This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54BA2FC8469D11F0A7444F7FDAE4EC9C.roa
File:                     54BA2FC8469D11F0A7444F7FDAE4EC9C.roa (raw, json)
Hash identifier:          JvvD8MM0M9dTGivyeU9h7a86NzXVxfRenoteSb0MBJU=
Subject key identifier:   1B:DA:04:7D:35:6E:73:B7:28:BF:12:9E:EB:7A:C2:6C:D3:B8:67:1B
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       0185F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54BA2FC8469D11F0A7444F7FDAE4EC9C.roa
Signing time:             Wed 11 Jun 2025 08:23:20 +0000
ROA not before:           Wed 11 Jun 2025 08:23:15 +0000
ROA not after:            Mon 16 Jun 2025 08:23:15 +0000
asID:                     139923
IP address blocks:        154.210.16.0/20 maxlen: 24
                          154.213.64.0/20 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99830 (0x185f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jun 11 08:23:15 2025 GMT
            Not After : Jun 16 08:23:15 2025 GMT
        Subject: CN=68493cf8-ca7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b0:e0:28:9c:10:32:07:c1:58:bd:b0:48:04:
                    af:29:14:dc:24:93:c5:e6:7f:c0:59:a7:b8:0e:0e:
                    9c:2f:b3:a2:fa:76:df:f1:eb:9f:1a:bd:4a:bd:9a:
                    f8:40:a5:05:7e:f1:4d:26:cf:2d:a7:a3:25:32:94:
                    ca:bd:2d:83:91:0a:79:98:ed:a2:57:0b:d7:da:26:
                    ce:19:bb:c2:63:fa:b7:88:75:4f:d5:32:43:de:c2:
                    41:c1:d7:e7:a7:57:2e:d1:66:88:03:aa:af:0e:87:
                    cc:c4:60:59:4b:e7:eb:48:cf:bb:8f:c4:02:e7:7f:
                    77:56:0a:16:13:f1:4e:a5:34:1a:60:fd:0b:e3:69:
                    91:2e:bd:14:67:c1:26:69:65:ac:af:48:f2:11:86:
                    ca:9c:64:c7:32:6d:07:5d:63:e6:fb:b2:41:82:06:
                    d8:65:2d:c8:9a:56:61:49:22:12:42:56:b4:27:1b:
                    bf:0a:db:b4:c0:07:f6:5b:6f:ae:0b:b2:97:43:78:
                    ea:a0:e6:67:c1:49:ab:49:3c:74:8a:52:fd:9a:51:
                    85:20:89:b6:b0:dd:1d:2a:7f:b0:b4:8a:a3:37:f9:
                    9d:01:e0:60:11:00:2a:80:70:ec:6c:9c:c9:e6:5e:
                    b8:0d:71:18:f4:4a:a7:0a:3e:15:8f:45:e4:bb:25:
                    c6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DA:04:7D:35:6E:73:B7:28:BF:12:9E:EB:7A:C2:6C:D3:B8:67:1B
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54BA2FC8469D11F0A7444F7FDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.16.0/20
                  154.213.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         27:a1:01:55:71:a9:db:cb:2e:44:1e:61:00:bd:cd:a3:c1:f1:
         e6:c6:64:b0:c6:36:d1:24:46:e2:50:24:97:1a:92:72:34:60:
         72:c9:d3:20:c1:d7:16:1f:c0:0c:14:8a:76:24:52:58:d1:78:
         61:19:f6:c2:7d:b1:15:b8:e7:d1:a1:47:59:44:4d:fd:31:0c:
         d5:ce:85:eb:99:eb:d5:8a:0c:5c:c3:da:37:d1:a6:3d:a1:49:
         dc:57:1b:f2:21:8c:71:d8:44:6a:81:bb:06:98:cc:1b:c7:eb:
         6f:93:96:df:ca:12:bc:bd:9e:df:91:df:dc:1b:32:0d:ac:2f:
         24:e5:82:ab:f1:b7:4c:8b:53:70:90:ab:20:de:16:06:84:0a:
         65:c5:72:b1:52:c0:ee:31:5b:92:fa:73:b4:ef:7d:27:4a:4a:
         f6:f1:a6:2c:aa:15:46:2e:d1:d8:f1:a4:a7:85:35:4b:bd:ef:
         39:db:8b:b2:cf:c6:94:8c:61:a9:84:9a:c7:57:4e:55:d6:b2:
         42:72:8f:dd:f9:e2:b3:dd:e9:64:c3:d7:6e:44:fc:2c:0f:99:
         62:cc:e3:48:30:68:94:cd:b4:32:e6:05:14:c4:d9:21:d4:24:
         a0:26:ab:73:29:0e:03:eb:02:67:b1:49:3f:5a:7e:a7:36:59:
         54:7c:e7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----