This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64664CDC478C11F0A6C5D08CDAE4EC9C.roa File: 64664CDC478C11F0A6C5D08CDAE4EC9C.roa (raw, json) Hash identifier: wxlsxe0jbhTQs8c0dgIB+Hn5h/RAfN1+R4vw2xwkSx4= Subject key identifier: 24:D4:99:07:19:FE:90:C0:46:73:2A:88:A1:86:73:6A:BD:42:15:BE Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 018626 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64664CDC478C11F0A6C5D08CDAE4EC9C.roa Signing time: Thu 12 Jun 2025 12:54:36 +0000 ROA not before: Thu 12 Jun 2025 12:54:31 +0000 ROA not after: Mon 16 Jun 2025 12:54:31 +0000 asID: 55020 IP address blocks: 154.91.48.0/20 maxlen: 24 154.91.176.0/20 maxlen: 24 Validation: Failed, certificate has expired Certificate: Data: Version: 3 (0x2) Serial Number: 99878 (0x18626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Jun 12 12:54:31 2025 GMT Not After : Jun 16 12:54:31 2025 GMT Subject: CN=684ace0c-7a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:fe:e6:58:c9:45:ed:bb:f9:26:12:29:2b: be:5c:c3:b4:1e:93:2f:73:b0:c7:d0:9b:2f:3a:fe: 59:41:33:1e:55:e8:03:ef:01:fb:83:c7:e5:79:47: f9:eb:9b:b8:4e:a3:64:c1:ac:33:42:56:d1:63:68: 63:56:cf:88:28:40:5d:31:91:61:6d:eb:d3:11:0b: 38:21:c2:dc:bd:df:0d:50:77:f5:e7:c3:70:b0:a9: be:9e:b0:5d:17:2a:5a:86:e9:3c:b3:3e:d0:75:e1: 74:29:4b:7f:2d:1f:6d:2a:f5:4f:ff:93:c3:26:e3: ec:79:ab:c6:00:77:5d:8d:12:d5:93:52:59:e6:a2: 2f:f6:32:8d:16:53:7c:1f:8b:8f:14:43:4d:d9:31: 27:49:46:f5:89:51:08:da:48:3c:9f:56:d5:a6:ab: 09:22:5e:7e:2b:18:e4:9c:3a:1f:53:a0:30:dd:e9: c0:af:5a:61:17:7d:95:a5:ca:c4:9f:27:52:2b:e1: 56:06:fa:f2:e0:d2:bf:d3:e2:12:fb:5a:ad:a6:49: 2c:30:d8:3d:47:34:e5:9e:7b:54:b5:2c:33:5b:6c: 4e:3a:b2:76:b3:fc:84:4c:e2:2c:7f:2d:9a:99:d2: 8a:68:b9:43:d4:2f:7e:64:a5:af:4f:1f:b7:fd:2d: b1:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D4:99:07:19:FE:90:C0:46:73:2A:88:A1:86:73:6A:BD:42:15:BE X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/64664CDC478C11F0A6C5D08CDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.91.48.0/20 154.91.176.0/20 Signature Algorithm: sha256WithRSAEncryption 97:dc:b7:1c:2c:3e:59:0b:79:b6:36:83:c2:ee:f9:5b:06:a1: bc:2f:ce:93:dd:71:9a:00:4f:ce:02:dd:a6:c6:a1:23:84:47: d1:e0:5a:ac:24:75:de:e2:2a:4f:55:35:1b:0d:56:62:7f:0a: 59:fa:1c:5f:82:6f:e3:db:2d:9a:ef:89:01:69:b4:b5:09:d2: bd:0e:32:f4:8d:02:a0:a6:8c:a9:08:e6:d7:43:c9:72:a8:3c: a6:6e:dc:72:a0:f4:59:91:3a:32:c9:e9:26:e0:67:e8:c7:cf: 50:f9:69:08:20:2c:c8:75:8d:c0:6f:d8:13:0c:c4:5c:6d:31: 0b:50:73:68:cb:09:a1:d7:05:da:e9:be:b7:cb:c7:07:34:b5: b8:55:52:52:fb:6f:e8:85:bb:0a:bf:f0:f1:60:7e:aa:a4:5a: 19:61:05:bf:d8:5c:7e:93:9f:24:1d:56:9d:03:9e:f3:11:6e: ea:83:cd:fe:5c:9a:b3:50:4c:b7:55:af:1a:b3:a7:ae:a0:be: 31:d6:8b:df:f9:b4:c8:cf:1a:71:e8:3b:fb:0b:1c:7b:32:6f: 5d:52:73:af:9e:1f:1a:2d:ef:44:14:01:eb:a8:5e:27:5d:78: ea:d2:e6:b7:0b:dd:f4:17:e6:d2:e9:51:bd:49:53:e2:e7:a9: 02:07:c1:4f -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAYYmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUwNjEyMTI1NDMxWhcNMjUwNjE2MTI1NDMxWjAYMRYw FAYDVQQDEw02ODRhY2UwYy03YTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAsRj+5ljJRe27+SYSKSu+XMO0HpMvc7DH0JsvOv5ZQTMeVegD7wH7g8fl eUf565u4TqNkwawzQlbRY2hjVs+IKEBdMZFhbevTEQs4IcLcvd8NUHf158NwsKm+ nrBdFypahuk8sz7QdeF0KUt/LR9tKvVP/5PDJuPseavGAHddjRLVk1JZ5qIv9jKN FlN8H4uPFENN2TEnSUb1iVEI2kg8n1bVpqsJIl5+KxjknDofU6Aw3enAr1phF32V pcrEnydSK+FWBvry4NK/0+IS+1qtpkksMNg9RzTlnntUtSwzW2xOOrJ2s/yETOIs fy2amdKKaLlD1C9+ZKWvTx+3/S2xYQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFCTU mQcZ/pDARnMqiKGGc2q9QhW+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC82NDY2NENEQzQ3OEMxMUYwQTZDNUQwOENEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEmlswAwQEmluwMA0GCSqG SIb3DQEBCwUAA4IBAQCX3LccLD5ZC3m2NoPC7vlbBqG8L86T3XGaAE/OAt2mxqEj hEfR4FqsJHXe4ipPVTUbDVZifwpZ+hxfgm/j2y2a74kBabS1CdK9DjL0jQKgpoyp CObXQ8lyqDymbtxyoPRZkToyyekm4Gfox89Q+WkIICzIdY3Ab9gTDMRcbTELUHNo ywmh1wXa6b63y8cHNLW4VVJS+2/ohbsKv/DxYH6qpFoZYQW/2Fx+k58kHVadA57z EW7qg83+XJqzUEy3Va8as6euoL4x1ovf+bTIzxpx6Dv7Cxx7Mm9dUnOvnh8aLe9E FAHrqF4nXXjq0ua3C930F+bS6VG9SVPi56kCB8FP -----END CERTIFICATE-----Generated at Thu Dec 25 11:22:45 2025 by rpki-client