This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F19AF634F4DF11EF877F64A1762E951A.roa
File:                     F19AF634F4DF11EF877F64A1762E951A.roa (raw, json)
Hash identifier:          vYdnKZK/JxWc64+MD/KCSSjliq4uylLm+MYJ2H0eXRk=
Subject key identifier:   52:32:A0:29:78:23:DA:2E:28:38:C6:FA:E9:E4:5F:91:D9:DE:4C:47
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0166C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F19AF634F4DF11EF877F64A1762E951A.roa
Signing time:             Thu 27 Feb 2025 07:53:34 +0000
ROA not before:           Thu 27 Feb 2025 07:53:30 +0000
ROA not after:            Wed 26 Mar 2025 07:53:30 +0000
asID:                     62240
IP address blocks:        154.195.172.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91841 (0x166c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 27 07:53:30 2025 GMT
            Not After : Mar 26 07:53:30 2025 GMT
        Subject: CN=67c019fe-2762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:bc:3a:19:8c:7e:2c:fb:ec:b8:ef:3b:ff:
                    8a:83:93:81:1d:dd:71:c7:dd:20:e7:60:25:e3:35:
                    c0:66:fd:e1:51:13:c2:d5:34:05:20:66:56:8f:98:
                    06:b8:16:44:93:8a:91:6e:a9:f1:d7:89:d8:a2:73:
                    8e:09:be:9b:b3:88:94:cb:7d:4f:c0:af:c1:25:9a:
                    54:74:97:c3:98:ab:a9:b8:51:a0:5f:0d:f3:2b:3c:
                    3d:25:37:2c:6f:a1:7e:22:f2:e1:f0:1f:89:74:bd:
                    f8:f6:cc:a5:51:1f:cb:ba:0d:da:02:a9:cb:84:48:
                    3a:d9:22:30:53:9d:96:86:5f:42:29:d9:09:17:67:
                    d1:77:4c:5f:29:b0:19:55:c7:43:7d:0d:f1:1c:6b:
                    b4:d0:50:c5:03:e6:32:fb:54:e8:05:01:95:1c:67:
                    89:4d:3e:81:8b:ba:c6:ff:a4:23:9c:47:e9:a0:2a:
                    6b:85:99:ae:fa:01:fe:aa:dd:e2:9c:02:f5:8f:3a:
                    13:60:f1:d1:f3:3b:40:2a:a0:72:8c:72:33:b4:70:
                    12:97:5f:86:5e:29:fd:2e:47:d0:a2:c8:c4:6d:bc:
                    b8:cf:a6:ad:45:67:fd:96:87:aa:d7:88:7b:57:27:
                    21:97:7d:58:35:ce:d8:35:b3:3f:df:f0:3b:8d:86:
                    80:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:32:A0:29:78:23:DA:2E:28:38:C6:FA:E9:E4:5F:91:D9:DE:4C:47
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F19AF634F4DF11EF877F64A1762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.195.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:88:ce:2d:ad:a7:32:72:3e:f2:d7:92:f7:9f:b3:8a:11:a1:
         01:97:c3:b4:dc:8f:e7:97:de:4e:d7:1b:ab:42:d9:e3:7d:8b:
         ae:e9:89:55:ee:1a:34:1f:16:77:17:50:38:64:3c:85:5a:0e:
         2a:f9:06:50:3e:ae:5f:f6:98:29:a2:62:3f:5c:29:a5:82:1f:
         8b:56:54:2c:3b:be:76:90:a0:12:a2:4c:c7:1c:55:e2:3e:42:
         fe:ae:df:83:2f:8b:c6:1b:91:18:7c:2c:a4:ff:6e:19:c8:a1:
         e5:d4:72:9a:1c:83:04:e4:0d:ae:85:e5:ee:cd:fc:d8:66:16:
         7f:55:c9:15:ed:fc:47:58:a7:3a:41:dc:d5:84:54:de:fc:95:
         69:5f:32:f9:89:01:05:13:cb:9a:3b:ec:38:39:cd:0d:88:97:
         88:c4:82:dc:80:d1:38:51:04:29:11:08:28:f2:56:3e:dd:3e:
         c4:1c:d9:b7:28:52:e2:4a:10:58:17:2a:8e:57:ef:76:ab:d7:
         7e:d6:8c:e4:62:78:fc:75:3f:10:59:02:bc:26:57:4e:70:ac:
         67:bc:f0:fd:2f:8c:4e:db:c7:72:36:d7:fb:aa:fb:bf:2a:08:
         6a:b7:4f:f7:89:cc:d0:59:ca:15:26:fe:a8:cd:c7:0c:3f:6f:
         4b:ba:44:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 01:56:46 2025 by rpki-client