This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C49AF350F6AB11EF81E16C6D762E951A.roa
File:                     C49AF350F6AB11EF81E16C6D762E951A.roa (raw, json)
Hash identifier:          HLWeyfdw7Ii0bgLQOdynggYJsurLy0610tebKecw+zE=
Subject key identifier:   C7:23:25:48:40:A1:E2:A0:23:32:14:D8:AF:5D:0E:3D:5C:D1:F1:7D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       016E82
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C49AF350F6AB11EF81E16C6D762E951A.roa
Signing time:             Sat 01 Mar 2025 14:45:07 +0000
ROA not before:           Sat 01 Mar 2025 14:45:03 +0000
ROA not after:            Mon 31 Mar 2025 14:45:03 +0000
asID:                     202656
IP address blocks:        154.222.197.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93826 (0x16e82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar  1 14:45:03 2025 GMT
            Not After : Mar 31 14:45:03 2025 GMT
        Subject: CN=67c31d73-2108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4b:92:7e:a5:68:19:21:c6:ef:6b:c9:00:69:
                    e1:32:0f:7e:d8:e8:c5:fa:2f:f1:e2:25:8a:cd:6e:
                    15:2b:34:a9:0b:a4:d2:e5:65:4a:34:01:8f:e1:97:
                    ed:ea:35:37:33:b3:1c:8c:6c:a8:53:b2:30:56:cd:
                    91:c3:0d:31:44:13:e9:cf:66:40:c3:a7:5b:48:c1:
                    1b:70:88:f7:eb:83:45:bf:97:09:17:c0:37:94:a9:
                    b0:cb:23:23:12:2a:ab:6f:5b:91:dc:57:34:ec:9d:
                    48:88:2d:1d:b1:0f:0d:f5:30:02:68:b5:78:c5:0b:
                    4e:b0:7f:1c:6e:91:1b:e8:fe:40:7d:d9:40:fa:b5:
                    93:0e:44:95:eb:f2:bb:fb:15:9d:6f:13:95:8d:46:
                    19:b2:6b:eb:35:4c:2f:fb:6c:fe:20:76:e8:bb:79:
                    2e:34:4f:32:0a:ee:47:33:86:d8:10:bf:2b:a9:a6:
                    25:17:c2:c3:6f:b9:ae:6f:7f:79:09:0a:d6:bc:ea:
                    f3:7d:cb:e1:b1:52:5a:a3:96:6f:8c:82:2b:fe:24:
                    b0:98:d2:3e:8d:4d:a9:fe:8a:d8:dc:1b:62:8c:79:
                    33:a8:30:aa:e2:b3:d5:dd:ac:89:9f:ef:9d:4e:a6:
                    bb:2c:e2:fd:66:d8:3e:64:bf:4d:17:7a:41:64:5d:
                    9e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:23:25:48:40:A1:E2:A0:23:32:14:D8:AF:5D:0E:3D:5C:D1:F1:7D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C49AF350F6AB11EF81E16C6D762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.222.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:be:c0:82:a5:a8:bc:ac:86:37:3a:53:35:44:1c:d9:78:cb:
         4a:bc:d9:b0:bc:44:6c:f7:92:56:ac:99:92:d4:0f:8f:a8:d8:
         8f:30:e4:01:c5:62:86:bc:7d:c7:a2:e9:89:74:85:a1:1f:78:
         dd:b4:10:f7:62:3e:58:a3:65:51:bf:bd:83:f9:47:38:3a:43:
         50:a5:94:fd:b2:75:0e:d8:08:10:8d:9b:97:0d:8b:71:cf:a8:
         af:65:54:16:12:5b:52:51:cb:16:ac:11:50:19:5f:c2:2a:8f:
         90:11:81:ca:04:94:b0:6a:e3:c5:69:65:e7:4e:6d:50:d2:73:
         43:8c:1e:79:80:0c:6a:0b:8e:ab:b0:9f:31:c9:9a:de:ae:72:
         9a:22:6d:e8:e2:fa:87:bb:41:84:f8:df:39:19:93:38:68:44:
         35:e1:ce:e6:9f:94:71:cc:8d:a8:d0:cc:2b:2b:65:9c:e5:77:
         fc:13:ff:fa:22:5a:79:6f:30:3d:13:f0:4b:3d:6a:b1:7f:af:
         d6:05:10:dc:59:bc:51:45:46:2d:07:8d:66:4c:6d:db:59:a2:
         e1:2b:eb:ce:29:5e:36:0c:b9:bf:1a:87:c2:c7:73:27:4e:01:
         df:46:3e:d2:a7:dd:c5:73:af:9d:bb:d5:ef:a9:b5:91:1c:29:
         86:ea:1b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 02:07:56 2025 by rpki-client