This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF4D5B06F5C911EF9949F665762E951A.roa
File:                     FF4D5B06F5C911EF9949F665762E951A.roa (raw, json)
Hash identifier:          EvtF5vt1SfEJNK5fCyb6G93G7j/yn/GUfhOw38Qhzok=
Subject key identifier:   D2:EA:89:BE:0C:DB:A6:84:84:C5:FC:29:C5:0C:F4:94:28:61:AF:E3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       013D45
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF4D5B06F5C911EF9949F665762E951A.roa
Signing time:             Fri 28 Feb 2025 11:48:59 +0000
ROA not before:           Fri 28 Feb 2025 11:48:55 +0000
ROA not after:            Mon 31 Mar 2025 11:48:55 +0000
asID:                     54600
IP address blocks:        156.252.144.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81221 (0x13d45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 28 11:48:55 2025 GMT
            Not After : Mar 31 11:48:55 2025 GMT
        Subject: CN=67c1a2ab-bbd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:73:ab:00:db:77:84:e9:fa:fe:27:04:cb:5e:
                    e5:d5:60:d1:ce:48:5a:89:e4:10:53:c7:0e:65:07:
                    57:b1:fc:c8:33:2c:c3:6c:71:f8:60:f9:2e:c9:cb:
                    11:53:07:0e:f8:ca:9c:02:c6:5a:4f:1d:a5:7f:97:
                    92:50:bc:c0:a8:de:54:e7:a5:0e:ca:69:10:89:d9:
                    b3:71:fd:a3:74:7d:10:b8:ad:21:84:ed:ec:b3:d1:
                    13:96:d5:ae:42:6d:cd:21:67:dc:60:cc:ab:34:4b:
                    db:57:98:32:9e:31:f1:2b:33:5b:75:2a:0a:72:b0:
                    32:1f:ef:e7:36:92:cb:e4:6f:e8:66:17:72:9c:ba:
                    f0:7c:84:df:74:2f:ab:bf:0b:2a:74:5a:4a:57:8f:
                    30:d5:62:47:19:0a:86:ba:b5:74:9a:5c:31:b3:fc:
                    ee:66:0c:49:12:e8:4a:5e:6d:b7:47:8b:a2:04:60:
                    87:7b:9a:54:53:7e:e4:e7:53:d0:e4:60:13:67:0b:
                    5c:49:8e:e8:f4:da:16:0b:6f:28:06:88:7f:f1:a2:
                    c6:76:d1:6e:25:18:22:8e:aa:60:99:ff:28:12:15:
                    1c:92:3f:92:82:93:ff:9c:bf:b1:9f:bc:a9:d4:3c:
                    54:2b:39:50:bf:26:f3:73:7c:46:de:c0:9d:09:71:
                    b1:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EA:89:BE:0C:DB:A6:84:84:C5:FC:29:C5:0C:F4:94:28:61:AF:E3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF4D5B06F5C911EF9949F665762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         91:f4:85:a5:28:95:a0:21:d4:a9:79:7e:3b:00:d1:b4:90:2b:
         e1:78:19:51:13:bc:66:53:b8:5e:56:f9:ee:dc:a2:13:39:6c:
         b9:e6:b5:32:da:38:a0:5e:43:99:c8:e4:d7:bc:73:a3:8b:e2:
         14:ff:fc:50:0d:0a:1a:51:70:27:a5:f4:1d:cb:a7:2e:ab:ad:
         b2:a8:48:6e:b0:d7:a3:9a:f6:3c:87:46:e7:3b:b6:ae:c9:92:
         7d:e0:b7:37:9d:0e:b4:62:17:7c:95:8d:21:4d:28:93:90:75:
         82:77:c1:9e:0b:bc:12:02:99:24:2b:da:e1:be:08:d9:01:14:
         8b:a6:12:94:8e:ec:71:f6:69:61:e8:2b:5c:48:6c:37:40:ad:
         eb:d3:be:09:74:4e:4a:82:92:d7:00:91:be:6f:63:88:4a:f0:
         15:b2:00:85:da:1a:66:57:98:b2:d4:53:ca:a5:5d:30:a6:b7:
         a9:80:6e:bc:7e:6c:5f:0d:2c:62:88:65:d1:b5:f6:ea:d2:ca:
         51:81:3a:4b:c1:40:7b:5a:4c:ed:44:54:9a:ae:62:c3:3b:5b:
         45:93:50:28:66:43:1b:c9:0a:6c:b9:1f:8f:78:53:6c:de:16:
         a4:c6:39:9b:1c:06:cd:99:d2:13:5b:0f:1c:2c:ae:b1:66:86:
         89:d7:da:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 22 06:51:35 2025 by rpki-client