This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6CBEBFAF16411EFA98D19AF762E951A.roa
File:                     F6CBEBFAF16411EFA98D19AF762E951A.roa (raw, json)
Hash identifier:          ZndHmxXyF9g0+oQ9lq7OsKw3oVQMAKxefkKSBKwjFuo=
Subject key identifier:   82:09:0A:6E:94:7F:D0:D7:B9:33:78:67:B8:6B:A1:0A:56:EC:2F:CD
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       015A91
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6CBEBFAF16411EFA98D19AF762E951A.roa
Signing time:             Sat 22 Feb 2025 21:35:41 +0000
ROA not before:           Sat 22 Feb 2025 21:35:37 +0000
ROA not after:            Wed 26 Mar 2025 21:35:37 +0000
asID:                     8796
IP address blocks:        154.201.92.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88721 (0x15a91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Feb 22 21:35:37 2025 GMT
            Not After : Mar 26 21:35:37 2025 GMT
        Subject: CN=67ba432d-1ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:0c:9f:f5:09:25:5b:8b:f3:43:e8:ee:5e:
                    e5:f8:26:9e:04:d3:57:2c:46:c8:a4:b0:b3:17:c0:
                    f3:9d:30:b8:7c:f0:ed:29:b7:c3:ac:7e:2b:02:3c:
                    6b:37:12:e0:29:86:d7:f8:cb:bc:32:63:6a:50:25:
                    96:fb:5a:89:29:ac:ee:73:27:af:0f:9d:bf:25:8c:
                    47:dc:bd:16:ad:a2:8f:ec:d5:5e:02:e7:80:49:ea:
                    1a:7b:2b:af:6e:58:bd:fa:22:39:e8:40:bc:58:2b:
                    34:3d:02:36:a4:a5:89:63:e2:e4:ad:11:94:b7:f5:
                    16:ce:b3:fa:73:66:99:29:4c:83:19:f9:58:41:89:
                    2a:da:86:f1:64:d9:91:10:b2:96:9a:92:89:33:ec:
                    c7:93:19:d8:3a:2c:b0:d4:ba:e9:35:bd:84:42:0c:
                    37:24:5f:ca:18:ed:94:a3:23:48:2b:35:74:c6:05:
                    1e:e3:e0:06:57:b4:e2:ec:68:b5:28:c0:9b:41:b3:
                    61:a1:c8:ef:09:60:35:f4:6e:14:a0:e1:7c:1f:43:
                    60:dd:72:03:d3:06:8a:fd:83:2c:75:d3:d5:11:4e:
                    b2:c0:77:54:77:f8:1e:48:00:78:ff:f0:c0:d6:97:
                    19:03:64:42:ec:c6:23:2c:ad:ba:a2:4d:3d:c7:78:
                    1b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:09:0A:6E:94:7F:D0:D7:B9:33:78:67:B8:6B:A1:0A:56:EC:2F:CD
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6CBEBFAF16411EFA98D19AF762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.201.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:f8:47:a0:13:82:a6:c3:95:9a:f3:60:48:80:86:e0:b4:bf:
         8b:7f:60:23:0f:4b:b0:08:87:2e:14:54:8d:c9:da:43:08:8d:
         6c:83:a2:f3:d8:df:87:3c:6a:c8:47:05:1d:4e:77:93:e2:cf:
         3a:90:36:30:e3:cb:0d:82:e9:78:70:6a:ef:d4:28:f1:ee:ec:
         83:f7:59:cc:18:f1:fc:80:89:7a:fe:fb:9b:3a:2d:7e:e2:ec:
         b2:28:a3:89:c3:39:63:08:03:a9:d1:38:a8:4e:8f:a9:24:30:
         9f:8d:02:0e:de:34:3b:7f:f8:de:0a:c8:84:53:e8:92:fa:30:
         13:fc:d0:ba:e0:81:6b:fd:9f:bb:06:f9:c0:00:dd:d7:f3:12:
         ba:a7:7f:34:e4:bc:86:72:e9:94:e3:a3:ca:8a:ee:be:f6:32:
         47:bb:c2:05:b4:07:ea:38:9d:46:2b:7f:a6:93:ff:72:63:8f:
         cf:53:73:ab:23:12:92:8d:ed:ef:c0:d1:de:24:cb:d3:99:aa:
         73:62:e0:1c:76:4c:54:61:14:b2:18:7e:8c:fe:96:66:2e:45:
         b2:ca:49:c3:83:d4:40:9a:ff:76:6a:6d:ba:7a:a2:30:c6:32:
         55:85:96:16:8c:ed:8e:68:c2:1a:b0:52:83:ef:9a:9b:e5:24:
         6a:7f:d3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 02:07:56 2025 by rpki-client