This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/281C6D42FA7511EF96697A9A762E951A.roa File: 281C6D42FA7511EF96697A9A762E951A.roa (raw, json) Hash identifier: iTKs9L5gEoNd+K5EuRJ8IH9vqYR4E2WqhFf25HYggyc= Subject key identifier: 92:E6:AF:16:FE:4A:B0:05:9B:EE:AF:26:D6:D9:1C:55:B3:FE:67:56 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 0172A9 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/281C6D42FA7511EF96697A9A762E951A.roa Signing time: Thu 06 Mar 2025 10:24:16 +0000 ROA not before: Thu 06 Mar 2025 10:24:12 +0000 ROA not after: Tue 25 Mar 2025 10:24:12 +0000 asID: 39600 IP address blocks: 154.90.16.0/21 maxlen: 24 154.95.56.0/21 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 94889 (0x172a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Mar 6 10:24:12 2025 GMT Not After : Mar 25 10:24:12 2025 GMT Subject: CN=67c977d0-2fdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:30:e8:a2:36:43:11:22:9a:30:86:ea:7a:0f: f8:aa:74:de:cd:f4:57:89:49:f4:89:6f:73:da:48: 11:8e:41:fb:e5:80:37:03:88:05:ef:1c:6d:2c:47: 37:ed:95:0a:db:a6:f3:4e:9c:e7:da:54:d5:c8:67: 63:a5:ff:f7:f8:71:05:58:03:ff:32:f5:2c:e3:38: b2:19:a0:01:ff:7a:ca:8b:45:80:e3:06:70:a1:6b: e1:10:b3:b4:b1:6d:aa:93:ce:82:18:26:dc:76:a1: 07:de:ff:26:d3:26:0b:f4:ed:25:b4:87:dd:dd:f1: 0d:3f:dc:c8:2f:e8:24:f8:e6:2b:74:5c:72:85:a3: e0:92:d3:4f:e6:0d:88:c0:b7:12:d7:eb:1f:e6:29: bf:41:bd:7e:69:e0:86:c7:dc:6e:87:0c:7f:f7:0e: 74:28:ca:cf:7f:19:bb:2c:01:7c:c2:ab:6b:92:64: e7:bf:ff:4d:79:77:f9:14:ae:fa:8f:94:2c:2a:78: 07:f5:61:d6:43:2e:82:40:2b:3c:60:e9:6e:f6:60: 45:52:12:c6:20:5c:8d:e6:d9:3e:f1:69:dc:d0:94: f2:0a:a8:fc:45:8d:51:93:82:03:99:1e:33:66:8b: 15:2b:2d:25:b7:56:5f:c4:04:5c:60:de:c4:d0:aa: 52:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E6:AF:16:FE:4A:B0:05:9B:EE:AF:26:D6:D9:1C:55:B3:FE:67:56 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/281C6D42FA7511EF96697A9A762E951A.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.90.16.0/21 154.95.56.0/21 Signature Algorithm: sha256WithRSAEncryption 50:62:91:84:14:68:ad:69:06:c5:27:80:65:69:cc:a7:bf:2f: be:b7:b0:c2:35:0d:16:8f:ba:8b:20:58:99:a3:f8:e9:bd:33: d9:d0:fe:4f:b9:e2:d7:ec:80:78:5f:de:9c:76:c6:7b:f2:73: 59:64:bb:76:5a:e9:c7:d1:09:e3:b2:ac:e1:a7:73:46:f7:7c: a8:a3:5b:f1:e2:4d:35:40:94:87:fb:88:90:0d:aa:55:3d:e6: fb:7c:d9:83:2b:2c:ac:a8:a6:20:00:df:6e:36:13:10:38:bc: b3:0d:9e:d7:5e:b0:b2:37:93:41:09:7d:72:17:ad:78:15:a8: a1:23:ee:3d:be:28:df:ac:ea:78:6c:86:b0:cf:d7:c8:17:90: ad:4a:9a:08:51:14:d8:eb:43:13:11:54:56:c3:4e:fb:6a:5e: 7c:4d:71:b8:47:14:1e:e1:dc:0f:17:1c:2d:6d:cf:21:6f:f4: d7:48:0f:a0:28:97:31:bd:d6:79:5a:01:0b:d7:cd:e8:86:73: 4a:a2:b6:f4:c0:23:d0:3c:ff:16:fd:cd:d1:c8:c5:1f:bc:bd: fd:ab:f0:67:27:ba:66:6b:a0:a4:36:71:82:e9:4e:9d:58:c0: 4e:1b:6b:4d:4a:ca:64:ac:b2:7a:87:ce:65:69:a4:8f:52:ae: e5:55:6d:e7 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAXKpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUwMzA2MTAyNDEyWhcNMjUwMzI1MTAyNDEyWjAYMRYw FAYDVQQDEw02N2M5NzdkMC0yZmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA1TDoojZDESKaMIbqeg/4qnTezfRXiUn0iW9z2kgRjkH75YA3A4gF7xxt LEc37ZUK26bzTpzn2lTVyGdjpf/3+HEFWAP/MvUs4ziyGaAB/3rKi0WA4wZwoWvh ELO0sW2qk86CGCbcdqEH3v8m0yYL9O0ltIfd3fENP9zIL+gk+OYrdFxyhaPgktNP 5g2IwLcS1+sf5im/Qb1+aeCGx9xuhwx/9w50KMrPfxm7LAF8wqtrkmTnv/9NeXf5 FK76j5QsKngH9WHWQy6CQCs8YOlu9mBFUhLGIFyN5tk+8Wnc0JTyCqj8RY1Rk4ID mR4zZosVKy0lt1ZfxARcYN7E0KpS7wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFJLm rxb+SrAFm+6vJtbZHFWz/mdWMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8yODFDNkQ0MkZBNzUxMUVGOTY2OTdBOUE3NjJFOTUxQS5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDmloQAwQDml84MA0GCSqG SIb3DQEBCwUAA4IBAQBQYpGEFGitaQbFJ4Blacynvy++t7DCNQ0Wj7qLIFiZo/jp vTPZ0P5PueLX7IB4X96cdsZ78nNZZLt2WunH0Qnjsqzhp3NG93yoo1vx4k01QJSH +4iQDapVPeb7fNmDKyysqKYgAN9uNhMQOLyzDZ7XXrCyN5NBCX1yF614FaihI+49 vijfrOp4bIawz9fIF5CtSpoIURTY60MTEVRWw077al58TXG4RxQe4dwPFxwtbc8h b/TXSA+gKJcxvdZ5WgEL183ohnNKorb0wCPQPP8W/c3RyMUfvL39q/BnJ7pma6Ck NnGC6U6dWMBOG2tNSspkrLJ6h85laaSPUq7lVW3n -----END CERTIFICATE-----Generated at Tue Dec 23 16:30:49 2025 by rpki-client