This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EF7A2FA3BDC11F0B894CD8FDAE4EC9C.roa File: 2EF7A2FA3BDC11F0B894CD8FDAE4EC9C.roa (raw, json) Hash identifier: IqPChxtAjFPv3SCc5P+z6bMk41uhzw7EwhtouzYdx3k= Subject key identifier: 3F:1E:58:BC:CA:78:0B:5F:E2:5A:B1:87:22:6A:35:F5:BB:04:A9:4A Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 018394 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EF7A2FA3BDC11F0B894CD8FDAE4EC9C.roa Signing time: Wed 28 May 2025 15:55:32 +0000 ROA not before: Wed 28 May 2025 15:55:27 +0000 ROA not after: Sun 08 Jun 2025 15:55:27 +0000 asID: 399077 IP address blocks: 154.91.87.0/24 maxlen: 24 154.91.88.0/24 maxlen: 24 154.91.89.0/24 maxlen: 24 154.91.90.0/24 maxlen: 24 154.91.91.0/24 maxlen: 24 154.91.92.0/24 maxlen: 24 154.91.93.0/24 maxlen: 24 154.91.94.0/24 maxlen: 24 154.91.95.0/24 maxlen: 24 154.91.96.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 99220 (0x18394) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: May 28 15:55:27 2025 GMT Not After : Jun 8 15:55:27 2025 GMT Subject: CN=683731f4-df9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0c:cc:b2:60:4a:2e:51:50:68:c1:a0:8e:38: 89:4c:d6:d1:9f:fb:87:ec:eb:d3:f1:42:bc:06:60: b1:b7:2e:c7:0a:0d:ac:95:ea:37:eb:6e:6a:73:e8: 80:78:a8:73:f4:08:61:ad:48:f9:8a:b5:10:b7:65: 9e:30:ee:cd:28:46:de:9f:c6:34:0c:7c:35:00:49: 3c:9f:0f:0e:19:cd:12:59:ac:8f:ae:b7:d9:22:10: c0:d4:60:47:5d:5f:85:9e:c8:c2:39:38:39:f1:7f: 31:a8:32:1e:f0:2d:d4:84:3e:17:43:de:6b:b6:0a: 53:92:63:18:90:b4:e0:4a:65:28:f4:66:aa:09:52: 2d:11:11:84:7b:09:7f:1e:04:81:e3:f7:1b:59:2b: 47:48:51:5b:da:b6:f3:a7:47:b9:0d:8b:02:4f:52: b3:50:30:6d:e7:14:2f:fc:9a:7d:b4:14:2f:a9:42: 6e:36:09:e1:bb:2e:6a:71:b7:f0:69:c3:0d:cc:36: f6:7e:6b:43:2e:c3:d9:9c:cb:c3:c8:1e:b8:6d:d8: 3b:d2:bd:8a:c7:49:54:03:2e:87:7c:a9:28:f2:5a: cb:dd:82:35:33:d2:89:01:d0:3f:6e:87:8a:55:7e: 1d:94:03:06:06:24:aa:f1:aa:1c:8d:22:c7:01:77: 55:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1E:58:BC:CA:78:0B:5F:E2:5A:B1:87:22:6A:35:F5:BB:04:A9:4A X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2EF7A2FA3BDC11F0B894CD8FDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.91.87.0-154.91.96.255 Signature Algorithm: sha256WithRSAEncryption 05:5b:6d:c9:69:fa:0a:ee:7a:05:00:73:c2:83:7d:69:6f:68: 8b:46:bb:bc:88:f8:ff:c2:e3:74:2a:1e:15:e0:11:a4:0b:02: 17:a6:4e:9b:78:0d:ba:ab:66:07:ed:42:0d:4d:86:2f:38:4a: 80:05:6b:52:6c:37:20:e8:94:97:72:73:53:cd:43:a1:93:b7: 18:92:44:65:e2:9a:ae:ac:cc:da:e6:9d:5b:53:c9:80:7c:1e: fb:06:a7:d0:72:93:74:c6:55:2a:9f:6e:43:0f:dc:f2:5d:13: 07:f6:d9:22:c4:b7:6f:d9:d0:00:00:e7:e3:1e:25:ec:c5:68: a3:ec:a4:73:34:18:8e:e6:7f:df:1d:8d:cb:af:f4:3d:c5:6f: 6d:23:74:e5:1c:86:17:dd:96:ac:34:2b:bb:60:13:b2:84:ea: 09:89:c9:63:0a:fb:ba:17:5c:36:14:3f:fb:05:a3:f6:bb:78: 44:fd:27:dd:76:7e:4c:cf:a4:60:0e:e3:23:b1:03:d1:7e:44: 34:16:1a:8a:65:73:0b:18:a8:d7:04:3f:a9:c2:18:d4:7f:0b: 34:24:39:71:ac:fd:5c:4b:80:cb:73:62:83:0d:13:a6:da:23: dc:72:7a:e7:c4:21:18:3d:14:fe:23:d0:37:0f:15:66:dc:97: 75:66:70:3d -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIDAYOUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUwNTI4MTU1NTI3WhcNMjUwNjA4MTU1NTI3WjAYMRYw FAYDVQQDEw02ODM3MzFmNC1kZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEApwzMsmBKLlFQaMGgjjiJTNbRn/uH7OvT8UK8BmCxty7HCg2sleo3625q c+iAeKhz9AhhrUj5irUQt2WeMO7NKEben8Y0DHw1AEk8nw8OGc0SWayPrrfZIhDA 1GBHXV+FnsjCOTg58X8xqDIe8C3UhD4XQ95rtgpTkmMYkLTgSmUo9GaqCVItERGE ewl/HgSB4/cbWStHSFFb2rbzp0e5DYsCT1KzUDBt5xQv/Jp9tBQvqUJuNgnhuy5q cbfwacMNzDb2fmtDLsPZnMvDyB64bdg70r2Kx0lUAy6HfKko8lrL3YI1M9KJAdA/ boeKVX4dlAMGBiSq8aocjSLHAXdV4wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFD8e WLzKeAtf4lqxhyJqNfW7BKlKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8yRUY3QTJGQTNCREMxMUYwQjg5NENEOEZEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaW1cDBACaW2AwDQYJ KoZIhvcNAQELBQADggEBAAVbbclp+gruegUAc8KDfWlvaItGu7yI+P/C43QqHhXg EaQLAhemTpt4DbqrZgftQg1Nhi84SoAFa1JsNyDolJdyc1PNQ6GTtxiSRGXimq6s zNrmnVtTyYB8HvsGp9Byk3TGVSqfbkMP3PJdEwf22SLEt2/Z0AAA5+MeJezFaKPs pHM0GI7mf98djcuv9D3Fb20jdOUchhfdlqw0K7tgE7KE6gmJyWMK+7oXXDYUP/sF o/a7eET9J912fkzPpGAO4yOxA9F+RDQWGoplcwsYqNcEP6nCGNR/CzQkOXGs/VxL gMtzYoMNE6baI9xyeufEIRg9FP4j0DcPFWbcl3VmcD0= -----END CERTIFICATE-----Generated at Tue Dec 16 06:43:48 2025 by rpki-client