This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FC5EAE6242611F0A41DD7CDDAE4EC9C.roa File: 9FC5EAE6242611F0A41DD7CDDAE4EC9C.roa (raw, json) Hash identifier: wpd7ID1zUO4CT3qnIsXgHsaZRIcMQKtEUQKXr0OBy5c= Subject key identifier: 0A:81:14:CC:EA:78:DF:C5:0B:A5:47:E5:DF:DF:DA:D0:FA:35:E9:CC Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 017B8E Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FC5EAE6242611F0A41DD7CDDAE4EC9C.roa Signing time: Mon 28 Apr 2025 11:47:56 +0000 ROA not before: Mon 28 Apr 2025 11:47:51 +0000 ROA not after: Wed 04 Jun 2025 11:47:51 +0000 asID: 44559 IP address blocks: 154.209.19.0/24 maxlen: 24 154.209.95.0/24 maxlen: 24 154.209.132.0/24 maxlen: 24 154.209.149.0/24 maxlen: 24 154.209.156.0/24 maxlen: 24 154.209.192.0/24 maxlen: 24 154.209.193.0/24 maxlen: 24 154.209.198.0/24 maxlen: 24 154.209.204.0/24 maxlen: 24 154.210.239.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 97166 (0x17b8e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Apr 28 11:47:51 2025 GMT Not After : Jun 4 11:47:51 2025 GMT Subject: CN=680f6aec-a34b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:87:81:ad:cf:fb:34:f8:0d:7c:cc:5a:54:3c: 0f:c6:63:67:a6:1f:75:89:d4:56:10:a9:c1:cd:11: 7c:1b:36:0e:1e:d6:05:44:3d:b5:30:f3:b3:e2:01: 0a:73:a6:aa:75:37:03:a9:04:41:da:30:00:45:10: b0:7a:2e:61:7a:e9:56:d4:f5:69:7f:76:b8:76:ae: 07:5e:ac:c8:08:3d:66:8a:47:2b:04:5e:0f:6e:75: 1f:5d:8b:f9:ab:32:6f:08:ea:8c:fa:67:0f:ad:a0: 69:d1:a2:03:5d:86:26:e7:1f:d2:bd:45:71:7f:2d: 61:a1:57:1c:eb:2c:8a:d6:61:7c:ee:14:30:e7:b4: 58:8a:73:1e:09:af:0e:af:3f:70:ce:dd:fd:c4:27: 1f:67:05:ef:e7:bb:06:09:63:c0:04:70:d4:79:e8: d3:5f:bd:0e:31:94:43:b2:75:8b:81:80:19:a1:cf: f0:7e:a7:aa:e5:74:a5:9c:84:1d:ec:92:34:38:12: da:1d:f0:b2:a1:87:b6:90:c8:03:e0:cb:d2:64:4a: b4:97:0b:be:5f:be:1f:45:0e:05:ca:c6:01:68:22: 41:44:4e:b3:06:11:1b:29:8d:49:92:91:7b:1e:86: 1f:ef:ac:74:71:3e:c7:65:c9:67:70:3e:a8:62:1f: 57:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:81:14:CC:EA:78:DF:C5:0B:A5:47:E5:DF:DF:DA:D0:FA:35:E9:CC X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9FC5EAE6242611F0A41DD7CDDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.209.19.0/24 154.209.95.0/24 154.209.132.0/24 154.209.149.0/24 154.209.156.0/24 154.209.192.0/23 154.209.198.0/24 154.209.204.0/24 154.210.239.0/24 Signature Algorithm: sha256WithRSAEncryption 31:db:cd:5c:e3:4d:3f:27:7f:e8:ea:17:f7:cb:4c:e6:b9:bd: f3:fc:05:7f:28:cf:67:c0:19:61:6c:78:db:bc:e4:9e:b5:fb: 9b:85:2d:f1:d0:86:4d:fb:0e:75:b5:11:c4:42:b7:73:48:5f: 81:d2:32:fc:f5:e3:fe:ef:3e:95:13:c1:b1:32:0d:9d:83:c1: 95:d1:87:c4:7b:40:61:49:5e:0a:ca:8b:1a:c6:6c:55:9f:12: 63:c7:98:8a:45:c8:6d:72:2f:02:8f:f6:a4:f1:3f:ac:f4:a5: f7:21:c8:b1:22:80:e0:09:b5:77:19:ee:02:a8:79:bf:3d:27: b8:58:fa:bc:49:9a:f0:30:3c:00:82:49:b4:59:72:a8:6b:c4: 73:d9:f9:5c:c0:a5:e2:a6:88:20:fc:5b:2c:34:ba:67:46:85: 3f:d1:93:84:ec:12:63:1e:47:98:70:29:d3:fd:ab:a2:2d:76: 86:0b:b1:59:c7:53:75:8f:8a:1c:17:7b:18:54:f3:5c:a5:db: 22:41:45:60:b0:54:37:19:0b:c9:1c:38:01:9d:ce:05:35:65: 03:cd:07:f8:ab:6b:6f:0e:db:a1:10:dd:af:0d:47:eb:d8:16: 87:29:18:38:31:46:07:59:80:8c:87:2e:83:86:fa:69:b8:31: b0:e7:de:7a -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIDAXuOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUwNDI4MTE0NzUxWhcNMjUwNjA0MTE0NzUxWjAYMRYw FAYDVQQDEw02ODBmNmFlYy1hMzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA44eBrc/7NPgNfMxaVDwPxmNnph91idRWEKnBzRF8GzYOHtYFRD21MPOz 4gEKc6aqdTcDqQRB2jAARRCwei5heulW1PVpf3a4dq4HXqzICD1mikcrBF4PbnUf XYv5qzJvCOqM+mcPraBp0aIDXYYm5x/SvUVxfy1hoVcc6yyK1mF87hQw57RYinMe Ca8Orz9wzt39xCcfZwXv57sGCWPABHDUeejTX70OMZRDsnWLgYAZoc/wfqeq5XSl nIQd7JI0OBLaHfCyoYe2kMgD4MvSZEq0lwu+X74fRQ4FysYBaCJBRE6zBhEbKY1J kpF7HoYf76x0cT7HZclncD6oYh9XnQIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFAqB FMzqeN/FC6VH5d/f2tD6NenMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC85RkM1RUFFNjI0MjYxMUYwQTQxREQ3Q0REQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAmtETAwQAmtFfAwQAmtGE AwQAmtGVAwQAmtGcAwQBmtHAAwQAmtHGAwQAmtHMAwQAmtLvMA0GCSqGSIb3DQEB CwUAA4IBAQAx281c400/J3/o6hf3y0zmub3z/AV/KM9nwBlhbHjbvOSetfubhS3x 0IZN+w51tRHEQrdzSF+B0jL89eP+7z6VE8GxMg2dg8GV0YfEe0BhSV4KyosaxmxV nxJjx5iKRchtci8Cj/ak8T+s9KX3IcixIoDgCbV3Ge4CqHm/PSe4WPq8SZrwMDwA gkm0WXKoa8Rz2flcwKXipogg/FssNLpnRoU/0ZOE7BJjHkeYcCnT/auiLXaGC7FZ x1N1j4ocF3sYVPNcpdsiQUVgsFQ3GQvJHDgBnc4FNWUDzQf4q2tvDtuhEN2vDUfr 2BaHKRg4MUYHWYCMhy6DhvppuDGw5956 -----END CERTIFICATE-----Generated at Wed Dec 17 22:27:03 2025 by rpki-client