This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B60A39D8332611F0853233AFDAE4EC9C.roa
File:                     B60A39D8332611F0853233AFDAE4EC9C.roa (raw, json)
Hash identifier:          2Uu8JXR6wtD9VRxCYt2aPlf3wn0IKjQiEVVktq3CAZg=
Subject key identifier:   82:E4:30:BC:6D:CC:10:58:00:95:10:30:09:FC:2A:FB:35:82:E7:C3
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       018138
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B60A39D8332611F0853233AFDAE4EC9C.roa
Signing time:             Sat 17 May 2025 13:56:21 +0000
ROA not before:           Sat 17 May 2025 13:56:16 +0000
ROA not after:            Sat 28 Jun 2025 13:56:16 +0000
asID:                     211826
IP address blocks:        154.194.55.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98616 (0x18138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 17 13:56:16 2025 GMT
            Not After : Jun 28 13:56:16 2025 GMT
        Subject: CN=68289585-8839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f8:be:c1:a3:a2:22:4d:a9:23:f3:a0:82:4a:
                    ac:3d:f3:14:93:26:57:dc:f4:0e:83:b6:8c:28:0d:
                    7f:36:e1:72:cd:cc:46:27:82:1b:87:16:f9:d5:fb:
                    1e:da:08:85:63:3a:3b:e0:c2:a0:45:4c:a1:6a:7a:
                    52:e3:f0:80:7a:fe:14:b8:02:91:d5:16:6a:6e:98:
                    47:58:c0:a9:15:49:46:00:dd:93:3c:42:0b:7d:30:
                    8a:ce:60:ab:c5:e5:6d:95:62:17:b9:e6:47:3a:1e:
                    7a:b4:83:c4:09:02:06:e8:db:54:e8:75:57:c8:8a:
                    19:1a:85:23:ba:38:15:fe:ff:39:34:06:e6:56:d8:
                    b9:73:b1:8d:2f:8b:aa:5e:b2:63:ec:8c:f3:56:71:
                    d5:7f:cf:c0:b6:88:5b:3d:c9:00:7e:67:0e:81:4e:
                    9f:f8:79:cf:ef:d4:e3:ca:e3:02:a2:2a:6c:6b:34:
                    c2:b2:62:06:3d:b9:b8:99:57:09:75:4e:a2:33:f3:
                    7b:ae:32:84:fb:85:ec:bd:ef:08:42:34:bb:a2:a8:
                    06:f1:61:5e:58:0f:b0:db:0d:62:7a:13:bc:37:b1:
                    f0:a1:03:21:29:50:53:20:51:2d:fa:d4:a6:53:9b:
                    c2:39:1f:72:e7:d1:19:14:10:70:07:c7:04:cd:8f:
                    8c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E4:30:BC:6D:CC:10:58:00:95:10:30:09:FC:2A:FB:35:82:E7:C3
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B60A39D8332611F0853233AFDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:52:7b:c6:cf:66:53:65:e3:3d:b4:24:86:7a:ca:9a:72:9d:
         37:4c:14:ca:05:cf:75:40:f6:f9:de:e3:ca:67:6b:92:63:4a:
         da:1e:61:29:1b:37:ca:9b:6b:73:70:0f:13:b7:c9:86:a7:a1:
         37:eb:01:d7:03:bf:35:36:ae:83:8c:c4:d2:3e:73:0e:c7:ab:
         bc:93:6a:22:66:a2:bd:e6:df:14:06:9b:8c:98:a8:20:5f:1a:
         ad:d5:5a:aa:95:16:e9:ec:3b:eb:a3:66:67:7a:ea:48:66:23:
         99:25:49:4b:26:23:c1:f6:47:f8:b0:83:03:6f:17:27:fb:3d:
         40:ea:4c:ee:e3:44:de:a5:51:d0:ea:bc:43:08:66:24:d1:cb:
         5e:89:08:4f:f3:55:73:9a:4e:2d:3c:a6:3a:25:bb:eb:72:04:
         15:12:65:a1:89:f6:f5:b1:cc:e3:e9:9d:04:1e:98:b5:ab:02:
         15:4a:e9:20:b3:f4:a8:12:47:90:fa:81:ed:c5:a5:5e:58:4b:
         29:95:79:ed:d0:aa:9b:95:b5:38:0a:ae:3c:ad:4c:25:ce:fa:
         2e:01:fa:23:36:fc:e0:59:2b:ff:f6:5a:d7:4a:96:ed:a8:3b:
         5b:30:42:b6:90:0f:18:34:04:2a:c4:8f:78:3d:68:bf:4f:da:
         00:27:56:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYE4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTE3MTM1NjE2WhcNMjUwNjI4MTM1NjE2WjAYMRYw
FAYDVQQDEw02ODI4OTU4NS04ODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3vi+waOiIk2pI/OggkqsPfMUkyZX3PQOg7aMKA1/NuFyzcxGJ4Ibhxb5
1fse2giFYzo74MKgRUyhanpS4/CAev4UuAKR1RZqbphHWMCpFUlGAN2TPEILfTCK
zmCrxeVtlWIXueZHOh56tIPECQIG6NtU6HVXyIoZGoUjujgV/v85NAbmVti5c7GN
L4uqXrJj7IzzVnHVf8/AtohbPckAfmcOgU6f+HnP79TjyuMCoipsazTCsmIGPbm4
mVcJdU6iM/N7rjKE+4Xsve8IQjS7oqgG8WFeWA+w2w1iehO8N7HwoQMhKVBTIFEt
+tSmU5vCOR9y59EZFBBwB8cEzY+MpwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFILk
MLxtzBBYAJUQMAn8Kvs1gufDMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CNjBBMzlEODMzMjYxMUYwODUzMjMzQUZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsI3MA0GCSqGSIb3DQEB
CwUAA4IBAQBcUnvGz2ZTZeM9tCSGesqacp03TBTKBc91QPb53uPKZ2uSY0raHmEp
GzfKm2tzcA8Tt8mGp6E36wHXA781Nq6DjMTSPnMOx6u8k2oiZqK95t8UBpuMmKgg
Xxqt1VqqlRbp7Dvro2ZneupIZiOZJUlLJiPB9kf4sIMDbxcn+z1A6kzu40TepVHQ
6rxDCGYk0cteiQhP81Vzmk4tPKY6JbvrcgQVEmWhifb1sczj6Z0EHpi1qwIVSukg
s/SoEkeQ+oHtxaVeWEsplXnt0KqblbU4Cq48rUwlzvouAfojNvzgWSv/9lrXSpbt
qDtbMEK2kA8YNAQqxI94PWi/T9oAJ1ZX
-----END CERTIFICATE-----