This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DC66114477C11F0A4DE41A5DAE4EC9C.roa File: 1DC66114477C11F0A4DE41A5DAE4EC9C.roa (raw, json) Hash identifier: QLoKJu0sZ2rCl65rbPVltTVszUwgup+1wCt6szzXlwY= Subject key identifier: 4F:1C:0D:95:FE:BC:EE:30:9E:C4:8F:43:EB:9A:36:EF:97:1A:88:9B Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 018619 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DC66114477C11F0A4DE41A5DAE4EC9C.roa Signing time: Thu 12 Jun 2025 10:58:05 +0000 ROA not before: Thu 12 Jun 2025 10:58:00 +0000 ROA not after: Mon 16 Jun 2025 10:58:00 +0000 asID: 400619 IP address blocks: 154.210.16.0/20 maxlen: 24 154.213.64.0/20 maxlen: 24 154.222.224.0/20 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 99865 (0x18619) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Jun 12 10:58:00 2025 GMT Not After : Jun 16 10:58:00 2025 GMT Subject: CN=684ab2bd-1307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:94:b7:7e:2c:56:14:cc:0e:01:d4:dc:57: cf:a6:cb:18:84:cc:18:1e:cb:ff:fb:28:be:ca:4e: 67:42:8c:b0:f4:9f:74:e6:6f:86:c6:70:6c:28:15: 2a:2f:7a:2c:1c:08:13:03:4c:09:ca:9e:7c:ba:7d: a9:43:ab:bb:08:27:1d:e8:cb:c8:35:7f:b8:e7:ee: 10:c8:5c:95:f3:be:c0:6a:20:ec:ef:43:d2:84:3e: 42:53:8d:4a:fb:d0:49:5b:30:50:c2:cf:1e:18:c3: 74:83:2e:c6:4d:99:a0:7d:f8:3f:ea:f5:ee:e2:9e: 50:18:ec:19:fe:da:28:4a:37:d4:0a:1c:2b:9a:4d: 4b:c9:56:54:c9:72:72:5c:0b:09:69:7c:41:57:2d: 97:e6:33:f6:ff:d6:24:b8:8e:08:a1:a2:ae:f7:0a: da:21:53:b0:88:01:bf:e6:da:00:8f:48:37:83:65: 47:86:d8:b9:8c:f0:08:bb:f8:c6:f7:89:21:fa:94: 49:57:5b:84:6d:bd:ec:24:22:6d:e7:37:c2:a8:d4: 49:7f:41:4f:e5:75:82:89:09:75:60:bb:d6:d3:23: f1:8f:c1:5b:d8:32:af:79:61:f9:4a:7c:97:93:eb: cb:1d:ff:a0:b8:db:34:f9:f0:b0:cc:03:de:8a:89: 3d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1C:0D:95:FE:BC:EE:30:9E:C4:8F:43:EB:9A:36:EF:97:1A:88:9B X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DC66114477C11F0A4DE41A5DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.210.16.0/20 154.213.64.0/20 154.222.224.0/20 Signature Algorithm: sha256WithRSAEncryption 1b:c8:72:f9:e1:61:9a:91:a5:4e:41:f5:1e:64:81:0e:df:41: a0:28:22:21:0a:69:3c:66:31:be:9d:7d:73:09:eb:f5:36:95: 22:db:09:24:12:dc:66:93:92:68:64:00:d2:12:b6:6c:98:6f: a4:11:d6:82:85:f0:a7:2f:4d:61:f2:25:87:8a:4f:78:70:61: ef:9d:92:db:fe:3e:a5:5f:fd:76:6d:3f:19:48:0e:3f:f2:b2: e0:10:e8:b8:2d:ef:cc:7a:68:e9:58:84:af:28:b6:36:8b:a0: 43:b6:2f:6c:d9:8d:f5:0c:09:1d:be:7c:82:34:55:e9:9b:de: 27:b1:15:99:c1:df:a3:f0:dd:83:c0:87:dc:ee:76:f9:9a:06: fb:99:aa:08:bd:cd:6b:96:41:11:39:2c:a4:5a:b3:23:f2:fb: 92:e5:fb:b6:5b:da:95:b2:b3:f6:84:fc:6e:c8:51:8e:f0:93: 69:17:06:5d:3f:b5:c2:c3:18:d8:cb:3a:6a:e4:80:b8:d1:69: e2:e1:cc:5d:f8:f2:6f:06:6d:4e:af:81:dd:c6:82:7b:8a:a0: 06:52:c3:37:53:cb:57:15:c9:41:c5:86:4d:b0:b8:87:38:5d: a0:f7:e4:33:73:1f:d3:a1:ab:f7:33:fe:00:d2:da:c9:75:4c: 16:b9:cd:06 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIDAYYZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUwNjEyMTA1ODAwWhcNMjUwNjE2MTA1ODAwWjAYMRYw FAYDVQQDEw02ODRhYjJiZC0xMzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAwcOUt34sVhTMDgHU3FfPpssYhMwYHsv/+yi+yk5nQoyw9J905m+GxnBs KBUqL3osHAgTA0wJyp58un2pQ6u7CCcd6MvINX+45+4QyFyV877AaiDs70PShD5C U41K+9BJWzBQws8eGMN0gy7GTZmgffg/6vXu4p5QGOwZ/tooSjfUChwrmk1LyVZU yXJyXAsJaXxBVy2X5jP2/9YkuI4IoaKu9wraIVOwiAG/5toAj0g3g2VHhti5jPAI u/jG94kh+pRJV1uEbb3sJCJt5zfCqNRJf0FP5XWCiQl1YLvW0yPxj8Fb2DKveWH5 SnyXk+vLHf+guNs0+fCwzAPeiok9WwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFE8c DZX+vO4wnsSPQ+uaNu+XGoibMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8xREM2NjExNDQ3N0MxMUYwQTRERTQxQTVEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEmtIQAwQEmtVAAwQEmt7g MA0GCSqGSIb3DQEBCwUAA4IBAQAbyHL54WGakaVOQfUeZIEO30GgKCIhCmk8ZjG+ nX1zCev1NpUi2wkkEtxmk5JoZADSErZsmG+kEdaChfCnL01h8iWHik94cGHvnZLb /j6lX/12bT8ZSA4/8rLgEOi4Le/MemjpWISvKLY2i6BDti9s2Y31DAkdvnyCNFXp m94nsRWZwd+j8N2DwIfc7nb5mgb7maoIvc1rlkEROSykWrMj8vuS5fu2W9qVsrP2 hPxuyFGO8JNpFwZdP7XCwxjYyzpq5IC40Wni4cxd+PJvBm1Or4HdxoJ7iqAGUsM3 U8tXFclBxYZNsLiHOF2g9+Qzcx/Toav3M/4A0trJdUwWuc0G -----END CERTIFICATE-----Generated at Tue Dec 30 06:25:06 2025 by rpki-client