This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCB39BEAFA7611EFA93016A4762E951A.roa
File:                     CCB39BEAFA7611EFA93016A4762E951A.roa (raw, json)
Hash identifier:          8dq4//AvJDKHZvgvJJOldvk/a9tjgnslYT3qvu9GPlk=
Subject key identifier:   4E:88:8E:C0:AD:62:B9:66:7D:E3:AD:D4:C4:72:36:09:5E:B5:C9:06
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0143AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCB39BEAFA7611EFA93016A4762E951A.roa
Signing time:             Thu 06 Mar 2025 10:36:02 +0000
ROA not before:           Thu 06 Mar 2025 10:35:58 +0000
ROA not after:            Tue 25 Mar 2025 10:35:58 +0000
asID:                     39600
IP address blocks:        45.196.140.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82861 (0x143ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Mar  6 10:35:58 2025 GMT
            Not After : Mar 25 10:35:58 2025 GMT
        Subject: CN=67c97a92-8090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e1:84:4d:4d:cb:fc:4c:21:08:05:96:e8:86:
                    f8:f3:1d:62:85:26:35:d2:8e:1a:1b:84:72:05:9f:
                    65:28:c9:a8:6e:41:97:91:4f:75:eb:df:1b:15:77:
                    34:9c:56:fb:e8:4c:ae:ea:61:7d:b4:2b:da:22:f4:
                    e7:ad:b2:98:ee:69:20:19:28:0d:03:5e:64:b4:02:
                    5c:fc:e7:4d:ba:c1:f8:fd:ac:c8:88:61:ed:02:4d:
                    a1:b9:f7:fd:cf:53:ef:a6:8a:17:91:04:b3:f9:3e:
                    33:e6:06:27:42:a2:c2:a8:22:04:34:7c:04:bf:76:
                    36:4c:cb:fb:a7:5b:1d:16:a9:f2:c2:ae:df:f3:a9:
                    ed:a9:91:0c:4a:d3:67:16:01:e6:cd:70:cd:99:62:
                    3d:a5:b5:3c:93:3e:c6:3d:e0:ee:25:9a:e7:a9:b0:
                    33:1a:2c:8d:e6:6a:47:1b:32:f6:a8:9f:9b:a6:ce:
                    d3:9c:02:36:d8:6a:4e:f2:dd:7f:5f:63:a7:0c:d8:
                    f9:b3:b6:42:de:cb:57:01:db:1c:4d:18:5c:dc:4e:
                    a9:d8:74:81:a7:b9:4b:ef:35:bb:fe:15:cf:32:b7:
                    ab:41:fd:e5:6e:b6:91:fe:c3:ae:58:36:ca:ad:f0:
                    b9:41:95:29:ae:85:9f:8f:e8:47:e9:34:fa:f6:38:
                    99:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:88:8E:C0:AD:62:B9:66:7D:E3:AD:D4:C4:72:36:09:5E:B5:C9:06
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCB39BEAFA7611EFA93016A4762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:8e:7e:82:9c:b4:24:15:ed:c2:4d:d3:3e:96:5e:f0:5d:f7:
         f1:ef:be:11:96:be:d5:14:8c:da:a4:9c:c5:40:e8:56:29:91:
         71:93:b3:d6:89:37:86:9e:a5:d5:3d:70:b4:56:1f:cc:51:01:
         8a:08:98:64:c7:a9:2a:87:83:c2:80:69:81:2f:e2:58:ff:89:
         34:fe:54:38:ea:d3:9e:98:b4:ef:27:cd:9c:f9:54:76:7e:de:
         ed:e0:e0:9b:10:b0:fb:b5:81:5f:54:cd:6c:2f:9a:58:b2:23:
         f0:0f:e7:a2:e9:c5:29:0a:74:90:6a:ab:09:de:3b:5b:7c:b1:
         a0:5e:1e:31:27:69:cf:df:63:42:5d:10:8a:ff:61:be:5a:67:
         24:14:ad:33:b8:dd:e6:76:db:fd:d9:e6:26:3a:a9:4d:a0:dc:
         69:5d:a8:e9:ae:65:5c:7d:e5:00:2a:7f:09:ce:c6:4f:30:4c:
         cb:c0:8d:73:a7:fe:b8:0d:3b:a6:37:56:ca:37:51:ee:c2:cd:
         b0:38:07:55:50:bc:49:90:cf:4f:ad:e6:ba:7d:82:ac:9d:35:
         85:f6:95:f1:30:87:c1:48:ed:cc:f7:05:68:37:05:37:6c:7c:
         a4:e9:82:67:b9:11:f1:08:47:a7:d3:1c:61:9d:6b:4f:c8:14:
         a8:0e:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 16:30:49 2025 by rpki-client