This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/09B6B8A8C47811F0A9E86988DAE4EC9C.roa File: 09B6B8A8C47811F0A9E86988DAE4EC9C.roa (raw, json) Hash identifier: dlSBd4nF+gY2cnaQMBTzU0i9er+3XiRdii4giEkabZQ= Subject key identifier: 1B:62:DC:39:96:48:04:B3:19:AF:51:90:71:7F:FB:FA:F7:A7:81:83 Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Certificate serial: 1CB2 Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/09B6B8A8C47811F0A9E86988DAE4EC9C.roa Signing time: Tue 18 Nov 2025 12:13:49 +0000 ROA not before: Tue 18 Nov 2025 12:13:44 +0000 ROA not after: Sat 20 Nov 2027 12:13:44 +0000 asID: 25198 IP address blocks: 154.16.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 20 Nov 2025 10:47:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7346 (0x1cb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Validity Not Before: Nov 18 12:13:44 2025 GMT Not After : Nov 20 12:13:44 2027 GMT Subject: CN=691c62fd-9c4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e3:a0:b2:96:84:6b:fc:9e:fc:a6:05:88:71: ea:d7:cf:a5:86:49:af:8d:70:6c:94:65:1c:25:e0: 1f:09:a4:4f:c6:a1:b5:e2:bb:56:0f:84:fc:7a:4c: fb:4b:dd:1a:d8:22:03:40:f1:c5:ba:24:56:ab:39: 70:02:c3:fc:b7:a3:5b:5b:5b:ef:81:01:e2:ae:78: d7:53:fa:e1:d6:1e:4a:7e:83:cc:78:43:d8:82:76: f7:11:a9:15:95:cf:a9:4d:c7:57:34:3a:30:6d:fd: e2:18:68:07:ba:ca:21:2a:ce:df:39:09:8e:fa:f3: 8b:ac:f4:63:73:2d:d5:36:ce:c7:80:8e:ee:78:be: 02:2b:43:e3:65:a6:dd:4e:e8:c4:de:10:5c:53:1c: b1:09:8c:2d:ed:ea:ea:55:07:59:25:15:91:10:6d: 79:b5:f7:9e:b5:fd:1f:2b:f8:e9:dd:e6:b9:c9:45: ff:57:84:db:4b:a7:7f:75:4c:c2:d4:d2:d9:2c:9f: fa:b1:3a:0c:b2:2c:7c:ab:2f:39:84:2d:b7:ef:8c: 1b:ba:c9:a5:8f:85:ad:dc:5c:e9:b5:36:2b:4f:3c: 18:ec:9d:8b:83:7a:25:e2:a1:82:ba:92:52:e1:33: 4e:c9:fc:de:76:3a:56:7a:b7:17:c7:14:91:81:9b: c4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:62:DC:39:96:48:04:B3:19:AF:51:90:71:7F:FB:FA:F7:A7:81:83 X509v3 Authority Key Identifier: keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/09B6B8A8C47811F0A9E86988DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.16.225.0/24 Signature Algorithm: sha256WithRSAEncryption 47:3a:02:5f:4e:26:50:9b:4a:aa:44:dd:fa:c0:5f:8a:27:2d: 60:1f:18:ee:68:11:45:75:54:02:ca:8e:c2:3c:f4:80:c2:3a: 66:21:38:00:84:da:fa:0c:c1:80:7a:61:35:08:5e:92:2a:75: 4d:c7:72:f3:a5:a6:24:01:3a:5f:43:00:92:fe:10:4a:f3:7c: 08:fc:f2:7f:ea:ce:3d:6b:b5:70:09:1b:47:fc:9b:82:67:e1: f0:9d:5d:5a:c7:5b:f3:c7:82:3d:6f:b8:86:ac:c1:d9:60:87: 41:f3:57:f3:35:17:3d:2d:dd:fd:14:0b:10:bc:89:54:6c:13: 3a:8f:95:22:a8:95:8e:8f:83:7c:2a:42:2f:39:b7:15:fc:4c: 09:d9:2e:19:2f:5d:2d:c7:df:8a:8d:b7:a6:4d:1a:94:60:63: c5:28:79:f5:53:fa:35:e8:51:8f:6f:36:e5:df:24:89:31:91: 26:79:2e:f3:d5:b2:13:33:d8:0d:90:29:5c:68:7c:1d:58:37: cb:b8:dc:db:50:70:b1:73:97:12:24:6a:81:f6:37:ef:aa:fa: d3:dc:b4:30:77:3b:9e:36:5d:c1:00:35:8b:73:96:2d:15:4f: e2:5b:ec:f2:05:0d:c5:80:ab:2d:31:6f:aa:5c:cf:65:b2:2a: 01:1f:0d:2c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHLIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC MzRGM0Y5Q0E1MzAeFw0yNTExMTgxMjEzNDRaFw0yNzExMjAxMjEzNDRaMBgxFjAU BgNVBAMTDTY5MWM2MmZkLTljNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCt46CyloRr/J78pgWIcerXz6WGSa+NcGyUZRwl4B8JpE/GobXiu1YPhPx6 TPtL3RrYIgNA8cW6JFarOXACw/y3o1tbW++BAeKueNdT+uHWHkp+g8x4Q9iCdvcR qRWVz6lNx1c0OjBt/eIYaAe6yiEqzt85CY7684us9GNzLdU2zseAju54vgIrQ+Nl pt1O6MTeEFxTHLEJjC3t6upVB1klFZEQbXm19561/R8r+Ond5rnJRf9XhNtLp391 TMLU0tksn/qxOgyyLHyrLzmELbfvjBu6yaWPha3cXOm1NitPPBjsnYuDeiXioYK6 klLhM07J/N52OlZ6txfHFJGBm8RXAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUG2Lc OZZIBLMZr1GQcX/7+vengYMwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5 ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4 QUVBMjI4LzA5QjZCOEE4QzQ3ODExRjBBOUU4Njk4OERBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEOEwDQYJKoZIhvcNAQEL BQADggEBAEc6Al9OJlCbSqpE3frAX4onLWAfGO5oEUV1VALKjsI89IDCOmYhOACE 2voMwYB6YTUIXpIqdU3HcvOlpiQBOl9DAJL+EErzfAj88n/qzj1rtXAJG0f8m4Jn 4fCdXVrHW/PHgj1vuIaswdlgh0HzV/M1Fz0t3f0UCxC8iVRsEzqPlSKolY6Pg3wq Qi85txX8TAnZLhkvXS3H34qNt6ZNGpRgY8UoefVT+jXoUY9vNuXfJIkxkSZ5LvPV shMz2A2QKVxofB1YN8u43NtQcLFzlxIkaoH2N++q+tPctDB3O542XcEANYtzli0V T+Jb7PIFDcWAqy0xb6pcz2WyKgEfDSw= -----END CERTIFICATE-----Generated at Tue Nov 18 15:06:28 2025 by rpki-client