This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/763C1D6E370711F0BC08FF9EDAE4EC9C.roa File: 763C1D6E370711F0BC08FF9EDAE4EC9C.roa (raw, json) Hash identifier: 7NXipD8JAj+1x9+Y2hvoDxI7KbrpzyIlEIAc3i6g4Rk= Subject key identifier: F4:9D:45:35:7E:3D:D1:87:C7:8B:05:7C:74:C5:66:63:0F:BA:9A:05 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 0181E3 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/763C1D6E370711F0BC08FF9EDAE4EC9C.roa Signing time: Thu 22 May 2025 12:22:44 +0000 ROA not before: Thu 22 May 2025 12:22:39 +0000 ROA not after: Tue 24 Jun 2025 12:22:39 +0000 asID: 57043 IP address blocks: 154.86.12.0/23 maxlen: 24 154.86.14.0/23 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 98787 (0x181e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: May 22 12:22:39 2025 GMT Not After : Jun 24 12:22:39 2025 GMT Subject: CN=682f1714-10aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bd:20:d6:d0:c0:77:03:59:5f:73:73:8b:c7: 07:cf:bd:82:7b:1c:0d:76:e7:5a:79:38:8b:62:9d: ea:4d:09:f2:be:8f:12:07:45:e2:a9:09:59:b7:0e: ae:b4:e6:8a:7a:2b:d9:4c:33:c0:3a:0f:41:d6:d2: b1:15:0b:ff:f5:c2:52:e0:42:71:51:26:d2:67:d2: 1a:78:2e:b5:38:7a:3d:15:81:01:36:f5:f9:84:47: e9:19:73:aa:d3:c2:08:53:8a:a2:4b:3e:ea:a1:44: 23:42:8e:8f:88:fa:75:17:ef:02:02:5a:8a:27:be: 2d:3c:af:a0:4d:0f:e7:44:8d:85:52:9f:e8:02:54: 7e:7b:d9:89:47:05:3f:c8:1a:b1:30:75:cb:09:f7: d7:6f:68:ac:f3:2f:44:c8:8b:a0:16:43:b5:ac:c3: 33:2e:1f:23:84:7f:24:d9:48:6b:f9:13:9c:8b:24: 62:7d:be:e5:63:74:d1:37:eb:b1:b0:8d:fe:2e:b0: 5b:8d:d1:0b:66:68:b7:65:9e:13:ca:0f:77:32:30: 98:cb:1b:31:6d:42:5b:35:75:4c:14:87:b2:0a:25: 56:e3:aa:d7:2f:a4:7e:59:7c:24:42:df:20:81:e5: 5f:04:19:e9:b5:62:8a:50:69:40:a8:b5:c4:79:94: 64:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9D:45:35:7E:3D:D1:87:C7:8B:05:7C:74:C5:66:63:0F:BA:9A:05 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/763C1D6E370711F0BC08FF9EDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.86.12.0/22 Signature Algorithm: sha256WithRSAEncryption d6:17:ea:33:3b:3a:82:9b:0f:01:67:f9:c2:12:81:09:b7:5f: d4:16:8c:62:63:2e:38:41:22:1f:14:54:aa:6f:41:1f:a3:e1: 3a:65:76:fb:5b:fd:b8:6a:f3:9e:7b:88:93:d7:13:9b:e7:11: 83:da:e6:d1:61:ce:46:ae:77:2b:b4:ea:94:9a:f2:6e:ea:c6: a1:e5:b6:ef:78:a9:5e:b0:d8:84:d3:f8:e6:4e:7f:61:1f:27: b8:0f:7e:a5:73:b9:c1:c7:25:73:fa:1e:68:04:c5:b3:1e:af: 44:84:52:04:d0:bf:13:2f:38:34:91:1b:87:ed:72:bf:44:51: 4d:93:60:82:2c:81:4e:da:98:f8:98:fa:7a:17:15:20:2f:ab: 2a:60:1a:99:9d:88:4a:21:b4:dc:81:db:1d:0c:c2:e1:cd:59: b8:fa:a4:24:7c:97:79:39:e6:8c:dc:9f:cd:c7:9d:f7:a8:14: e0:2f:4d:8a:e6:19:bd:7a:b2:53:08:35:e0:45:c3:db:0f:80: 37:2f:81:ba:31:da:23:93:2d:e5:8d:e7:2d:e1:c4:06:42:8b: 0f:d6:8d:8e:7d:3e:b3:f1:e6:3f:98:e3:ce:34:ba:bd:1e:a1: ae:3e:e4:51:3d:27:ad:7b:af:bb:9c:d6:49:7d:73:7e:54:dc: 79:0b:94:e0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAYHjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUwNTIyMTIyMjM5WhcNMjUwNjI0MTIyMjM5WjAYMRYw FAYDVQQDEw02ODJmMTcxNC0xMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAvb0g1tDAdwNZX3Nzi8cHz72CexwNdudaeTiLYp3qTQnyvo8SB0XiqQlZ tw6utOaKeivZTDPAOg9B1tKxFQv/9cJS4EJxUSbSZ9IaeC61OHo9FYEBNvX5hEfp GXOq08IIU4qiSz7qoUQjQo6PiPp1F+8CAlqKJ74tPK+gTQ/nRI2FUp/oAlR+e9mJ RwU/yBqxMHXLCffXb2is8y9EyIugFkO1rMMzLh8jhH8k2Uhr+ROciyRifb7lY3TR N+uxsI3+LrBbjdELZmi3ZZ4Tyg93MjCYyxsxbUJbNXVMFIeyCiVW46rXL6R+WXwk Qt8ggeVfBBnptWKKUGlAqLXEeZRkgQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPSd RTV+PdGHx4sFfHTFZmMPupoFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC83NjNDMUQ2RTM3MDcxMUYwQkMwOEZGOUVEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlYMMA0GCSqGSIb3DQEB CwUAA4IBAQDWF+ozOzqCmw8BZ/nCEoEJt1/UFoxiYy44QSIfFFSqb0Efo+E6ZXb7 W/24avOee4iT1xOb5xGD2ubRYc5GrncrtOqUmvJu6sah5bbveKlesNiE0/jmTn9h Hye4D36lc7nBxyVz+h5oBMWzHq9EhFIE0L8TLzg0kRuH7XK/RFFNk2CCLIFO2pj4 mPp6FxUgL6sqYBqZnYhKIbTcgdsdDMLhzVm4+qQkfJd5OeaM3J/Nx533qBTgL02K 5hm9erJTCDXgRcPbD4A3L4G6Mdojky3lject4cQGQosP1o2OfT6z8eY/mOPONLq9 HqGuPuRRPSete6+7nNZJfXN+VNx5C5Tg -----END CERTIFICATE-----Generated at Sat Dec 20 07:17:11 2025 by rpki-client