This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A686A76354E11F0831AB49EDAE4EC9C.roa
File:                     0A686A76354E11F0831AB49EDAE4EC9C.roa (raw, json)
Hash identifier:          +90bbAY91SvMkGfSIB48xcJvj5U766LbDCwqbKwZxpY=
Subject key identifier:   0F:C2:B9:92:C9:C3:9E:3B:DC:1C:17:1A:3B:0C:3B:1E:B8:22:9E:94
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       018180
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A686A76354E11F0831AB49EDAE4EC9C.roa
Signing time:             Tue 20 May 2025 07:42:55 +0000
ROA not before:           Tue 20 May 2025 07:42:50 +0000
ROA not after:            Wed 25 Jun 2025 07:42:50 +0000
asID:                     29852
IP address blocks:        154.194.58.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98688 (0x18180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: May 20 07:42:50 2025 GMT
            Not After : Jun 25 07:42:50 2025 GMT
        Subject: CN=682c327f-1002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:f7:c5:87:50:fa:84:c2:91:2e:60:71:f6:
                    64:2c:0b:8a:37:30:44:40:c1:4c:2d:2b:3e:2d:56:
                    cd:6a:72:a9:6d:da:b3:d4:e5:f1:9d:3e:a6:7e:2d:
                    6a:39:71:0e:ab:07:be:08:c6:ff:7d:79:2e:78:45:
                    b9:e2:27:35:8a:d2:e8:85:5e:26:56:07:14:00:00:
                    99:26:32:6c:74:b4:70:1d:c4:b6:12:f6:57:31:13:
                    fe:de:8f:2f:49:d8:9b:7b:2b:6c:fd:cb:72:0b:68:
                    5a:6b:87:99:49:ee:10:6b:b1:7f:0d:fe:45:76:30:
                    1c:18:34:78:32:7f:d0:73:a7:f6:25:61:72:26:ed:
                    0d:c0:17:38:9f:03:a5:01:a3:36:42:b5:a2:a1:8a:
                    45:4b:b2:14:38:f0:5d:5d:18:9c:aa:a0:92:6d:0f:
                    1a:ed:9d:f5:9e:20:c7:ef:f9:af:0a:34:32:16:4e:
                    a7:c9:5d:27:fd:6a:be:f6:66:31:66:70:6c:08:93:
                    33:c9:b5:85:b3:a4:9c:22:a8:4e:b1:99:4e:4f:02:
                    62:0c:00:16:6b:9e:17:bc:4c:cd:7f:9d:9f:d3:05:
                    74:c4:9a:b5:fb:e3:e9:fe:3e:a1:e8:77:83:d7:69:
                    c7:49:9a:5b:90:4f:88:52:05:d2:fb:a1:22:0e:05:
                    25:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C2:B9:92:C9:C3:9E:3B:DC:1C:17:1A:3B:0C:3B:1E:B8:22:9E:94
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A686A76354E11F0831AB49EDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.194.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:eb:b8:9d:2c:47:de:11:3a:de:08:2c:12:b2:5c:67:f7:bb:
         05:3f:03:91:34:78:ad:f0:c8:4c:5a:18:1d:1e:26:8a:83:93:
         89:cb:c7:67:46:1d:33:f7:92:30:8f:c7:74:6d:6d:82:c7:40:
         ef:4e:fa:74:ac:ef:76:d8:55:92:4b:ad:a8:50:7a:3d:47:a9:
         48:57:42:16:06:83:0a:7e:6e:d4:b7:27:3b:45:c1:70:14:fb:
         12:46:e0:a0:4c:9c:de:50:d4:30:d6:c7:09:51:fe:37:8a:61:
         95:ed:d0:74:b8:61:b8:2e:91:e6:c5:51:fb:d0:ec:89:3b:be:
         97:56:08:7f:19:20:6a:db:3e:40:02:61:f7:72:34:62:10:6b:
         07:83:87:da:0a:14:5e:64:7d:6d:9e:74:22:e0:94:5d:83:88:
         03:1c:a4:03:d7:5a:2b:a9:9f:57:03:7f:97:7e:34:da:ca:70:
         b7:84:8b:37:54:f4:8e:e3:35:66:b0:7d:b8:ec:c3:d0:a6:bb:
         1f:78:55:b4:93:24:a4:80:61:0e:95:9f:b3:5b:48:56:66:6e:
         81:53:70:26:94:b8:c2:a5:61:14:a1:63:6d:59:68:d6:eb:c5:
         c9:7a:66:5f:9e:1d:ee:f0:84:91:28:75:13:ad:fa:a3:1f:ae:
         96:ef:61:61
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAYGAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUwNTIwMDc0MjUwWhcNMjUwNjI1MDc0MjUwWjAYMRYw
FAYDVQQDEw02ODJjMzI3Zi0xMDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArtr3xYdQ+oTCkS5gcfZkLAuKNzBEQMFMLSs+LVbNanKpbdqz1OXxnT6m
fi1qOXEOqwe+CMb/fXkueEW54ic1itLohV4mVgcUAACZJjJsdLRwHcS2EvZXMRP+
3o8vSdibeyts/ctyC2haa4eZSe4Qa7F/Df5FdjAcGDR4Mn/Qc6f2JWFyJu0NwBc4
nwOlAaM2QrWioYpFS7IUOPBdXRicqqCSbQ8a7Z31niDH7/mvCjQyFk6nyV0n/Wq+
9mYxZnBsCJMzybWFs6ScIqhOsZlOTwJiDAAWa54XvEzNf52f0wV0xJq1++Pp/j6h
6HeD12nHSZpbkE+IUgXS+6EiDgUl2QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA/C
uZLJw5473BwXGjsMOx64Ip6UMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wQTY4NkE3NjM1NEUxMUYwODMxQUI0OUVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsI6MA0GCSqGSIb3DQEB
CwUAA4IBAQCX67idLEfeETreCCwSslxn97sFPwORNHit8MhMWhgdHiaKg5OJy8dn
Rh0z95Iwj8d0bW2Cx0DvTvp0rO922FWSS62oUHo9R6lIV0IWBoMKfm7Utyc7RcFw
FPsSRuCgTJzeUNQw1scJUf43imGV7dB0uGG4LpHmxVH70OyJO76XVgh/GSBq2z5A
AmH3cjRiEGsHg4faChReZH1tnnQi4JRdg4gDHKQD11orqZ9XA3+XfjTaynC3hIs3
VPSO4zVmsH247MPQprsfeFW0kySkgGEOlZ+zW0hWZm6BU3AmlLjCpWEUoWNtWWjW
68XJemZfnh3u8ISRKHUTrfqjH66W72Fh
-----END CERTIFICATE-----
Generated at Sun Dec 28 06:27:00 2025 by rpki-client