This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D45041B4F67511EFBD8C9881762E951A.roa
File:                     D45041B4F67511EFBD8C9881762E951A.roa (raw, json)
Hash identifier:          H/yKnfPQKXK2DMrSnPBqRpzTIIOt0+zKRaxOba+5htk=
Subject key identifier:   4C:A4:8F:7F:F3:41:1F:E3:81:B5:6B:A6:1A:3A:1A:0A:91:31:32:FE
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       016D4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D45041B4F67511EFBD8C9881762E951A.roa
Signing time:             Sat 01 Mar 2025 08:19:01 +0000
ROA not before:           Sat 01 Mar 2025 08:18:57 +0000
ROA not after:            Sat 29 Mar 2025 08:18:57 +0000
asID:                     984
IP address blocks:        154.200.189.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93516 (0x16d4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar  1 08:18:57 2025 GMT
            Not After : Mar 29 08:18:57 2025 GMT
        Subject: CN=67c2c2f4-7bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:72:28:84:66:ad:63:55:ad:a0:5c:a7:d2:ac:
                    8d:11:4f:da:76:e1:18:6c:3b:20:c5:9a:80:90:77:
                    9c:45:a7:63:cb:bd:d4:10:4b:7a:72:66:f2:78:19:
                    68:66:ba:3b:31:7f:d5:58:26:3e:21:dc:f0:d1:57:
                    c8:c7:0d:1f:d8:16:fb:59:36:36:d2:e3:13:5d:b4:
                    45:a5:04:ed:a8:d7:36:4c:ae:3b:85:4c:75:2a:22:
                    43:3f:50:ed:e6:25:11:82:be:e6:3d:24:e2:a7:de:
                    36:ea:d4:e9:d6:1a:51:c4:06:85:f0:39:59:49:97:
                    a7:15:ff:ad:60:51:5e:6b:d1:d9:22:d8:96:df:53:
                    26:5f:b7:a9:b2:8b:cb:45:fb:1a:2a:96:77:e2:db:
                    f1:0b:ef:8e:10:ed:36:b4:b6:5c:6b:e0:96:9a:36:
                    47:30:90:e1:92:ad:2b:aa:ff:fe:34:97:b5:6b:43:
                    f8:fc:30:fb:b0:5f:5d:73:eb:95:04:63:d6:1d:41:
                    07:0c:e2:09:95:f6:e1:92:be:fb:55:96:e6:0e:c5:
                    2e:0c:d2:f0:6a:66:fa:bc:d8:f5:d6:05:1d:22:31:
                    49:92:e4:f0:a6:a5:da:93:65:79:f4:fd:c2:80:6a:
                    bd:de:0f:d6:4c:af:c4:51:38:3c:87:c4:b2:c7:ef:
                    d0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A4:8F:7F:F3:41:1F:E3:81:B5:6B:A6:1A:3A:1A:0A:91:31:32:FE
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D45041B4F67511EFBD8C9881762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:63:02:b6:50:02:98:aa:4c:a9:55:eb:c9:11:00:44:fe:e0:
         f4:d1:ee:be:b9:d2:60:e0:8f:33:a0:5f:d3:5e:6e:06:bb:1c:
         89:9e:0d:39:59:c0:68:8c:6f:89:c8:36:7b:17:42:8f:3c:6d:
         37:7a:00:07:b0:e0:00:78:66:e7:c9:43:ec:37:78:83:71:4e:
         fb:02:98:89:6d:1b:9f:4f:35:23:66:8c:68:76:14:eb:eb:dd:
         63:c0:2e:4b:89:d2:78:3e:c4:fc:40:79:a2:6c:c7:62:24:3d:
         6c:a8:71:4e:d2:e1:42:74:61:9f:e9:20:84:ea:fb:09:74:10:
         f6:5f:52:a0:88:73:b4:33:f3:dc:50:fc:b0:67:ba:88:7c:4c:
         c1:8b:7b:70:96:3d:34:b0:20:c9:40:d0:4c:3f:03:65:cf:74:
         fb:09:20:94:11:89:09:72:34:44:4b:40:a2:a0:ae:52:fe:1f:
         13:50:d5:de:5d:db:d6:c9:d4:ad:e4:4b:1d:96:bb:0e:c7:5d:
         3b:44:28:0f:56:0d:35:db:98:ba:67:14:5c:3c:be:f4:d3:c8:
         b0:85:4a:43:12:99:cd:07:35:93:68:9e:f3:82:7f:8e:ed:88:
         25:ab:78:02:db:67:2e:cb:b1:78:06:96:c6:c2:d6:cf:d4:25:
         ef:81:40:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAW1MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwMzAxMDgxODU3WhcNMjUwMzI5MDgxODU3WjAYMRYw
FAYDVQQDEw02N2MyYzJmNC03YmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAs3IohGatY1WtoFyn0qyNEU/aduEYbDsgxZqAkHecRadjy73UEEt6cmby
eBloZro7MX/VWCY+Idzw0VfIxw0f2Bb7WTY20uMTXbRFpQTtqNc2TK47hUx1KiJD
P1Dt5iURgr7mPSTip9426tTp1hpRxAaF8DlZSZenFf+tYFFea9HZItiW31MmX7ep
sovLRfsaKpZ34tvxC++OEO02tLZca+CWmjZHMJDhkq0rqv/+NJe1a0P4/DD7sF9d
c+uVBGPWHUEHDOIJlfbhkr77VZbmDsUuDNLwamb6vNj11gUdIjFJkuTwpqXak2V5
9P3CgGq93g/WTK/EUTg8h8Syx+/QUQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFEyk
j3/zQR/jgbVrpho6GgqRMTL+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENDUwNDFCNEY2NzUxMUVGQkQ4Qzk4ODE3NjJFOTUxQS5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsi9MA0GCSqGSIb3DQEB
CwUAA4IBAQDNYwK2UAKYqkypVevJEQBE/uD00e6+udJg4I8zoF/TXm4GuxyJng05
WcBojG+JyDZ7F0KPPG03egAHsOAAeGbnyUPsN3iDcU77ApiJbRufTzUjZoxodhTr
691jwC5LidJ4PsT8QHmibMdiJD1sqHFO0uFCdGGf6SCE6vsJdBD2X1KgiHO0M/Pc
UPywZ7qIfEzBi3twlj00sCDJQNBMPwNlz3T7CSCUEYkJcjRES0CioK5S/h8TUNXe
XdvWydSt5EsdlrsOx107RCgPVg0125i6ZxRcPL7008iwhUpDEpnNBzWTaJ7zgn+O
7Yglq3gC22cuy7F4BpbGwtbP1CXvgUDq
-----END CERTIFICATE-----