This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/856B42A8265711F0B9483784DAE4EC9C.roa File: 856B42A8265711F0B9483784DAE4EC9C.roa (raw, json) Hash identifier: nPka9Mg4o/EYU1taqOiQL6jDRVNoCgBo4FZhYfdOcgc= Subject key identifier: BC:61:EC:AF:61:CE:2A:31:19:A8:B0:2E:4E:D9:CD:1A:33:A2:94:01 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 017DC6 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/856B42A8265711F0B9483784DAE4EC9C.roa Signing time: Thu 01 May 2025 06:42:59 +0000 ROA not before: Thu 01 May 2025 06:42:55 +0000 ROA not after: Fri 09 May 2025 06:42:55 +0000 asID: 9009 IP address blocks: 154.216.194.0/24 maxlen: 24 154.216.202.0/24 maxlen: 24 154.216.207.0/24 maxlen: 24 154.216.208.0/24 maxlen: 24 154.216.209.0/24 maxlen: 24 154.216.214.0/24 maxlen: 24 154.216.223.0/24 maxlen: 24 154.216.228.0/24 maxlen: 24 154.216.234.0/24 maxlen: 24 154.216.250.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 97734 (0x17dc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: May 1 06:42:55 2025 GMT Not After : May 9 06:42:55 2025 GMT Subject: CN=681317f3-29b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:70:af:4e:68:4a:3a:2e:cd:22:7a:dc:a5:37: c1:2d:51:36:33:97:57:ca:59:b6:d6:83:57:09:48: 23:59:a5:b7:ae:aa:cc:00:14:e7:0f:62:e9:91:18: 55:b2:3d:87:3f:07:cb:c2:d6:a0:a9:44:01:e4:dd: 51:33:34:29:f1:47:46:0c:f8:3b:50:10:63:52:ef: 05:60:f3:4f:95:18:8a:7a:a6:a1:56:44:54:36:e1: d2:06:2f:d8:90:15:6f:ec:1b:95:27:ec:a2:ba:4e: 83:ef:04:9a:95:d5:f7:47:96:40:c2:73:ed:9b:b0: cc:d4:0d:c7:b3:50:e9:b9:2b:f4:f8:c7:40:b6:59: 05:7c:61:ad:c5:f6:d1:ae:23:55:c2:7c:7a:e4:ed: 3e:44:c1:67:95:82:00:cd:7a:9b:52:e4:c6:5e:33: ad:96:f0:bc:d9:f5:05:54:1f:5d:dd:30:c7:38:4a: 93:ee:93:96:72:a2:2f:39:4d:ba:c8:8e:26:4d:9e: 88:a5:a3:b2:03:82:c9:2f:15:84:b2:2f:59:96:f9: 35:5a:26:fb:3b:33:be:e4:15:98:f4:fe:78:96:ec: 25:f6:72:d9:0b:82:ed:e2:76:c5:8f:d8:4d:b8:17: a7:e7:62:aa:bd:c0:53:64:9f:00:0a:05:a1:dd:62: a7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:61:EC:AF:61:CE:2A:31:19:A8:B0:2E:4E:D9:CD:1A:33:A2:94:01 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/856B42A8265711F0B9483784DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.216.194.0/24 154.216.202.0/24 154.216.207.0-154.216.209.255 154.216.214.0/24 154.216.223.0/24 154.216.228.0/24 154.216.234.0/24 154.216.250.0/24 Signature Algorithm: sha256WithRSAEncryption bc:70:b5:f0:59:c7:b4:71:f1:e2:1e:a3:1e:20:48:51:a4:f0: c2:13:a3:6f:15:7e:e4:ea:9f:f4:48:d1:39:d1:46:50:98:ca: 7f:18:d0:25:ac:e2:72:06:1b:84:2c:ec:3e:14:db:d8:2c:5c: fa:b6:76:02:7e:7b:9b:dc:f4:8a:15:e6:35:d7:39:4a:58:2d: 2f:b9:06:b8:1d:66:36:d9:04:2e:d2:c0:b1:34:d0:a4:6e:fc: 81:74:74:ea:d7:5c:45:03:5f:4c:cf:6d:9e:52:63:50:56:dd: c5:2e:b5:b5:f6:5c:c9:cb:6c:62:c3:ae:2a:4e:ef:8d:e9:54: b4:45:c7:48:87:19:ca:af:9e:2d:32:b8:60:27:6c:0f:b3:24: 71:fb:1a:ec:9b:5f:1c:f6:da:14:11:92:9b:27:97:95:b1:09: 3b:0d:f8:bb:a8:e6:1c:46:9a:14:3d:71:49:52:9a:66:ae:9e: 2e:6c:53:36:e7:58:9a:52:10:44:71:e3:45:8d:94:2c:8b:4e: 99:d1:2b:0f:de:84:e0:47:10:d8:f4:e4:23:99:bb:60:75:e6: fa:ca:28:c0:4d:dc:7f:3a:66:c9:79:e2:4e:f8:b5:3e:61:50: fb:31:7c:95:e9:71:79:52:b2:5f:0e:20:0a:ed:13:45:3c:46: f7:0f:f6:0e -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIDAX3GMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUwNTAxMDY0MjU1WhcNMjUwNTA5MDY0MjU1WjAYMRYw FAYDVQQDEw02ODEzMTdmMy0yOWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAzXCvTmhKOi7NInrcpTfBLVE2M5dXylm21oNXCUgjWaW3rqrMABTnD2Lp kRhVsj2HPwfLwtagqUQB5N1RMzQp8UdGDPg7UBBjUu8FYPNPlRiKeqahVkRUNuHS Bi/YkBVv7BuVJ+yiuk6D7wSaldX3R5ZAwnPtm7DM1A3Hs1DpuSv0+MdAtlkFfGGt xfbRriNVwnx65O0+RMFnlYIAzXqbUuTGXjOtlvC82fUFVB9d3TDHOEqT7pOWcqIv OU26yI4mTZ6IpaOyA4LJLxWEsi9Zlvk1Wib7OzO+5BWY9P54luwl9nLZC4Lt4nbF j9hNuBen52KqvcBTZJ8ACgWh3WKnVwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFLxh 7K9hzioxGaiwLk7ZzRozopQBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC84NTZCNDJBODI2NTcxMUYwQjk0ODM3ODREQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAmtjCAwQAmtjKMAwDBACa 2M8DBAGa2NADBACa2NYDBACa2N8DBACa2OQDBACa2OoDBACa2PowDQYJKoZIhvcN AQELBQADggEBALxwtfBZx7Rx8eIeox4gSFGk8MITo28VfuTqn/RI0TnRRlCYyn8Y 0CWs4nIGG4Qs7D4U29gsXPq2dgJ+e5vc9IoV5jXXOUpYLS+5BrgdZjbZBC7SwLE0 0KRu/IF0dOrXXEUDX0zPbZ5SY1BW3cUutbX2XMnLbGLDripO743pVLRFx0iHGcqv ni0yuGAnbA+zJHH7GuybXxz22hQRkpsnl5WxCTsN+Luo5hxGmhQ9cUlSmmauni5s UzbnWJpSEERx40WNlCyLTpnRKw/ehOBHENj05COZu2B15vrKKMBN3H86Zsl54k74 tT5hUPsxfJXpcXlSsl8OIArtE0U8RvcP9g4= -----END CERTIFICATE-----Generated at Sat Dec 20 09:49:50 2025 by rpki-client