This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D3FFFDCF6BE11EF84C8DA6B762E951A.roa
File:                     8D3FFFDCF6BE11EF84C8DA6B762E951A.roa (raw, json)
Hash identifier:          n3myOlI09FLe4NwX9C9jBegMXNRGwxlDuu9Bx73d3eo=
Subject key identifier:   43:7C:2D:5C:26:4C:3B:4E:A1:F0:61:96:EB:13:DE:8D:23:FE:3E:B6
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       016F06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D3FFFDCF6BE11EF84C8DA6B762E951A.roa
Signing time:             Sat 01 Mar 2025 16:59:34 +0000
ROA not before:           Sat 01 Mar 2025 16:59:31 +0000
ROA not after:            Mon 31 Mar 2025 16:59:31 +0000
asID:                     202656
IP address blocks:        154.219.235.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93958 (0x16f06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar  1 16:59:31 2025 GMT
            Not After : Mar 31 16:59:31 2025 GMT
        Subject: CN=67c33cf6-9536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a8:87:28:77:0c:fc:89:f4:06:f6:d8:35:a9:
                    f6:a4:12:10:f6:e1:3b:9c:36:c3:35:c8:33:4c:98:
                    d9:47:bb:1e:f8:93:d2:a8:f6:9a:34:b0:24:4b:3d:
                    2a:64:ac:9b:ab:88:c0:62:b9:49:f7:57:1b:32:a4:
                    dd:14:b1:9b:9d:10:6f:c8:16:f1:81:f0:cf:d4:ad:
                    21:ba:c8:51:c0:b6:73:91:34:3e:e6:25:b4:16:63:
                    92:8d:56:f0:72:dd:06:c5:50:f4:cb:63:d8:76:1f:
                    a3:e2:22:ee:3b:69:0e:f3:e7:3d:6f:f9:33:62:b5:
                    a7:af:13:53:99:2d:79:51:7d:ff:9c:12:d2:9c:ee:
                    92:bf:a8:aa:87:7a:73:c8:4b:47:ff:cb:0d:5b:e9:
                    df:8b:1e:b6:eb:f1:b3:4e:80:da:7b:9c:83:fd:b6:
                    50:a6:aa:9c:8f:af:86:b2:44:c3:cd:1c:de:71:15:
                    83:aa:3c:5f:60:4c:a3:69:0a:50:61:4f:a7:1e:6d:
                    d4:58:e7:75:44:47:50:5b:10:e0:c0:99:87:dd:f1:
                    74:5d:47:6a:71:9b:de:fa:02:24:f4:10:89:84:9e:
                    69:40:ba:9f:1d:54:bb:c5:49:d5:a5:b3:aa:5d:2a:
                    81:4c:4c:f2:e3:f3:29:83:e5:31:f6:7c:b4:74:a9:
                    2e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:7C:2D:5C:26:4C:3B:4E:A1:F0:61:96:EB:13:DE:8D:23:FE:3E:B6
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D3FFFDCF6BE11EF84C8DA6B762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.219.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:53:b0:01:72:42:e4:a2:74:91:af:20:4a:9a:25:54:07:eb:
         be:d6:93:62:49:23:7c:ff:e4:a7:c2:95:3f:29:8b:d9:55:cf:
         83:5f:ef:47:21:45:44:de:52:ad:5a:77:73:ee:62:f6:a5:c0:
         b5:57:12:be:88:63:c2:2b:d6:65:a6:0a:88:58:43:45:7f:69:
         49:7e:ea:42:e6:71:10:16:c5:4d:c0:31:a7:60:e8:b2:15:c6:
         93:0f:b5:c9:77:76:4f:4d:50:05:05:fa:c0:42:37:39:0b:7e:
         b0:00:20:c5:d8:5b:e7:fa:f9:18:e1:ad:0a:8b:c4:a1:c9:39:
         e9:10:69:b8:f6:c6:af:4d:04:e7:de:56:a2:9e:c4:0e:5f:f0:
         dc:06:2a:4b:14:33:e1:6b:df:52:75:c2:fa:ae:f1:60:c1:85:
         3b:b8:16:ca:79:96:93:73:f9:b0:77:a7:4e:cf:32:bc:3a:80:
         ea:3a:77:f0:34:1a:ed:56:72:f5:7b:4b:1b:34:21:4e:5b:ea:
         18:2e:78:ba:f7:85:04:06:b0:14:f0:9e:09:72:24:c9:68:f0:
         9b:7e:89:96:16:4e:85:54:3a:18:44:ba:0d:67:84:67:88:36:
         6b:59:6a:2b:ed:f4:79:7b:7a:90:96:aa:5b:69:a0:05:b1:e1:
         31:4d:0d:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW8GMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMTY1OTMxWhcNMjUwMzMxMTY1OTMxWjAYMRYw
FAYDVQQDEw02N2MzM2NmNi05NTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA26iHKHcM/In0BvbYNan2pBIQ9uE7nDbDNcgzTJjZR7se+JPSqPaaNLAk
Sz0qZKybq4jAYrlJ91cbMqTdFLGbnRBvyBbxgfDP1K0hushRwLZzkTQ+5iW0FmOS
jVbwct0GxVD0y2PYdh+j4iLuO2kO8+c9b/kzYrWnrxNTmS15UX3/nBLSnO6Sv6iq
h3pzyEtH/8sNW+nfix626/GzToDae5yD/bZQpqqcj6+GskTDzRzecRWDqjxfYEyj
aQpQYU+nHm3UWOd1REdQWxDgwJmH3fF0XUdqcZve+gIk9BCJhJ5pQLqfHVS7xUnV
pbOqXSqBTEzy4/Mpg+Ux9ny0dKkuCQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEN8
LVwmTDtOofBhlusT3o0j/j62MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84RDNGRkZEQ0Y2QkUxMUVGODRDOERBNkI3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtvrMA0GCSqGSIb3DQEB
CwUAA4IBAQAZU7ABckLkonSRryBKmiVUB+u+1pNiSSN8/+SnwpU/KYvZVc+DX+9H
IUVE3lKtWndz7mL2pcC1VxK+iGPCK9ZlpgqIWENFf2lJfupC5nEQFsVNwDGnYOiy
FcaTD7XJd3ZPTVAFBfrAQjc5C36wACDF2Fvn+vkY4a0Ki8ShyTnpEGm49savTQTn
3lainsQOX/DcBipLFDPha99SdcL6rvFgwYU7uBbKeZaTc/mwd6dOzzK8OoDqOnfw
NBrtVnL1e0sbNCFOW+oYLni694UEBrAU8J4JciTJaPCbfomWFk6FVDoYRLoNZ4Rn
iDZrWWor7fR5e3qQlqpbaaAFseExTQ0X
-----END CERTIFICATE-----