This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4179BEEF51111EF922AC874762E951A.roa
File:                     D4179BEEF51111EF922AC874762E951A.roa (raw, json)
Hash identifier:          N1AiKE/kRpytwFqDbMPdnWj+d9Je2P5nfKEBw7ws2mA=
Subject key identifier:   02:32:07:A1:D0:CF:83:A7:5C:79:25:A6:D3:B1:F6:6F:27:4F:33:1D
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0168A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4179BEEF51111EF922AC874762E951A.roa
Signing time:             Thu 27 Feb 2025 13:50:39 +0000
ROA not before:           Thu 27 Feb 2025 13:50:36 +0000
ROA not after:            Wed 26 Mar 2025 13:50:36 +0000
asID:                     62240
IP address blocks:        154.196.25.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92320 (0x168a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 27 13:50:36 2025 GMT
            Not After : Mar 26 13:50:36 2025 GMT
        Subject: CN=67c06daf-a1bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:3d:0a:9d:a7:67:4d:0a:b5:f6:4a:ee:c4:
                    0f:9a:78:fe:74:74:2f:9f:9c:c1:4d:78:30:d3:47:
                    96:53:09:05:76:50:fd:cd:87:56:e4:fd:b7:1a:17:
                    31:21:1f:28:2f:ea:a9:4b:fa:25:56:98:b7:b9:67:
                    be:8f:25:c9:10:28:dd:14:1f:3b:1d:00:21:16:87:
                    22:f1:16:15:7b:63:92:b5:99:14:19:ed:ef:00:38:
                    af:da:a2:d3:45:c2:6b:b2:2e:f4:92:73:6d:f4:d2:
                    de:f6:b2:13:89:3b:eb:51:da:56:b2:83:a7:22:45:
                    cc:d1:18:34:98:b1:22:49:9d:a0:3e:f4:b1:9f:0c:
                    55:fd:49:29:7b:fb:78:9b:0a:93:e5:ce:8b:fe:c9:
                    40:c7:4b:68:c7:ff:30:b2:43:c7:18:90:ad:0a:fa:
                    23:75:8b:0a:2e:0b:87:22:7e:24:62:09:7f:48:2f:
                    c8:33:83:00:9c:8e:94:41:7d:37:92:d1:43:53:24:
                    cb:3c:81:84:c3:59:b0:30:69:b4:43:23:84:0c:be:
                    fc:79:4b:16:99:8b:c6:58:17:33:3f:96:7e:36:55:
                    36:ed:e2:22:c5:25:68:b6:6b:48:48:35:af:49:ee:
                    5c:bb:ec:9a:9b:24:f1:f9:02:93:b0:37:59:a8:66:
                    bf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:32:07:A1:D0:CF:83:A7:5C:79:25:A6:D3:B1:F6:6F:27:4F:33:1D
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D4179BEEF51111EF922AC874762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.196.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:4b:66:ed:87:98:9e:63:33:4b:20:01:38:91:05:c1:14:9d:
         4d:2e:64:7e:04:5c:42:ee:aa:37:29:7e:68:bf:d6:0f:8d:0a:
         16:5a:88:49:64:71:f7:1d:85:45:39:ef:28:b1:88:6a:c8:d3:
         1c:d6:5d:40:90:a1:ad:1f:36:f5:ef:01:e2:18:2b:ae:1b:b2:
         bd:28:17:12:ec:9a:af:1f:f3:e3:81:05:4a:e0:6d:9a:57:6a:
         e2:33:c5:2d:fd:ae:3b:31:c9:3d:85:9f:6e:93:86:f5:db:69:
         18:f9:3f:dd:d3:96:88:ca:3a:85:69:ce:4d:38:f7:2b:d6:23:
         80:28:4a:eb:70:0a:67:d7:81:52:be:a6:33:2d:ed:9e:63:45:
         36:15:a5:0e:3c:7e:e6:c8:51:29:b2:f8:75:e5:bc:c4:9f:9f:
         5d:b5:40:f7:26:2b:ab:85:78:68:a1:96:7a:af:c2:f4:5e:91:
         c6:a0:6b:95:25:6e:c0:8b:1c:f0:75:83:75:41:fe:d7:cd:c9:
         a6:ce:30:26:70:64:a1:38:c8:17:e8:0e:47:82:f6:2b:71:58:
         64:cf:bb:63:85:f6:dd:88:6c:8a:bd:58:4c:17:8a:2c:76:0d:
         59:46:19:90:52:8a:66:9c:81:b2:ab:2a:38:fc:1c:1b:98:b5:
         87:ab:35:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAWigMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMjI3MTM1MDM2WhcNMjUwMzI2MTM1MDM2WjAYMRYw
FAYDVQQDEw02N2MwNmRhZi1hMWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAt3U9Cp2nZ00KtfZK7sQPmnj+dHQvn5zBTXgw00eWUwkFdlD9zYdW5P23
GhcxIR8oL+qpS/olVpi3uWe+jyXJECjdFB87HQAhFoci8RYVe2OStZkUGe3vADiv
2qLTRcJrsi70knNt9NLe9rITiTvrUdpWsoOnIkXM0Rg0mLEiSZ2gPvSxnwxV/Ukp
e/t4mwqT5c6L/slAx0tox/8wskPHGJCtCvojdYsKLguHIn4kYgl/SC/IM4MAnI6U
QX03ktFDUyTLPIGEw1mwMGm0QyOEDL78eUsWmYvGWBczP5Z+NlU27eIixSVotmtI
SDWvSe5cu+yamyTx+QKTsDdZqGa/gQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAIy
B6HQz4OnXHklptOx9m8nTzMdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENDE3OUJFRUY1MTExMUVGOTIyQUM4NzQ3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsQZMA0GCSqGSIb3DQEB
CwUAA4IBAQB/S2bth5ieYzNLIAE4kQXBFJ1NLmR+BFxC7qo3KX5ov9YPjQoWWohJ
ZHH3HYVFOe8osYhqyNMc1l1AkKGtHzb17wHiGCuuG7K9KBcS7JqvH/PjgQVK4G2a
V2riM8Ut/a47Mck9hZ9uk4b122kY+T/d05aIyjqFac5NOPcr1iOAKErrcApn14FS
vqYzLe2eY0U2FaUOPH7myFEpsvh15bzEn59dtUD3JiurhXhooZZ6r8L0XpHGoGuV
JW7AixzwdYN1Qf7XzcmmzjAmcGShOMgX6A5HgvYrcVhkz7tjhfbdiGyKvVhMF4os
dg1ZRhmQUopmnIGyqyo4/BwbmLWHqzXj
-----END CERTIFICATE-----
Generated at Mon Dec 22 20:47:02 2025 by rpki-client