This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC34DB74265D11F099E8CBACDAE4EC9C.roa
File: EC34DB74265D11F099E8CBACDAE4EC9C.roa (raw, json)
Hash identifier: LgmgXpD1jVIqlUT9fG16TAsjIdS8JEBVdFiHo2M7u0A=
Subject key identifier: B8:49:54:59:FF:C3:F4:59:E0:88:FA:4E:E1:42:4B:55:8F:EF:35:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 017DD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC34DB74265D11F099E8CBACDAE4EC9C.roa
Signing time: Thu 01 May 2025 07:28:50 +0000
ROA not before: Thu 01 May 2025 07:28:44 +0000
ROA not after: Fri 09 May 2025 07:28:44 +0000
asID: 9009
IP address blocks: 154.218.217.0/24 maxlen: 24
154.218.219.0/24 maxlen: 24
154.218.224.0/24 maxlen: 24
154.218.225.0/24 maxlen: 24
154.218.227.0/24 maxlen: 24
154.218.242.0/24 maxlen: 24
154.218.244.0/24 maxlen: 24
154.218.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97750 (0x17dd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 1 07:28:44 2025 GMT
Not After : May 9 07:28:44 2025 GMT
Subject: CN=681322b1-e3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:4f:63:6a:db:56:87:52:ac:be:79:56:c4:
a4:3c:87:09:40:c1:ae:bb:52:70:ac:9c:41:ed:c8:
ef:59:30:0d:bd:23:a1:74:62:d1:36:33:ff:5e:c3:
12:5e:d3:a4:79:94:40:29:1b:5d:fb:7e:c3:82:ca:
b4:35:47:77:c5:03:1b:bf:ab:4b:ef:13:8b:83:6d:
d7:fc:48:3f:5b:e8:eb:60:a8:48:ee:65:79:e5:da:
1c:32:5a:96:09:90:73:29:25:1b:0f:bf:b1:29:50:
a2:67:ea:4d:c4:2e:96:a7:12:ba:5a:ba:e2:39:a7:
9d:13:e9:10:60:f6:2a:c7:92:e8:48:7b:aa:fd:31:
a3:91:20:e7:8a:73:60:51:a8:0c:15:f8:0e:c8:8c:
03:f7:17:0c:b2:8c:42:43:67:71:58:2b:b0:d3:3d:
54:18:ca:45:dc:31:9f:7f:6b:b0:19:a5:3c:19:67:
ea:b1:aa:c8:53:a3:6b:27:53:06:6d:32:d8:b1:63:
c7:e7:ae:e7:2e:83:1a:b1:88:b9:b1:d8:7f:35:31:
2e:f0:f7:d0:2b:d4:86:27:3a:d8:89:9f:35:1a:5b:
fe:ee:12:57:d1:34:bb:11:7e:4c:e2:dd:73:0b:b4:
d4:81:31:bb:3b:86:d6:62:55:39:d1:c6:cb:0c:a3:
1f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:49:54:59:FF:C3:F4:59:E0:88:FA:4E:E1:42:4B:55:8F:EF:35:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EC34DB74265D11F099E8CBACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.217.0/24
154.218.219.0/24
154.218.224.0/23
154.218.227.0/24
154.218.242.0/24
154.218.244.0/24
154.218.249.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:c7:bb:ea:4f:96:00:73:c5:db:01:48:f8:84:6c:82:b5:73:
58:74:5a:63:74:b0:d3:d6:87:c7:37:d9:00:ed:de:16:27:6a:
60:6c:36:9e:cb:53:f7:97:b7:7a:e8:e8:7a:ac:67:54:5f:9e:
dc:0d:bc:93:54:40:c5:78:a6:45:8f:22:fa:1c:1c:73:1c:6b:
b2:de:1b:ec:e1:0d:18:a5:ce:6e:14:7e:be:5b:19:9e:30:e0:
d0:27:0a:46:a0:9c:8a:e9:4c:50:39:b0:b5:ba:af:b2:30:99:
26:20:ba:40:a5:5d:35:0d:61:de:64:97:20:ce:5a:fe:a4:27:
5a:78:2b:64:f6:24:84:68:37:3a:12:89:ad:d4:60:67:8d:41:
a6:68:16:4a:b8:11:82:dd:61:f2:d4:88:01:f9:cf:6f:9e:59:
98:29:e7:cd:ac:82:26:57:52:6f:09:be:28:56:ca:a3:c3:16:
9e:f8:18:2f:18:fc:6c:b8:4c:9b:21:ee:36:63:ad:3f:36:84:
4c:e7:3f:68:6c:5c:d4:f7:ec:10:d8:bb:16:5f:21:af:4e:c9:
4a:de:24:6f:50:0a:8d:87:36:a1:8a:0a:0b:f2:a1:d7:cb:43:
17:bb:be:80:20:de:7a:05:fc:59:2d:b9:0e:2a:c5:9c:f0:88:
52:52:d2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 11:23:03 2025 by rpki-client