This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C9DA91C107A11F0B0822751762E951A.roa File: 5C9DA91C107A11F0B0822751762E951A.roa (raw, json) Hash identifier: +t+66MOt2WyNFpwq0PjDjwbixheZ8hVThxml9RLmRLY= Subject key identifier: 1A:4F:3A:DE:56:3F:4D:34:4F:49:74:F5:F3:1E:85:2C:BC:60:9B:7A Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 017775 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C9DA91C107A11F0B0822751762E951A.roa Signing time: Thu 03 Apr 2025 10:56:58 +0000 ROA not before: Thu 03 Apr 2025 10:56:53 +0000 ROA not after: Mon 14 Apr 2025 10:56:53 +0000 asID: 5065 IP address blocks: 154.198.20.0/24 maxlen: 24 154.198.21.0/24 maxlen: 24 154.198.22.0/24 maxlen: 24 154.198.23.0/24 maxlen: 24 154.205.49.0/24 maxlen: 24 154.212.20.0/22 maxlen: 24 154.212.26.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 96117 (0x17775) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Apr 3 10:56:53 2025 GMT Not After : Apr 14 10:56:53 2025 GMT Subject: CN=67ee6979-6ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d4:17:13:9c:96:de:0f:c4:49:92:62:44:b2: 40:76:3e:07:34:28:06:bc:34:98:1b:7f:0a:54:fa: 26:6a:77:76:e5:2d:fa:ff:37:c5:f5:4b:ae:e0:9d: 14:aa:ea:f8:e2:96:1e:c4:ca:05:95:8b:98:79:e5: 68:40:27:c7:06:af:aa:bb:7b:c6:c4:f3:f4:6c:99: b0:af:de:df:31:be:26:c6:33:6e:de:3d:83:da:ef: eb:e8:9f:43:67:e7:51:95:fe:78:ca:ea:db:29:f3: 4e:ab:c6:6e:26:b9:93:26:0f:5d:4c:fc:ab:d5:cf: ff:19:5c:d8:2e:d7:0d:9f:aa:3c:2d:4c:6c:11:82: 9c:db:65:90:f6:21:1e:3a:20:f6:92:99:29:7a:2c: 69:0b:63:86:a4:01:86:af:9b:5b:3c:40:7b:66:91: 5b:2e:7d:cf:1f:c3:cc:a6:48:8b:10:1d:7b:fc:b4: e7:05:cd:3c:41:c7:0a:79:04:44:28:8f:1f:0c:8f: f2:c0:ea:d1:1e:5b:ef:b6:b7:2f:69:2c:df:e9:0e: dd:80:ca:c4:ca:aa:01:b7:29:3f:94:7f:d7:05:76: 11:86:be:90:e8:82:10:a9:92:95:97:37:79:26:4a: db:ff:7a:73:76:19:b1:a9:8f:05:50:f8:3c:32:da: c7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:4F:3A:DE:56:3F:4D:34:4F:49:74:F5:F3:1E:85:2C:BC:60:9B:7A X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C9DA91C107A11F0B0822751762E951A.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.198.20.0/22 154.205.49.0/24 154.212.20.0/22 154.212.26.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:a4:a0:9b:03:90:ea:c9:72:22:fe:9f:13:ae:0f:69:b1:32: d8:1d:a2:1b:79:5e:0a:14:9e:40:a5:3f:86:53:bd:8b:3d:16: 00:52:43:c7:26:be:f5:d1:d9:e3:7c:3d:63:88:55:49:3b:52: 02:7c:6a:f9:d2:78:f1:89:cc:c6:f4:11:52:25:58:12:2e:01: c3:0c:f3:5c:48:cf:53:0e:82:24:54:de:0f:0e:5e:b4:c6:1d: 31:2a:06:d7:8d:b6:98:5c:21:8a:85:29:0d:90:5c:83:f7:94: 41:19:43:52:12:6a:d8:c1:89:28:c8:27:5a:c4:ff:81:0a:5c: cc:64:aa:38:df:52:6b:0a:8c:15:40:97:3b:6d:c9:cc:fe:ea: 6b:79:85:37:78:a7:5d:30:e8:90:c4:10:62:c9:df:ec:db:f6: 17:c3:e7:22:c7:78:2b:d0:1e:eb:89:09:ad:38:7d:4f:0b:9c: 6b:37:4a:73:f4:d2:09:62:4f:6c:8f:25:7f:5c:ba:01:07:f4: b7:5b:78:b4:3f:d5:fa:3e:1d:a8:1e:ea:83:c6:08:33:d2:26: 5d:15:74:31:7d:e1:4d:a4:e6:a2:58:00:a3:ad:88:70:26:4d: bd:83:bf:94:65:be:a3:10:52:83:cc:cc:a5:d2:d8:38:e0:02: d3:b9:20:95 -----BEGIN CERTIFICATE----- MIIFljCCBH6gAwIBAgIDAXd1MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUwNDAzMTA1NjUzWhcNMjUwNDE0MTA1NjUzWjAYMRYw FAYDVQQDEw02N2VlNjk3OS02ZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEArdQXE5yW3g/ESZJiRLJAdj4HNCgGvDSYG38KVPomand25S36/zfF9Uuu 4J0Uqur44pYexMoFlYuYeeVoQCfHBq+qu3vGxPP0bJmwr97fMb4mxjNu3j2D2u/r 6J9DZ+dRlf54yurbKfNOq8ZuJrmTJg9dTPyr1c//GVzYLtcNn6o8LUxsEYKc22WQ 9iEeOiD2kpkpeixpC2OGpAGGr5tbPEB7ZpFbLn3PH8PMpkiLEB17/LTnBc08QccK eQREKI8fDI/ywOrRHlvvtrcvaSzf6Q7dgMrEyqoBtyk/lH/XBXYRhr6Q6IIQqZKV lzd5Jkrb/3pzdhmxqY8FUPg8MtrHLQIDAQABo4ICtzCCArMwHQYDVR0OBBYEFBpP Ot5WP000T0l09fMehSy8YJt6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC81QzlEQTkxQzEwN0ExMUYwQjA4MjI3NTE3NjJFOTUxQS5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCmsYUAwQAms0xAwQCmtQU AwQAmtQaMA0GCSqGSIb3DQEBCwUAA4IBAQAfpKCbA5DqyXIi/p8Trg9psTLYHaIb eV4KFJ5ApT+GU72LPRYAUkPHJr710dnjfD1jiFVJO1ICfGr50njxiczG9BFSJVgS LgHDDPNcSM9TDoIkVN4PDl60xh0xKgbXjbaYXCGKhSkNkFyD95RBGUNSEmrYwYko yCdaxP+BClzMZKo431JrCowVQJc7bcnM/upreYU3eKddMOiQxBBiyd/s2/YXw+ci x3gr0B7riQmtOH1PC5xrN0pz9NIJYk9sjyV/XLoBB/S3W3i0P9X6Ph2oHuqDxggz 0iZdFXQxfeFNpOaiWACjrYhwJk29g7+UZb6jEFKDzMyl0tg44ALTuSCV -----END CERTIFICATE-----Generated at Tue Dec 23 14:32:48 2025 by rpki-client