This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A89DE0688A9B11EE9FEB5F314AD9E6FC.roa
File:                     A89DE0688A9B11EE9FEB5F314AD9E6FC.roa (raw, json)
Hash identifier:          YYOLG27gOYApfbA1mDxHVMs6oxbwNluyxb3118pB8eI=
Subject key identifier:   3A:2F:CE:42:96:BE:6B:A3:C7:FF:24:D6:FC:29:17:ED:30:A5:1E:BC
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       547C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A89DE0688A9B11EE9FEB5F314AD9E6FC.roa
Signing time:             Fri 24 Nov 2023 07:32:45 +0000
ROA not before:           Fri 24 Nov 2023 07:32:42 +0000
ROA not after:            Tue 26 Dec 2023 07:32:42 +0000
asID:                     62240
IP address blocks:        154.195.172.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21628 (0x547c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 24 07:32:42 2023 GMT
            Not After : Dec 26 07:32:42 2023 GMT
        Subject: CN=6560519d-7a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:84:84:97:4e:c2:f5:ee:29:74:72:1d:ae:
                    ab:c2:36:d7:18:f1:0b:fd:3e:2f:cb:8f:81:f3:0d:
                    33:2d:b9:40:6f:e0:ad:a0:57:77:c2:d8:f8:cc:3c:
                    e2:bb:f9:a5:29:8c:6f:27:ef:d2:f4:97:1a:31:46:
                    26:14:86:ca:d6:9d:9d:83:b8:46:52:66:b2:67:78:
                    e8:5b:33:30:25:39:65:fc:11:39:0a:b1:67:61:c4:
                    87:36:cd:b0:d9:99:c7:f4:44:f8:41:b3:62:c2:0e:
                    31:84:2a:4a:10:1f:3f:88:93:5b:94:20:3b:3e:2f:
                    ec:de:a4:ab:0c:48:d0:a3:48:e1:75:5f:70:57:24:
                    21:87:98:53:92:34:82:c5:c1:12:8f:70:a0:c9:ee:
                    a5:93:5b:60:38:6d:e4:94:a1:8c:fa:ee:8c:53:c4:
                    01:a6:69:14:1f:51:e0:5c:90:d6:5b:97:33:c1:50:
                    e5:e4:60:16:cb:41:39:76:f0:be:6f:50:f7:1e:70:
                    6d:9a:1b:7b:57:f6:a5:fb:2d:4f:4c:96:1c:50:3a:
                    75:db:10:66:9a:f2:56:11:8f:03:95:c2:66:5f:34:
                    12:44:bd:da:c2:b3:d6:b5:48:5d:b5:a6:8f:24:f0:
                    31:51:00:b6:9d:72:ac:df:47:3b:e2:26:31:e8:32:
                    dc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2F:CE:42:96:BE:6B:A3:C7:FF:24:D6:FC:29:17:ED:30:A5:1E:BC
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A89DE0688A9B11EE9FEB5F314AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:d0:06:86:57:7b:0b:81:79:3a:1e:55:72:70:cf:c2:9f:a6:
         57:da:1c:3a:6e:2e:76:40:55:7b:01:51:77:96:84:3b:f4:c4:
         ac:76:06:ba:45:90:8f:96:7f:a7:1b:8e:04:10:48:27:f3:00:
         bc:50:0a:57:3b:57:af:80:f8:0f:e4:48:b8:20:6b:8a:ef:74:
         8b:b5:66:23:98:29:d2:94:b2:46:3c:88:8d:59:38:8c:78:eb:
         86:96:56:bc:d7:ac:d0:1b:87:78:0f:a9:cb:1e:b5:a5:09:a7:
         98:69:43:e3:00:80:96:8a:b5:6d:7a:26:06:8c:88:fe:51:e6:
         ec:77:97:ad:f6:fa:eb:c5:07:58:54:47:a1:4e:3e:69:75:8c:
         a8:0d:97:b6:b8:02:9c:bc:75:04:3d:5f:6a:39:42:44:ac:b4:
         7f:62:e3:17:b4:ca:9b:a6:d3:dd:31:3a:e3:21:be:18:54:5b:
         4d:34:8d:7f:e5:1a:55:ac:e8:70:28:fc:34:cd:d7:8b:9a:d3:
         f8:37:a0:0a:0b:26:57:cf:6b:30:5d:8f:fe:06:cb:6d:23:63:
         a5:f6:75:b4:cb:0c:d1:88:6b:bf:e6:1c:83:09:78:55:f4:bb:
         76:34:64:cb:ea:b2:cb:15:2a:c4:c8:15:ba:62:0a:03:91:20:
         bb:56:3c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 04:00:10 2025 by rpki-client