This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4E1F894F82011EFBBE5EF52762E951A.roa
File:                     A4E1F894F82011EFBBE5EF52762E951A.roa (raw, json)
Hash identifier:          iDacObLJwJUz1gAKVyZMT9lOak3LqWfDOcYA7M/snlA=
Subject key identifier:   18:0C:88:78:D3:2F:9B:C3:4B:46:9D:42:D3:AA:A6:86:CE:6D:4C:2A
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       017061
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4E1F894F82011EFBBE5EF52762E951A.roa
Signing time:             Mon 03 Mar 2025 11:14:16 +0000
ROA not before:           Mon 03 Mar 2025 11:14:12 +0000
ROA not after:            Wed 26 Mar 2025 11:14:12 +0000
asID:                     62240
IP address blocks:        154.195.136.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94305 (0x17061)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar  3 11:14:12 2025 GMT
            Not After : Mar 26 11:14:12 2025 GMT
        Subject: CN=67c58f08-2b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:8f:8f:99:31:aa:b2:e9:81:0a:8b:45:6c:
                    bd:df:7f:5f:5c:65:a3:cd:b1:55:4c:20:e0:d3:ca:
                    3d:6b:e3:14:ce:b5:60:dc:28:f4:61:a2:e3:ef:5f:
                    bc:08:7c:e9:10:71:47:69:5d:52:a3:6c:07:42:86:
                    7b:4d:a8:0c:84:f2:fa:da:d4:53:22:82:88:3d:af:
                    43:8f:7e:0b:03:bf:4d:ed:68:7a:4a:2d:a7:a7:e5:
                    11:9d:c6:24:79:a5:b8:53:ab:83:77:08:52:23:89:
                    66:c0:17:07:35:7a:eb:41:1e:28:d8:b7:a7:55:40:
                    c3:d9:75:f6:d1:63:0d:ec:71:69:61:6f:cc:73:84:
                    8d:ce:44:da:e9:f4:cc:98:97:64:ce:0a:cc:f8:a9:
                    9b:ab:5b:5a:4c:48:e8:bc:94:20:b4:f3:27:d8:75:
                    e0:4a:5b:3b:44:32:0d:9d:ff:07:01:f5:84:e4:dd:
                    a1:79:47:43:c4:d2:ec:5a:ad:56:a7:d7:a7:1d:0c:
                    f7:cd:ed:0f:78:02:bf:59:1d:73:ad:7e:17:82:50:
                    52:54:50:95:ec:fd:27:22:4e:f2:71:3d:33:e6:f2:
                    46:74:ae:c8:bb:8c:24:38:1a:38:93:75:b3:db:83:
                    11:94:6d:c3:bf:53:43:44:d9:8f:c6:bd:33:1e:55:
                    90:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0C:88:78:D3:2F:9B:C3:4B:46:9D:42:D3:AA:A6:86:CE:6D:4C:2A
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4E1F894F82011EFBBE5EF52762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:23:f5:7c:cc:3c:77:a1:fc:e7:34:83:5b:07:3f:6b:8a:b0:
         89:39:29:ea:64:27:2e:18:ac:3e:6c:ac:e6:94:4d:01:1a:29:
         5b:87:94:0f:d0:51:88:1b:72:e4:a3:83:11:bf:fd:6d:19:90:
         28:3f:2e:f5:7f:6c:ee:2d:b4:df:68:7e:6d:e0:ca:76:d7:9e:
         0b:25:a6:24:b0:27:1e:90:62:d2:73:0b:c2:63:29:7c:7c:f8:
         10:66:19:2d:fa:11:fa:a7:25:b4:b3:b1:93:e4:cf:86:c3:8e:
         b8:86:06:2d:0e:cf:c1:57:e2:7d:94:79:99:62:a8:a4:34:c6:
         5c:c7:4f:b3:d3:a2:b6:71:73:82:04:29:da:03:ad:53:3e:59:
         79:9f:2c:d4:c9:ca:f6:55:b6:ee:b6:e7:07:00:ef:db:b6:42:
         63:ac:d8:52:a7:14:7e:b1:52:64:d2:ae:83:03:33:10:12:cc:
         f4:44:ea:d4:f8:3f:7b:c3:4f:8a:c1:9c:88:7a:88:7b:08:46:
         75:b1:84:31:cb:28:43:8d:12:47:ba:2e:aa:71:65:6b:6f:0f:
         f5:ac:3b:97:74:7b:87:51:d9:fd:05:0c:5b:af:30:ca:bf:89:
         12:e6:56:22:7b:30:dd:be:31:fa:20:55:e5:1e:64:1e:f7:9a:
         93:55:d3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 12:59:04 2025 by rpki-client