This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F560ACF0893811EEB95CF1394AD9E6FC.roa
File:                     F560ACF0893811EEB95CF1394AD9E6FC.roa (raw, json)
Hash identifier:          m51t03ZO0IEs0Qp+IQjGGt28WaWhKWeeWIXmEUBPN6k=
Subject key identifier:   F7:41:7D:9D:04:1D:CC:6F:F7:76:EC:E4:2F:22:D3:A3:BF:CB:D6:07
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       523F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F560ACF0893811EEB95CF1394AD9E6FC.roa
Signing time:             Wed 22 Nov 2023 13:13:42 +0000
ROA not before:           Wed 22 Nov 2023 13:13:39 +0000
ROA not after:            Tue 26 Dec 2023 13:13:39 +0000
asID:                     147176
IP address blocks:        154.215.14.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21055 (0x523f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Nov 22 13:13:39 2023 GMT
            Not After : Dec 26 13:13:39 2023 GMT
        Subject: CN=655dfe86-2ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:d2:a1:d4:f1:a5:91:38:12:c5:54:40:1b:
                    2d:98:bb:88:04:b6:85:ed:ce:59:8c:f9:bf:dd:94:
                    74:6b:f0:68:ea:51:e9:3a:70:21:a7:9f:31:23:34:
                    3f:13:c2:36:de:bb:b3:ba:9c:af:f5:ba:25:09:52:
                    c9:13:a6:cd:49:e9:9c:c4:d8:f4:ed:24:fa:75:7e:
                    66:bb:00:97:6a:69:ce:72:cf:c2:a0:5f:6a:b7:2a:
                    11:5a:d9:f7:aa:6c:26:15:8e:57:8f:67:b5:d6:c6:
                    11:90:4c:9e:dc:e2:7e:d9:53:32:fa:ab:8e:07:f7:
                    ab:6c:c7:be:98:6b:69:01:8b:10:00:1a:ac:e7:0a:
                    7c:92:48:e8:72:58:48:d3:ef:3a:f5:d5:6e:0d:58:
                    e4:97:58:cd:9d:53:c6:5b:0e:93:f1:75:4c:7c:48:
                    9f:79:4f:99:23:4e:d4:d5:f0:7a:08:73:ed:ff:97:
                    20:03:93:b8:5a:87:cb:98:e9:72:b2:2a:34:9d:e8:
                    80:55:74:4a:18:54:14:7a:86:a9:47:bd:9c:33:53:
                    79:18:c5:ab:fc:79:3c:0f:db:9e:f1:8c:a3:0e:1e:
                    23:50:b9:24:ea:96:43:fb:e5:8c:25:11:11:47:15:
                    8d:4d:a0:30:18:06:25:76:14:ed:6b:4e:77:a2:c2:
                    2d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:41:7D:9D:04:1D:CC:6F:F7:76:EC:E4:2F:22:D3:A3:BF:CB:D6:07
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F560ACF0893811EEB95CF1394AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.215.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:7b:5e:2c:11:7b:7f:33:2b:bc:94:43:11:ae:d3:cd:ec:8d:
         1e:2c:58:4e:a8:5e:81:ba:4a:5f:9a:13:44:6a:09:e5:42:d6:
         99:09:92:d8:d6:6f:53:3b:ec:58:45:ba:44:4b:ad:8d:36:da:
         ce:68:f4:97:a9:64:14:dc:72:61:18:03:12:a5:8e:62:ba:4a:
         ef:5f:61:b8:fb:b0:87:8d:6f:0b:2b:3d:70:07:4c:ed:5b:e4:
         ac:c5:7b:02:4a:b4:e5:d7:79:03:bd:db:41:e4:c2:dc:9a:3d:
         03:34:df:c3:df:1d:45:31:7a:86:14:24:51:2b:d1:b2:1e:e1:
         55:4b:70:70:47:fc:07:80:fb:5c:9b:47:9a:9d:90:d9:04:66:
         67:40:73:1e:08:6b:d3:58:7c:05:b4:48:c4:04:c6:6f:68:ed:
         93:2f:96:43:10:40:0c:e3:f5:ab:95:f2:a1:c9:24:28:d4:51:
         90:eb:c4:73:8c:81:fa:fa:94:65:8d:53:eb:f8:dc:56:b3:a6:
         3c:df:fe:5b:a7:1e:ec:d4:2f:55:09:48:7e:e7:bb:de:f7:f3:
         cf:db:14:88:5e:d3:ef:ba:97:5e:08:4e:58:c4:a8:86:a9:f1:
         f6:37:9e:52:29:e5:0c:12:1e:bd:4e:69:f0:0f:04:35:29:bb:
         fe:39:8b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:00:18 2025 by rpki-client