This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF02E1400CB411F08C526A69762E951A.roa
File:                     BF02E1400CB411F08C526A69762E951A.roa (raw, json)
Hash identifier:          pee3Mpwf09Ch27G8nN3AH9PLfWjhhxpNZALqQHOetdA=
Subject key identifier:   61:C8:5A:77:31:E7:AB:9E:03:A9:D4:EF:11:17:18:0F:E9:FF:FD:19
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01489C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF02E1400CB411F08C526A69762E951A.roa
Signing time:             Sat 29 Mar 2025 15:44:49 +0000
ROA not before:           Sat 29 Mar 2025 15:44:45 +0000
ROA not after:            Sun 04 May 2025 15:44:45 +0000
asID:                     138995
IP address blocks:        45.192.167.0/24 maxlen: 24
                          45.192.168.0/24 maxlen: 24
                          45.192.170.0/24 maxlen: 24
                          45.192.171.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84124 (0x1489c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Mar 29 15:44:45 2025 GMT
            Not After : May  4 15:44:45 2025 GMT
        Subject: CN=67e81571-835c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3e:53:98:44:39:21:45:9c:2e:cd:31:7a:02:
                    f0:39:b7:ba:e8:da:1a:75:c7:6a:44:c8:9e:0a:e4:
                    8b:51:f7:e4:8d:4d:e7:54:42:8d:d1:c2:3e:e0:07:
                    ae:e2:df:5e:ca:b2:19:fd:99:eb:b2:32:b6:67:95:
                    da:fb:90:55:6f:36:fd:29:1d:4d:56:3c:82:cf:5f:
                    96:fe:2c:cb:8d:0f:19:ab:30:46:a5:ee:e1:d6:0e:
                    4f:d8:92:51:dd:9b:6d:5b:bb:68:14:1a:d9:f9:74:
                    89:98:5e:79:b6:56:20:7e:39:4a:39:51:05:36:d8:
                    ab:3c:92:71:d0:19:38:c5:02:c4:45:61:e8:f5:cf:
                    fa:43:ac:1f:74:65:9d:9a:1d:3e:55:11:af:1f:00:
                    90:e7:6f:48:ed:70:be:95:da:2e:cb:2c:7d:03:6d:
                    43:c1:5f:d2:ee:04:ac:ea:4c:c1:8f:d5:25:9c:b7:
                    1d:8e:69:6d:03:35:b3:61:49:10:99:c8:f6:08:ae:
                    fa:97:ec:e7:9f:d2:a6:1f:4b:d5:2b:86:db:02:24:
                    16:fd:c6:12:56:f1:aa:6e:89:82:88:b0:12:d6:7d:
                    0a:09:9c:81:b5:a3:a5:6b:73:ab:9b:4b:03:1e:f9:
                    a3:8e:a6:65:ed:91:53:9d:49:f9:69:f2:24:12:23:
                    d9:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C8:5A:77:31:E7:AB:9E:03:A9:D4:EF:11:17:18:0F:E9:FF:FD:19
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF02E1400CB411F08C526A69762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.167.0-45.192.168.255
                  45.192.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:e0:f9:00:8c:3b:d8:b6:42:ef:c2:de:2b:a3:18:75:c0:7c:
         8e:73:45:be:eb:c4:83:36:f8:d2:e4:33:9b:20:c4:c2:49:b8:
         63:1b:1d:44:e7:bf:e8:7b:27:a2:02:20:51:35:9e:7a:36:79:
         0f:05:9b:8c:a3:63:f5:c9:35:66:ef:aa:3b:05:ad:1d:cb:f4:
         e3:80:ce:c1:82:09:fd:e4:41:03:04:d8:2b:44:3e:34:f5:b5:
         ac:a9:6a:c9:5f:b4:2b:d4:67:e0:dd:fc:e9:13:73:b2:ec:58:
         4d:ef:5b:d8:94:a3:e0:c4:b9:e7:e2:90:6f:6a:ba:10:7f:14:
         09:a1:93:3f:d6:cb:27:4a:1e:8f:8a:8c:ff:04:e5:0c:b1:b5:
         d8:c7:ba:2c:6d:f5:94:de:52:5f:38:04:e6:7c:b8:4a:e5:d9:
         00:31:b0:e5:c5:f4:4d:9a:b1:e7:05:4b:76:89:29:47:9f:db:
         bb:48:2d:3a:d5:7a:cf:9d:ac:50:1b:c1:e7:2b:25:84:1e:04:
         63:1b:12:41:46:f1:3b:38:54:6d:82:43:27:6a:95:33:16:27:
         31:61:11:65:cc:45:88:29:6f:92:e9:fe:bf:ce:87:4f:df:b6:
         e2:b5:ff:0f:db:b2:3b:e3:c8:4d:60:a4:ba:db:cf:0d:eb:f0:
         68:fa:a5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 23:20:49 2026 by rpki-client