This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5FF8638F4D211EF8BC71C49762E951A.roa
File:                     B5FF8638F4D211EF8BC71C49762E951A.roa (raw, json)
Hash identifier:          MULWTwHOj82PowDQubETZ5sIsUy5jq0nws1ZnMVbIfw=
Subject key identifier:   E9:49:22:DE:78:82:A9:C6:26:0C:F1:5C:F1:7D:6F:1E:A1:59:54:39
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       016655
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5FF8638F4D211EF8BC71C49762E951A.roa
Signing time:             Thu 27 Feb 2025 06:18:50 +0000
ROA not before:           Thu 27 Feb 2025 06:18:47 +0000
ROA not after:            Wed 26 Mar 2025 06:18:47 +0000
asID:                     62240
IP address blocks:        154.195.148.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91733 (0x16655)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 27 06:18:47 2025 GMT
            Not After : Mar 26 06:18:47 2025 GMT
        Subject: CN=67c003ca-6dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fe:a0:28:7a:7d:51:ee:52:23:29:7a:ca:df:
                    b7:07:28:44:20:4a:d0:0d:14:df:81:72:ce:d1:5b:
                    25:dc:37:03:d3:01:9f:ad:34:55:67:47:62:e3:93:
                    b2:8a:5a:48:38:11:89:36:75:50:a4:9a:21:95:81:
                    d9:35:6f:6f:9b:80:c5:85:e7:7d:f5:48:8e:1e:9f:
                    8b:80:53:73:f7:94:bf:95:d1:32:1c:3e:23:d0:5a:
                    9a:d6:50:fa:84:07:2c:ba:a0:6f:24:2a:01:22:7c:
                    47:c3:ce:7b:17:06:27:a6:77:bc:70:e6:ae:6c:15:
                    95:e2:96:16:44:c8:81:27:70:83:4a:5c:59:20:c9:
                    00:2d:e1:44:1e:0d:da:15:b7:3b:1d:37:f4:a1:7e:
                    c2:f8:ff:1e:90:7f:bd:bd:ed:9a:ec:3d:61:44:59:
                    86:02:9d:89:c3:a2:6a:3a:08:52:b5:89:42:07:18:
                    0c:6e:06:c4:9a:b3:4f:d8:bd:a7:ee:84:c4:c9:76:
                    4f:c1:13:ff:f2:55:76:fb:c3:44:37:e6:2c:6d:5f:
                    85:92:48:26:a1:38:93:03:af:0e:ef:d5:fc:56:ad:
                    14:4d:68:e6:06:50:a8:12:35:87:86:a8:ce:4d:6b:
                    b2:bd:6a:1f:83:2b:4f:81:b2:49:f5:cd:fd:d9:84:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:49:22:DE:78:82:A9:C6:26:0C:F1:5C:F1:7D:6F:1E:A1:59:54:39
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5FF8638F4D211EF8BC71C49762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:9b:ac:bc:5e:ef:94:64:cd:05:8f:e1:1e:a6:76:6d:30:e0:
         20:0b:5c:09:6a:f2:5f:83:31:e2:7f:42:f0:38:f1:55:66:62:
         e2:e1:c5:b2:71:b9:c2:95:13:81:55:d5:17:06:81:b3:40:3c:
         85:85:b0:42:a2:f4:67:2f:8f:00:56:f0:1d:18:93:74:15:fb:
         20:fe:73:f1:e8:0f:e5:5f:12:fe:7d:8b:fd:be:ad:4b:92:12:
         d3:6e:1e:e8:c9:e4:46:22:fb:c7:9d:50:b7:d3:af:4a:45:9c:
         4e:7a:88:62:75:8a:2f:d6:df:50:da:4a:d3:a4:5a:05:d0:6e:
         2a:a8:af:92:d2:0b:45:8d:49:dc:35:3a:01:5b:a4:65:e1:9a:
         8e:50:d3:fd:c8:36:1c:65:fe:37:04:55:41:b8:64:f1:4d:91:
         98:9e:70:69:8b:e8:02:95:7c:e5:c2:70:51:9b:5f:75:fc:9c:
         04:2c:51:a8:3b:fe:1b:eb:4d:b9:93:ba:a8:b7:75:74:7d:94:
         50:fe:ff:34:56:79:73:f5:b7:c3:b9:b2:a3:93:09:e8:2d:84:
         38:90:a2:49:52:1a:29:c7:9f:be:d5:e7:23:d5:1d:b0:82:66:
         f3:e6:71:ff:6c:8f:9c:2f:f6:9c:57:68:2a:20:9f:26:19:f7:
         69:c1:db:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWZVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MDYxODQ3WhcNMjUwMzI2MDYxODQ3WjAYMRYw
FAYDVQQDEw02N2MwMDNjYS02ZGQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2/6gKHp9Ue5SIyl6yt+3ByhEIErQDRTfgXLO0Vsl3DcD0wGfrTRVZ0di
45OyilpIOBGJNnVQpJohlYHZNW9vm4DFhed99UiOHp+LgFNz95S/ldEyHD4j0Fqa
1lD6hAcsuqBvJCoBInxHw857FwYnpne8cOaubBWV4pYWRMiBJ3CDSlxZIMkALeFE
Hg3aFbc7HTf0oX7C+P8ekH+9ve2a7D1hRFmGAp2Jw6JqOghStYlCBxgMbgbEmrNP
2L2n7oTEyXZPwRP/8lV2+8NEN+YsbV+FkkgmoTiTA68O79X8Vq0UTWjmBlCoEjWH
hqjOTWuyvWofgytPgbJJ9c392YT06QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOlJ
It54gqnGJgzxXPF9bx6hWVQ5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNUZGODYzOEY0RDIxMUVGOEJDNzFDNDk3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsOUMA0GCSqGSIb3DQEB
CwUAA4IBAQDCm6y8Xu+UZM0Fj+EepnZtMOAgC1wJavJfgzHif0LwOPFVZmLi4cWy
cbnClROBVdUXBoGzQDyFhbBCovRnL48AVvAdGJN0Ffsg/nPx6A/lXxL+fYv9vq1L
khLTbh7oyeRGIvvHnVC3069KRZxOeohidYov1t9Q2krTpFoF0G4qqK+S0gtFjUnc
NToBW6Rl4ZqOUNP9yDYcZf43BFVBuGTxTZGYnnBpi+gClXzlwnBRm191/JwELFGo
O/4b6025k7qot3V0fZRQ/v80Vnlz9bfDubKjkwnoLYQ4kKJJUhopx5++1ecj1R2w
gmbz5nH/bI+cL/acV2gqIJ8mGfdpwdvj
-----END CERTIFICATE-----
Generated at Sat Dec 20 07:34:40 2025 by rpki-client