This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E00BC3A2AF911F08D400A7EDAE4EC9C.roa
File: 8E00BC3A2AF911F08D400A7EDAE4EC9C.roa (raw, json)
Hash identifier: 3IWq9ViWpqUa80vv2uYc+Lk8uw95I5As8BaAPX3tHQ8=
Subject key identifier: 2A:21:7C:8A:5C:79:FC:0C:09:3D:E6:0B:58:90:6F:65:3E:82:70:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017F2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E00BC3A2AF911F08D400A7EDAE4EC9C.roa
Signing time: Wed 07 May 2025 04:12:57 +0000
ROA not before: Wed 07 May 2025 04:12:52 +0000
ROA not after: Tue 27 May 2025 04:12:52 +0000
asID: 400619
IP address blocks: 154.193.192.0/20 maxlen: 24
154.193.208.0/21 maxlen: 24
154.193.216.0/21 maxlen: 24
154.193.224.0/20 maxlen: 24
154.193.240.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 98094 (0x17f2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 04:12:52 2025 GMT
Not After : May 27 04:12:52 2025 GMT
Subject: CN=681addc9-5354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:78:e7:9e:a9:ad:69:e8:19:d8:02:91:a3:e6:
86:db:1a:6e:be:30:ad:27:98:87:fe:59:77:c5:63:
19:04:a1:a0:47:90:55:7b:86:a2:cd:13:d0:22:75:
5f:60:cc:5b:54:4e:f6:61:db:9e:06:ad:42:48:e8:
88:7c:99:c1:94:a8:77:f0:0a:d4:25:3a:b4:20:64:
1d:96:46:7f:81:e3:ab:68:4c:12:40:5d:3a:b0:a7:
de:8d:dd:dc:92:f5:5b:86:8c:e1:e5:f8:d0:02:4e:
48:8e:90:de:36:4f:ca:20:ab:dd:2c:e2:15:b5:aa:
87:cc:17:e1:2e:dc:89:fc:11:45:00:fb:f3:09:62:
bc:54:75:62:82:87:dc:bc:64:96:39:02:ca:e0:e6:
ad:fc:80:0a:86:97:db:21:d9:1a:4c:16:db:5d:f9:
43:ef:bf:96:d6:83:3b:14:99:6e:53:16:be:95:18:
85:73:58:f6:4b:77:f6:ec:64:4d:9f:97:4b:74:66:
c7:7e:00:18:02:38:6e:5b:51:23:70:e1:f7:c2:c4:
55:d6:dd:a5:41:8e:17:ad:c3:cf:e8:a7:c7:1e:11:
b5:08:a6:47:4a:2a:4a:51:57:64:8f:5b:87:d7:4e:
4a:62:a1:a6:65:42:24:28:58:24:34:d4:9f:eb:58:
f8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:21:7C:8A:5C:79:FC:0C:09:3D:E6:0B:58:90:6F:65:3E:82:70:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E00BC3A2AF911F08D400A7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
bc:63:d9:47:a3:da:e2:e8:6d:02:ef:6a:17:58:b8:aa:42:d7:
97:38:f6:e1:5f:1e:b4:c1:8b:16:54:cd:c5:76:4b:26:a8:7a:
c4:51:28:71:26:96:bf:90:86:f0:db:2f:43:81:17:58:47:0e:
48:a6:ab:de:3c:cd:8a:2f:d1:f2:d4:5b:75:49:da:10:8a:5a:
1f:56:11:28:68:d3:41:f8:c6:c3:16:e2:61:75:10:a4:2d:47:
34:8d:af:05:5c:72:35:f1:b0:34:4a:a5:26:9b:7b:6f:22:af:
d2:4d:8d:78:3c:55:e6:ab:70:c6:82:24:a9:29:b7:f2:00:87:
12:dd:01:e6:63:0b:be:80:da:e8:b6:55:38:97:86:ef:0e:2f:
f2:fe:18:8d:b1:7f:67:77:9c:5d:86:f4:3b:93:dc:77:a9:a8:
be:eb:d3:f1:44:e5:66:cc:dd:ce:82:5f:2a:71:62:ed:8c:48:
fd:80:f7:72:2a:c2:86:dc:02:22:6e:b0:cb:13:08:48:95:83:
3b:c6:2d:b1:1f:ab:7b:ad:7a:34:71:95:cb:5e:4c:6d:7e:f4:
4b:e5:6c:5b:a1:b1:53:9a:74:9c:d9:67:34:3f:65:fa:a2:a2:
4a:1c:bd:f8:89:86:96:2a:17:9d:a6:f1:c1:f6:32:4b:e3:5f:
67:9a:9c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 20:52:20 2025 by rpki-client