This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE8CED10F16711EFB165C242762E951A.roa
File:                     EE8CED10F16711EFB165C242762E951A.roa (raw, json)
Hash identifier:          JWlfnwypvJszqek/2ENYeIOrZK+5lKGk3a8XboiQzuc=
Subject key identifier:   0B:F0:2A:BA:9A:ED:D2:5D:B6:BA:80:FC:C6:55:13:39:F7:41:26:6B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       015A9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE8CED10F16711EFB165C242762E951A.roa
Signing time:             Sat 22 Feb 2025 21:56:56 +0000
ROA not before:           Sat 22 Feb 2025 21:56:52 +0000
ROA not after:            Tue 25 Mar 2025 21:56:52 +0000
asID:                     135983
IP address blocks:        154.200.36.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88735 (0x15a9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 22 21:56:52 2025 GMT
            Not After : Mar 25 21:56:52 2025 GMT
        Subject: CN=67ba4828-3fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:91:d7:fe:3e:00:c8:14:c7:f0:8b:65:60:
                    0e:e3:08:d1:e9:78:c4:f4:d0:bb:56:43:71:b2:9c:
                    78:bc:1b:c0:0c:a2:cf:e6:df:8b:5e:80:b3:cc:ec:
                    20:61:9b:06:88:b8:c1:6c:12:51:ac:e9:d8:23:9b:
                    fd:81:d3:e6:9c:a0:95:79:3a:4c:de:a8:4b:63:7e:
                    f2:49:2c:a2:6f:e8:9a:a1:ac:3b:11:61:4f:de:5c:
                    0e:3e:7a:e9:d0:07:d1:30:28:52:51:e2:9b:a3:53:
                    db:56:91:a5:e8:23:e6:5f:10:22:1a:ef:42:c0:c2:
                    aa:97:af:72:a8:3e:7c:ea:79:29:dd:d1:f2:b1:c9:
                    bb:80:11:51:08:a4:a0:9c:9e:e7:7e:79:c6:a3:cd:
                    76:94:e9:2f:77:ce:bf:86:2c:b5:f7:07:8b:83:57:
                    b2:9d:51:18:7a:8f:ec:67:f1:bb:8d:d0:28:bb:db:
                    38:78:e2:41:e2:4d:f1:ca:2d:86:b5:d7:2f:02:8f:
                    f1:bc:b2:e4:de:09:fc:4d:55:82:0e:8f:ac:90:93:
                    13:d0:bd:86:de:75:1f:7e:c4:38:d6:ae:70:27:e6:
                    26:88:b3:0e:a2:27:68:a1:0f:0a:3f:3e:4c:b0:1e:
                    a6:da:a8:d2:e3:3b:8f:bf:f1:74:40:51:89:b8:01:
                    64:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:F0:2A:BA:9A:ED:D2:5D:B6:BA:80:FC:C6:55:13:39:F7:41:26:6B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EE8CED10F16711EFB165C242762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.200.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:de:38:ed:ff:b2:1f:0c:c4:74:3b:f9:87:25:cb:56:26:5f:
         40:70:56:b5:e7:f9:84:9f:2f:d6:4f:8d:b6:69:68:e3:ed:6f:
         b8:c4:dc:7b:4f:e8:80:2b:28:38:39:05:36:c2:d3:00:1c:d1:
         37:16:50:d5:81:a8:a3:67:15:86:53:79:1e:78:4c:a9:84:71:
         60:53:be:d0:a8:79:69:a8:ad:8b:b5:7f:ff:95:bd:fc:0f:2f:
         23:07:91:9c:b9:11:22:3e:1a:a7:39:e9:57:5b:7e:37:d6:d3:
         83:1a:e6:7b:d7:b5:ac:f9:a7:29:83:e1:5f:2e:3a:c0:26:58:
         e3:fa:af:9d:aa:31:01:da:46:bc:c1:a2:93:21:b0:da:a4:cb:
         cb:2e:1b:25:12:6c:48:9a:0a:73:e6:d9:f4:8e:75:dc:93:9c:
         6c:f0:e5:57:04:5f:b5:ae:ae:ad:3b:26:64:36:4b:5d:3c:62:
         1e:91:a1:5a:21:e9:aa:2e:3c:60:ae:c9:9b:b7:7b:55:69:07:
         01:af:68:7e:70:a1:fa:34:4b:53:79:d3:bf:7f:51:c0:ae:29:
         86:62:8d:5d:86:1e:a6:20:31:b3:45:aa:68:cf:76:76:38:90:
         67:57:22:ff:c2:a7:5e:22:19:73:66:1f:c7:60:1d:d1:6c:b4:
         0c:49:b2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----