This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A43A838F4ED11EFBE8F807D762E951A.roa
File:                     8A43A838F4ED11EFBE8F807D762E951A.roa (raw, json)
Hash identifier:          u1Az9Ed/HlbPxArqd6hxja/ioLTv/QkaPKNh7GWqu+Y=
Subject key identifier:   01:F1:1D:C1:C6:2A:F2:1A:99:BC:2B:20:BF:FC:17:4A:FB:DE:03:80
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       01673A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A43A838F4ED11EFBE8F807D762E951A.roa
Signing time:             Thu 27 Feb 2025 09:30:54 +0000
ROA not before:           Thu 27 Feb 2025 09:30:50 +0000
ROA not after:            Wed 26 Mar 2025 09:30:50 +0000
asID:                     62240
IP address blocks:        154.196.80.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91962 (0x1673a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 27 09:30:50 2025 GMT
            Not After : Mar 26 09:30:50 2025 GMT
        Subject: CN=67c030cd-5ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:0b:ae:5b:b2:d8:55:cf:55:4b:44:d2:ee:
                    35:1d:5c:bc:1d:f0:ab:cb:ca:be:31:c4:ab:9c:e5:
                    ea:4b:bf:52:ee:de:14:a5:a5:ab:75:0d:99:e2:05:
                    c3:73:6a:d5:a3:60:49:43:32:95:d6:05:63:73:de:
                    3e:4d:bf:b7:95:bf:e1:25:9a:bc:1b:3d:71:44:51:
                    6a:53:5d:28:85:f4:fd:44:16:23:23:df:2e:f8:62:
                    d1:19:67:86:fe:04:55:32:d8:25:89:49:b2:5c:60:
                    57:5c:91:32:61:c8:eb:b1:b9:a6:56:e6:d5:7a:0c:
                    cd:49:8d:d7:68:f1:f1:5f:08:d7:b7:43:aa:ef:0d:
                    c1:14:e9:e5:2a:14:d5:a4:66:e4:56:8b:4a:18:9c:
                    2b:b8:51:69:8c:8a:ec:a0:fa:e8:e9:94:1a:63:40:
                    98:84:40:40:f5:4b:77:d6:b2:6a:3c:dc:ad:0c:f1:
                    26:4a:54:c0:26:e5:89:99:42:e5:56:fc:ce:ac:08:
                    c0:61:1a:26:35:65:aa:f7:50:42:d0:ad:bd:d6:77:
                    b9:e5:e2:27:75:80:74:46:c3:a2:05:a4:39:16:c8:
                    7a:55:e7:85:6c:68:ac:70:66:fc:11:83:60:56:29:
                    bf:98:5c:fa:3e:ed:e4:30:77:1e:8e:a1:c6:bd:ab:
                    5d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F1:1D:C1:C6:2A:F2:1A:99:BC:2B:20:BF:FC:17:4A:FB:DE:03:80
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A43A838F4ED11EFBE8F807D762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:96:01:4b:a3:dc:00:ed:d6:ed:3f:c4:67:5c:0f:91:1a:33:
         63:80:85:ca:48:98:3e:1a:19:a3:51:23:15:b6:17:f6:f6:d4:
         b3:4a:42:e5:20:0c:54:ca:30:4c:29:f1:8f:df:a4:ed:73:d4:
         0e:12:7f:77:bd:f7:1a:56:84:e6:91:7f:0d:5f:70:97:de:2e:
         79:cb:3b:66:06:85:74:22:85:e6:6e:f9:1f:01:f7:d2:f1:2b:
         bc:ac:8c:54:34:47:cc:e2:ae:2b:93:8b:39:25:3c:3f:a5:91:
         ab:2f:0e:c7:f2:22:73:f6:94:f2:eb:51:48:76:46:a1:7a:94:
         38:60:e8:b4:c9:1f:cd:f0:d6:6b:50:2a:ba:c1:79:7d:00:17:
         26:6b:c5:a9:35:77:45:e8:1e:9d:59:a4:5d:c6:97:87:88:49:
         d5:d0:0f:26:d1:73:94:31:85:cb:ae:1c:47:c7:1c:f7:4f:72:
         51:53:fa:81:4b:71:32:f3:fc:b0:80:2c:c5:bb:76:53:36:04:
         13:e5:22:45:23:d9:49:f7:b0:3a:cf:05:7c:84:87:71:3d:1c:
         d8:bc:8d:ac:93:d6:f0:3f:86:c9:e4:64:58:23:6d:9b:e0:7b:
         37:57:33:e7:0e:04:be:bb:57:59:a4:3e:df:4e:3d:44:52:82:
         c2:29:e7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----