This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/651080202C1211F0B3272CD1DAE4EC9C.roa File: 651080202C1211F0B3272CD1DAE4EC9C.roa (raw, json) Hash identifier: bEp3shc4T4BbLZ1rynLvirZkZvyd3HyA92DTjuh8uQA= Subject key identifier: 07:A3:ED:B3:2B:5D:D7:AA:59:C7:8B:1A:87:E7:B0:4F:14:C9:6D:22 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 017F9E Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/651080202C1211F0B3272CD1DAE4EC9C.roa Signing time: Thu 08 May 2025 13:43:17 +0000 ROA not before: Thu 08 May 2025 13:43:12 +0000 ROA not after: Sun 25 May 2025 13:43:12 +0000 asID: 3561 IP address blocks: 154.197.8.0/22 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 98206 (0x17f9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: May 8 13:43:12 2025 GMT Not After : May 25 13:43:12 2025 GMT Subject: CN=681cb4f5-79b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:6a:36:13:c5:87:fc:5f:e0:18:2c:e9:35: 20:a3:c4:76:57:4b:d1:aa:56:6d:26:99:3c:d1:da: 9b:96:e4:f1:e0:ac:2d:2d:c4:cd:07:7d:af:bb:da: d0:f7:75:5d:59:98:ba:5e:bb:66:63:9a:01:ab:13: d6:4a:a6:18:d3:0f:62:9c:3b:16:24:c5:0d:ab:3b: 6c:0b:cb:82:6d:93:30:99:37:ce:30:67:2c:ce:a1: 15:17:03:b3:26:38:b2:33:3e:f1:86:e4:2e:ae:5b: de:59:60:b0:06:e8:3a:c7:8d:df:22:b5:0e:97:38: 69:d0:09:e4:1a:8b:88:ed:a9:41:0e:53:aa:93:32: b3:07:43:d2:ba:6a:0b:53:80:c7:a9:51:2d:f0:98: a6:07:03:6c:58:3f:0c:99:ea:56:d0:05:da:bd:6e: c6:d7:04:88:7a:37:6f:a8:90:0c:f8:3b:7f:b4:ec: 53:55:f6:47:6e:cd:b1:53:0b:b3:88:e4:67:1a:4f: 51:d5:95:a3:ac:c3:c1:9f:35:32:d9:3b:d4:6c:ff: dd:6f:6e:6c:a8:be:62:67:cd:d8:17:df:c4:e1:f5: 64:76:f0:5e:aa:ec:31:bc:53:e6:c0:88:3c:3b:72: 20:6d:8b:c6:fc:3a:67:31:c3:44:82:47:6c:9c:2b: 4f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:A3:ED:B3:2B:5D:D7:AA:59:C7:8B:1A:87:E7:B0:4F:14:C9:6D:22 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/651080202C1211F0B3272CD1DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.197.8.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:3e:07:b6:c6:75:46:98:8b:e6:a2:d3:f1:6b:fa:ad:90:21: 3f:a2:32:91:ba:88:6b:4f:1c:a5:ff:07:b3:54:d2:e7:9a:29: a0:75:f7:e3:25:c7:1e:34:05:f7:6f:0d:20:59:89:de:e8:f3: 07:8e:78:a7:5d:6d:51:52:33:6d:7e:01:13:c9:e8:f1:db:d9: ea:6d:08:cb:3e:f1:49:ae:23:74:7c:13:6d:9c:d4:6b:91:bc: 00:ca:4a:b7:cd:be:66:89:ef:11:9b:52:cd:8d:5f:8b:49:b4: 64:73:fc:78:d7:6d:4c:c0:3f:ea:18:00:d9:3a:99:18:bd:63: 94:21:2c:99:74:0c:8c:d0:31:9f:7f:54:81:6f:a1:02:4c:9f: 54:71:75:7f:87:82:4f:10:3c:43:0b:05:f3:98:b8:eb:a9:08: 12:66:49:b9:24:a1:4d:97:b7:a7:20:43:42:05:b4:05:78:6d: 0b:52:f5:fe:8c:94:34:dd:ad:8e:e4:4c:d9:90:4d:fb:d2:38: 28:2d:fd:cb:94:d5:11:f5:90:cf:1b:7f:a0:ef:1f:cb:36:8d: aa:7b:92:c6:7a:e2:f3:4f:17:73:82:3c:ad:06:6b:7e:8b:23: 01:79:a7:18:e8:13:d7:81:9b:2b:ac:4b:3a:05:2d:76:47:e9: 3f:21:06:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAX+eMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUwNTA4MTM0MzEyWhcNMjUwNTI1MTM0MzEyWjAYMRYw FAYDVQQDEw02ODFjYjRmNS03OWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAsfxqNhPFh/xf4Bgs6TUgo8R2V0vRqlZtJpk80dqbluTx4KwtLcTNB32v u9rQ93VdWZi6XrtmY5oBqxPWSqYY0w9inDsWJMUNqztsC8uCbZMwmTfOMGcszqEV FwOzJjiyMz7xhuQurlveWWCwBug6x43fIrUOlzhp0AnkGouI7alBDlOqkzKzB0PS umoLU4DHqVEt8JimBwNsWD8MmepW0AXavW7G1wSIejdvqJAM+Dt/tOxTVfZHbs2x UwuziORnGk9R1ZWjrMPBnzUy2TvUbP/db25sqL5iZ83YF9/E4fVkdvBequwxvFPm wIg8O3IgbYvG/DpnMcNEgkdsnCtPOQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAej 7bMrXdeqWceLGofnsE8UyW0iMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC82NTEwODAyMDJDMTIxMUYwQjMyNzJDRDFEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsUIMA0GCSqGSIb3DQEB CwUAA4IBAQB/Pge2xnVGmIvmotPxa/qtkCE/ojKRuohrTxyl/wezVNLnmimgdffj JcceNAX3bw0gWYne6PMHjninXW1RUjNtfgETyejx29nqbQjLPvFJriN0fBNtnNRr kbwAykq3zb5mie8Rm1LNjV+LSbRkc/x4121MwD/qGADZOpkYvWOUISyZdAyM0DGf f1SBb6ECTJ9UcXV/h4JPEDxDCwXzmLjrqQgSZkm5JKFNl7enIENCBbQFeG0LUvX+ jJQ03a2O5EzZkE370jgoLf3LlNUR9ZDPG3+g7x/LNo2qe5LGeuLzTxdzgjytBmt+ iyMBeacY6BPXgZsrrEs6BS12R+k/IQZx -----END CERTIFICATE-----Generated at Sat Dec 20 19:01:39 2025 by rpki-client