxv4nyfBlH5Y3ME+Nml4MSUSvriOFSySHI/z/hbk7P9taoz3sts4
W95f1mgL578QK/kkFr35q5iwshavMcED
-----END CERTIFICATE-----