This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74A12FA0F8CB11EF96FC1D62762E951A.roa File: 74A12FA0F8CB11EF96FC1D62762E951A.roa (raw, json) Hash identifier: JIh+skMIHbGeyX5/tH8pF3PRwmYmZvcXFJqYn60WJvE= Subject key identifier: 62:E2:9D:90:3E:3A:F9:F7:B5:76:D7:D5:3C:06:65:81:CF:6C:08:EA Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01717C Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74A12FA0F8CB11EF96FC1D62762E951A.roa Signing time: Tue 04 Mar 2025 07:36:59 +0000 ROA not before: Tue 04 Mar 2025 07:36:55 +0000 ROA not after: Mon 31 Mar 2025 07:36:55 +0000 asID: 44559 IP address blocks: 154.209.19.0/24 maxlen: 24 154.209.95.0/24 maxlen: 24 154.209.132.0/24 maxlen: 24 154.209.133.0/24 maxlen: 24 154.209.135.0/24 maxlen: 24 154.209.159.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 94588 (0x1717c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Mar 4 07:36:55 2025 GMT Not After : Mar 31 07:36:55 2025 GMT Subject: CN=67c6ad9b-dff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:31:e9:87:22:3e:1b:35:1d:16:0f:a8:a3:5e: 87:67:90:19:d0:59:bd:2a:f5:26:1b:5e:2f:38:84: 22:0d:89:ba:3c:cd:19:99:60:86:75:62:59:78:7e: 03:8c:7d:7d:85:f3:20:6f:66:aa:9b:29:ea:15:4f: 52:8f:8c:b9:6f:b6:1a:f0:63:41:cc:86:9f:51:43: 3d:97:0c:c4:a6:55:36:37:59:cb:f0:24:4c:d1:b0: a1:7a:b2:7d:e3:fc:b2:6a:de:61:95:97:d8:e8:5b: 55:d0:e9:74:90:32:66:c2:a1:1e:ca:d9:9a:b1:78: 38:00:00:52:77:0a:94:f7:5f:3c:c7:33:c0:3f:39: 00:7a:7a:c6:e8:8e:b2:48:88:ef:64:13:77:e6:d1: 13:a8:1c:cb:64:cb:36:ec:53:e6:4d:7d:75:01:c6: 8c:4b:ef:9b:3e:ca:39:f9:2b:89:41:a3:53:ce:91: f1:2c:c8:85:89:3c:37:18:e6:c7:ea:84:34:3d:af: d4:fc:dc:01:9b:80:1f:b2:7b:d0:45:ae:d8:e4:4b: 49:b3:c5:ec:f4:c3:ba:73:13:ad:b7:8e:d5:56:91: ff:c6:23:e0:6d:89:12:66:ec:5b:ef:3f:96:8a:ac: c5:87:93:19:35:f1:16:19:73:36:2f:21:df:0d:89: 57:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E2:9D:90:3E:3A:F9:F7:B5:76:D7:D5:3C:06:65:81:CF:6C:08:EA X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/74A12FA0F8CB11EF96FC1D62762E951A.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.209.19.0/24 154.209.95.0/24 154.209.132.0/23 154.209.135.0/24 154.209.159.0/24 Signature Algorithm: sha256WithRSAEncryption c1:b0:f6:36:35:b9:50:96:74:de:95:f0:57:0d:10:38:3a:6a: 47:17:ce:2e:1c:f5:85:be:04:4a:0f:aa:51:de:b9:fb:0f:1a: c8:3d:73:f1:bd:bb:a7:91:4a:f2:45:1a:42:01:25:71:48:9d: 03:38:65:84:f0:3e:4b:2b:5a:a6:8b:77:35:4a:62:3d:3d:f7: 5d:ec:b0:17:41:51:67:ee:ac:26:29:dd:a0:b4:72:6b:2f:be: 36:11:23:e7:1e:e3:df:cb:d7:a0:25:37:1e:b9:5e:35:12:54: 65:38:1a:0a:46:9c:d9:9c:fd:e9:27:d0:b9:d9:6c:ce:52:d0: 50:f8:3b:fd:bb:18:da:71:7a:75:d3:e2:c2:6b:89:67:b9:95: e1:df:9e:6c:0c:19:b8:75:9e:ba:59:ee:7e:a2:7f:0a:32:47: da:b9:32:ee:c6:be:4f:46:d3:d4:14:10:a1:b7:0e:1a:f2:f8: f7:ef:3f:04:05:db:3d:b9:87:8c:d7:66:1b:1d:b6:f0:00:ec: 35:0f:da:84:95:48:99:d4:8e:ec:98:fb:bb:74:c0:ef:52:5c: a4:54:06:4a:7f:e5:1d:a4:13:14:44:99:5e:12:9e:37:36:88: 71:05:15:91:ae:67:17:48:ae:62:e8:f1:47:fc:cf:2c:56:d8: ed:89:ce:93 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIDAXF8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUwMzA0MDczNjU1WhcNMjUwMzMxMDczNjU1WjAYMRYw FAYDVQQDEw02N2M2YWQ5Yi1kZmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA6jHphyI+GzUdFg+oo16HZ5AZ0Fm9KvUmG14vOIQiDYm6PM0ZmWCGdWJZ eH4DjH19hfMgb2aqmynqFU9Sj4y5b7Ya8GNBzIafUUM9lwzEplU2N1nL8CRM0bCh erJ94/yyat5hlZfY6FtV0Ol0kDJmwqEeytmasXg4AABSdwqU9188xzPAPzkAenrG 6I6ySIjvZBN35tETqBzLZMs27FPmTX11AcaMS++bPso5+SuJQaNTzpHxLMiFiTw3 GObH6oQ0Pa/U/NwBm4AfsnvQRa7Y5EtJs8Xs9MO6cxOtt47VVpH/xiPgbYkSZuxb 7z+WiqzFh5MZNfEWGXM2LyHfDYlXeQIDAQABo4ICvTCCArkwHQYDVR0OBBYEFGLi nZA+Ovn3tXbX1TwGZYHPbAjqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC83NEExMkZBMEY4Q0IxMUVGOTZGQzFENjI3NjJFOTUxQS5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAmtETAwQAmtFfAwQBmtGE AwQAmtGHAwQAmtGfMA0GCSqGSIb3DQEBCwUAA4IBAQDBsPY2NblQlnTelfBXDRA4 OmpHF84uHPWFvgRKD6pR3rn7DxrIPXPxvbunkUryRRpCASVxSJ0DOGWE8D5LK1qm i3c1SmI9Pfdd7LAXQVFn7qwmKd2gtHJrL742ESPnHuPfy9egJTceuV41ElRlOBoK RpzZnP3pJ9C52WzOUtBQ+Dv9uxjacXp10+LCa4lnuZXh355sDBm4dZ66We5+on8K MkfauTLuxr5PRtPUFBChtw4a8vj37z8EBds9uYeM12YbHbbwAOw1D9qElUiZ1I7s mPu7dMDvUlykVAZKf+UdpBMURJleEp43NohxBRWRrmcXSK5i6PFH/M8sVtjtic6T -----END CERTIFICATE-----Generated at Tue Dec 23 06:46:27 2025 by rpki-client