This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0E95E8C0C48811F0A0E84BEBDAE4EC9C.roa File: 0E95E8C0C48811F0A0E84BEBDAE4EC9C.roa (raw, json) Hash identifier: lAzqO5BARyc+N2dkCH7a3FkS1dBueVlGQ7P0HQShAdE= Subject key identifier: B6:BB:C1:F0:AC:8E:8C:5F:87:01:07:08:AB:8B:9D:5F:68:08:14:D2 Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Certificate serial: 1CB4 Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0E95E8C0C48811F0A0E84BEBDAE4EC9C.roa Signing time: Tue 18 Nov 2025 14:08:29 +0000 ROA not before: Tue 18 Nov 2025 14:08:24 +0000 ROA not after: Sat 20 Nov 2027 14:08:24 +0000 asID: 212238 IP address blocks: 154.16.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 23 Nov 2025 01:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7348 (0x1cb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Validity Not Before: Nov 18 14:08:24 2025 GMT Not After : Nov 20 14:08:24 2027 GMT Subject: CN=691c7ddd-234f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f4:0b:20:6c:e4:b0:fc:21:35:3a:c1:b9:a1: d6:70:91:94:18:0e:0c:3b:f6:54:99:04:e2:56:4d: 53:33:2e:b7:57:de:63:8f:0d:7d:15:c4:d3:57:43: 01:c2:58:82:a4:a0:a5:26:e0:b6:d5:e5:f4:16:6d: 22:05:e0:7a:57:48:ed:62:67:18:40:23:9c:3f:b7: 89:c8:fa:2b:5e:b0:c4:9e:b8:73:b3:6f:60:16:52: c1:c4:27:d0:f5:6f:d4:f6:99:ad:e5:e2:67:a9:21: bd:0c:92:19:77:c1:a4:b6:d5:7a:b4:20:d0:a5:75: b9:41:7f:9f:b4:de:d0:b9:82:72:a4:d9:13:be:32: ba:a9:81:3b:ef:87:6e:81:5a:78:dd:b5:4c:fb:0f: af:f2:f1:79:41:73:52:57:3c:01:63:08:9c:1a:97: 0e:cd:35:f5:e3:fd:2e:9a:9d:33:53:03:74:a8:4b: 93:93:28:ee:a0:e8:5a:b9:5f:87:3d:a7:6a:09:b1: 17:cd:29:c2:11:03:33:a2:54:9e:c5:28:66:db:6c: 4e:9f:6f:d6:70:c8:bf:2d:8a:c7:90:05:84:49:7a: c2:66:44:aa:47:d9:b8:69:b1:ee:dd:2c:c0:14:86: 4a:15:55:4f:2d:fc:47:fd:0d:00:98:c0:40:d1:2f: a0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BB:C1:F0:AC:8E:8C:5F:87:01:07:08:AB:8B:9D:5F:68:08:14:D2 X509v3 Authority Key Identifier: keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/0E95E8C0C48811F0A0E84BEBDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.16.3.0/24 Signature Algorithm: sha256WithRSAEncryption 75:b4:c8:b8:5e:01:03:b3:01:16:ea:38:76:cf:0f:89:0f:a7: 00:7c:9c:3d:83:7a:e0:d9:3b:56:5e:00:04:ab:7a:e4:de:ba: 30:a4:aa:e8:3d:70:0a:7e:b2:02:28:4c:d1:5b:64:8c:bb:38: 3a:f9:ac:1d:58:8c:49:6e:a3:82:b7:97:ea:23:45:24:84:5a: fe:be:22:ce:c8:4b:b0:65:8b:6e:04:41:14:30:34:51:0a:0b: 56:30:15:e1:6c:93:ea:c8:0b:10:8c:b0:a3:49:25:81:f2:bf: 72:35:a0:16:d4:dc:ea:cb:11:33:36:86:79:1c:b5:df:8c:ba: 33:32:4d:b2:87:b9:08:0c:f1:15:7a:c5:b5:05:2c:44:be:e5: 6a:68:83:c0:81:57:42:fb:d5:dd:3a:69:c0:bc:24:5f:a2:37: be:c3:64:97:e3:22:01:d2:e0:15:1c:c9:3e:e6:35:33:27:ee: ea:5e:b2:6d:a4:c8:9f:05:2c:96:98:87:f2:c2:42:e3:19:f8: 46:2b:92:83:f2:2d:a1:9c:46:42:83:4d:d8:ea:13:aa:02:89: d1:f7:0a:09:d5:b8:a2:d9:c7:a5:e2:b7:28:f1:40:e6:71:a4: a3:2d:11:5f:88:78:be:0b:66:6d:ec:e3:ac:aa:50:c0:2e:72: d8:b5:f9:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHLQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC MzRGM0Y5Q0E1MzAeFw0yNTExMTgxNDA4MjRaFw0yNzExMjAxNDA4MjRaMBgxFjAU BgNVBAMTDTY5MWM3ZGRkLTIzNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDB9AsgbOSw/CE1OsG5odZwkZQYDgw79lSZBOJWTVMzLrdX3mOPDX0VxNNX QwHCWIKkoKUm4LbV5fQWbSIF4HpXSO1iZxhAI5w/t4nI+itesMSeuHOzb2AWUsHE J9D1b9T2ma3l4mepIb0Mkhl3waS21Xq0INCldblBf5+03tC5gnKk2RO+MrqpgTvv h26BWnjdtUz7D6/y8XlBc1JXPAFjCJwalw7NNfXj/S6anTNTA3SoS5OTKO6g6Fq5 X4c9p2oJsRfNKcIRAzOiVJ7FKGbbbE6fb9ZwyL8tiseQBYRJesJmRKpH2bhpse7d LMAUhkoVVU8t/Ef9DQCYwEDRL6CLAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUtrvB 8KyOjF+HAQcIq4udX2gIFNIwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5 ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4 QUVBMjI4LzBFOTVFOEMwQzQ4ODExRjBBMEU4NEJFQkRBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEAMwDQYJKoZIhvcNAQEL BQADggEBAHW0yLheAQOzARbqOHbPD4kPpwB8nD2DeuDZO1ZeAASreuTeujCkqug9 cAp+sgIoTNFbZIy7ODr5rB1YjEluo4K3l+ojRSSEWv6+Is7IS7Bli24EQRQwNFEK C1YwFeFsk+rICxCMsKNJJYHyv3I1oBbU3OrLETM2hnkctd+MujMyTbKHuQgM8RV6 xbUFLES+5Wpog8CBV0L71d06acC8JF+iN77DZJfjIgHS4BUcyT7mNTMn7upesm2k yJ8FLJaYh/LCQuMZ+EYrkoPyLaGcRkKDTdjqE6oCidH3CgnVuKLZx6XityjxQOZx pKMtEV+IeL4LZm3s46yqUMAucti1+d8= -----END CERTIFICATE-----Generated at Fri Nov 21 13:51:17 2025 by rpki-client