This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C807EB823BC111F09C4819E4DAE4EC9C.roa File: C807EB823BC111F09C4819E4DAE4EC9C.roa (raw, json) Hash identifier: SQudKKjNoT29NIUAhe9966OAojsBMP/WTkSStAw3j74= Subject key identifier: FA:3B:6B:CA:F1:A1:66:1D:EB:C4:71:64:5C:06:55:A5:AD:CD:31:B9 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01836C Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C807EB823BC111F09C4819E4DAE4EC9C.roa Signing time: Wed 28 May 2025 12:46:32 +0000 ROA not before: Wed 28 May 2025 12:46:27 +0000 ROA not after: Fri 06 Jun 2025 12:46:27 +0000 asID: 23764 IP address blocks: 154.209.21.0/24 maxlen: 24 154.209.23.0/24 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 99180 (0x1836c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: May 28 12:46:27 2025 GMT Not After : Jun 6 12:46:27 2025 GMT Subject: CN=683705a8-0112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:df:69:97:ba:15:bb:47:c6:5d:77:2a:1d:02: 5f:6d:e2:e3:90:19:6e:9f:9f:38:80:56:0e:a0:2a: 64:e1:ec:2d:37:95:c7:4b:3b:9b:23:9f:9d:05:99: 26:f7:0c:55:c4:04:f5:03:29:b2:f8:04:78:81:90: e0:53:f8:0f:70:2e:de:0b:d6:6a:ee:5a:2d:82:b0: 29:92:92:22:39:09:dd:ff:53:e8:7a:84:14:7c:2d: fc:5e:1c:32:ae:09:f5:f0:e5:8c:61:0d:8e:3d:5a: 81:8c:c4:c5:8c:85:3a:f0:ca:61:20:22:51:cb:05: f8:f4:39:73:44:01:c4:d7:8e:7c:d3:7d:6d:b8:dd: 19:14:eb:00:49:82:59:f6:a4:6c:f6:45:d5:67:3a: ce:f4:57:8d:7c:06:0f:1e:88:b8:dc:5c:88:bd:44: ad:28:32:40:53:4a:fa:70:0a:51:bd:7c:7a:b5:01: ce:3c:86:b4:0d:dd:8f:39:ca:fb:32:87:30:15:55: 04:81:99:34:cd:ae:61:4d:c0:76:1e:98:ee:c1:7c: ec:34:53:09:8f:22:fc:74:a5:dc:29:ab:a6:d3:5f: 62:27:f2:63:14:76:13:a2:30:e2:d0:93:c0:08:d3: f9:04:d7:b9:77:d9:74:d1:73:92:bc:19:35:bf:ef: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3B:6B:CA:F1:A1:66:1D:EB:C4:71:64:5C:06:55:A5:AD:CD:31:B9 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C807EB823BC111F09C4819E4DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.209.21.0/24 154.209.23.0/24 Signature Algorithm: sha256WithRSAEncryption 20:4f:8d:05:8a:2f:ef:ec:91:5e:03:35:72:fb:71:2d:64:ea: f8:08:d8:83:7a:17:6c:12:d9:96:a1:6a:ec:aa:de:e5:a4:53: c4:a7:b8:9a:e4:c0:ec:97:a7:fb:b2:21:26:56:03:12:a4:0f: 9c:05:35:f8:2f:29:06:0b:7b:60:af:1d:a7:28:cd:54:a3:37: 3d:22:33:2a:06:73:32:08:d4:74:44:20:04:e3:0f:a7:31:34: e6:27:79:cd:53:96:9e:52:c8:55:a2:e5:44:5b:68:b5:53:59: ed:af:7d:59:27:d5:75:d7:d8:95:c2:5b:8f:c3:ee:2c:d8:55: ae:83:09:94:9d:fe:2c:28:03:7b:7e:96:f0:39:3c:de:81:10: d0:20:9e:7b:c1:31:4c:60:5b:cd:22:ec:72:a2:1e:25:5d:cd: 3a:a3:c6:01:f8:d4:0c:9c:92:82:95:68:e2:03:69:f9:da:22: 7a:8a:80:ab:d1:fa:5d:18:e2:09:ad:16:44:5a:74:77:96:be: a9:d0:ce:70:80:3d:bc:db:f2:27:bc:f4:fb:df:6c:35:58:86: 13:92:dd:0d:a4:b2:aa:99:61:2f:73:3e:09:1d:c3:f3:a5:fb: d6:49:6c:4b:28:b7:87:5b:38:aa:b4:f2:88:9b:75:cd:d4:8e: f6:3b:83:ac -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAYNsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUwNTI4MTI0NjI3WhcNMjUwNjA2MTI0NjI3WjAYMRYw FAYDVQQDEw02ODM3MDVhOC0wMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA5d9pl7oVu0fGXXcqHQJfbeLjkBlun584gFYOoCpk4ewtN5XHSzubI5+d BZkm9wxVxAT1Aymy+AR4gZDgU/gPcC7eC9Zq7lotgrApkpIiOQnd/1PoeoQUfC38 Xhwyrgn18OWMYQ2OPVqBjMTFjIU68MphICJRywX49DlzRAHE1458031tuN0ZFOsA SYJZ9qRs9kXVZzrO9FeNfAYPHoi43FyIvUStKDJAU0r6cApRvXx6tQHOPIa0Dd2P Ocr7MocwFVUEgZk0za5hTcB2HpjuwXzsNFMJjyL8dKXcKaum019iJ/JjFHYTojDi 0JPACNP5BNe5d9l00XOSvBk1v+9L+wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFPo7 a8rxoWYd68RxZFwGVaWtzTG5MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DODA3RUI4MjNCQzExMUYwOUM0ODE5RTREQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmtEVAwQAmtEXMA0GCSqG SIb3DQEBCwUAA4IBAQAgT40Fii/v7JFeAzVy+3EtZOr4CNiDehdsEtmWoWrsqt7l pFPEp7ia5MDsl6f7siEmVgMSpA+cBTX4LykGC3tgrx2nKM1Uozc9IjMqBnMyCNR0 RCAE4w+nMTTmJ3nNU5aeUshVouVEW2i1U1ntr31ZJ9V119iVwluPw+4s2FWugwmU nf4sKAN7fpbwOTzegRDQIJ57wTFMYFvNIuxyoh4lXc06o8YB+NQMnJKClWjiA2n5 2iJ6ioCr0fpdGOIJrRZEWnR3lr6p0M5wgD282/InvPT732w1WIYTkt0NpLKqmWEv cz4JHcPzpfvWSWxLKLeHWziqtPKIm3XN1I72O4Os -----END CERTIFICATE-----Generated at Wed Dec 17 19:07:36 2025 by rpki-client