This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A36C2A446A611F0A0C66CB7DAE4EC9C.roa
File:                     1A36C2A446A611F0A0C66CB7DAE4EC9C.roa (raw, json)
Hash identifier:          v9R0QBEi2bJ25zO5/7B9APQmsHfErlvYaf0bva3BnhE=
Subject key identifier:   43:48:34:C3:80:6C:55:FF:1E:58:74:EC:CD:ED:85:F5:D2:5A:1C:9E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       015B50
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A36C2A446A611F0A0C66CB7DAE4EC9C.roa
Signing time:             Wed 11 Jun 2025 09:26:07 +0000
ROA not before:           Wed 11 Jun 2025 09:26:02 +0000
ROA not after:            Mon 16 Jun 2025 09:26:02 +0000
asID:                     55020
IP address blocks:        45.195.112.0/21 maxlen: 24
                          45.195.120.0/21 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88912 (0x15b50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 11 09:26:02 2025 GMT
            Not After : Jun 16 09:26:02 2025 GMT
        Subject: CN=68494baf-d8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:c8:13:07:e8:0f:33:e8:3a:ac:01:66:dc:
                    f9:47:5b:9e:ca:1e:19:71:f2:a7:26:85:13:20:0d:
                    e2:17:25:9f:dd:98:9e:d5:fa:d0:e2:97:21:65:c8:
                    1d:97:da:c3:37:7f:95:60:57:e0:d2:59:a3:6a:5e:
                    50:ee:28:b7:4d:c8:ff:65:a6:a7:b4:f5:4b:d1:6e:
                    1e:75:ff:b8:f1:4c:86:b4:89:da:14:b2:66:1a:03:
                    82:72:dc:1d:3e:42:2d:b3:e0:94:3e:24:d9:54:36:
                    b6:4d:60:ee:48:3a:0e:ad:4d:ed:72:e5:bc:d0:d1:
                    9a:56:96:e0:72:5c:93:e5:2c:51:a7:38:8d:a3:87:
                    d5:2d:4d:15:70:3a:6b:d2:1e:21:92:9b:59:f3:ca:
                    73:6c:b9:49:75:4d:9b:75:00:d2:08:75:76:16:49:
                    07:ff:a2:bb:2e:85:83:47:ec:81:7d:6e:54:94:d6:
                    33:22:16:e4:5d:71:d1:06:65:7b:4f:ba:08:90:13:
                    3a:9d:0c:03:d0:f2:99:61:19:7a:db:1e:db:a5:aa:
                    74:7f:2b:c0:9c:e2:54:e9:5a:9f:8d:68:82:e5:f2:
                    d5:46:53:15:ba:62:56:5c:a3:a8:dd:ef:56:20:ae:
                    bc:26:46:d6:ca:0e:b7:31:27:33:a0:db:83:4c:0c:
                    66:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:48:34:C3:80:6C:55:FF:1E:58:74:EC:CD:ED:85:F5:D2:5A:1C:9E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A36C2A446A611F0A0C66CB7DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         52:65:bb:f9:0e:5d:77:84:9c:3e:de:2a:71:f5:ce:f9:4f:bb:
         e2:4f:8c:12:04:f5:a7:19:a9:a5:d7:ff:fa:32:2b:70:57:26:
         f8:22:d8:6e:42:08:b9:25:e7:4b:0f:f4:4d:8c:f7:c4:08:6c:
         a8:e9:21:36:ef:71:79:d3:67:7f:80:7d:9e:be:a1:9a:fc:fd:
         f5:c0:58:60:dc:af:49:54:14:0d:e6:0e:40:3e:00:89:d1:e0:
         09:81:da:65:cf:10:90:0a:10:ba:ab:a8:ec:29:bf:27:b2:51:
         35:58:2f:25:63:ae:3e:97:89:e9:7d:fe:82:37:e5:9a:99:40:
         de:7c:8c:38:15:1f:94:13:6e:b8:05:97:91:62:77:73:01:20:
         1c:b7:77:f5:dd:9d:21:47:23:93:10:12:21:75:13:e0:74:ad:
         61:f1:f8:f2:0a:73:40:22:31:96:32:c9:c8:89:c1:ee:33:97:
         7c:fb:d2:d4:94:45:64:e6:e0:ce:b6:ff:45:b7:11:1f:55:c2:
         25:31:62:e8:39:93:4d:bf:d9:5c:8d:9b:9d:ee:3e:12:07:16:
         35:a9:01:35:76:6b:27:d0:73:18:06:ea:47:01:eb:d1:44:45:
         6f:e9:22:f4:d8:1b:b0:8e:66:1c:cc:92:73:bd:dd:fb:a6:71:
         36:be:e3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 29 14:40:40 2025 by rpki-client