This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1FC3EDE8C48A11F0A53DBC79DAE4EC9C.roa File: 1FC3EDE8C48A11F0A53DBC79DAE4EC9C.roa (raw, json) Hash identifier: vfi/MOlOFsYfdG7FOXuzfvU7ktoqGq0Ru4j3j4h9vL0= Subject key identifier: 70:C7:E8:CC:6A:E9:9F:5B:58:78:2F:41:AF:9A:42:63:03:89:EC:7A Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Certificate serial: 1CC0 Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1FC3EDE8C48A11F0A53DBC79DAE4EC9C.roa Signing time: Tue 18 Nov 2025 14:23:17 +0000 ROA not before: Tue 18 Nov 2025 14:23:12 +0000 ROA not after: Sat 20 Nov 2027 14:23:12 +0000 asID: 212238 IP address blocks: 154.16.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 23 Nov 2025 01:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7360 (0x1cc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Validity Not Before: Nov 18 14:23:12 2025 GMT Not After : Nov 20 14:23:12 2027 GMT Subject: CN=691c8155-c58e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:53:73:f2:f5:d2:6b:b6:80:20:36:bb:f9:16: ef:cb:17:33:3a:36:0e:43:31:14:5e:ba:54:8f:dc: 52:0d:12:de:f5:ba:0b:c9:11:cb:ba:db:18:59:48: 74:af:e2:e3:01:be:9d:97:e4:3a:9e:d9:4d:16:35: 56:26:ef:0f:d9:0f:3b:3e:e1:a5:c2:d6:cf:32:1f: 60:65:74:29:3a:53:5f:f0:90:28:77:6a:67:c9:1b: 3d:f2:7f:d3:24:ab:cb:d6:3a:af:3c:b2:23:b4:5a: 47:7e:de:06:a4:8e:f6:04:b5:24:74:f1:bc:be:6f: 0c:24:6c:fe:d7:a3:88:62:b7:5c:dd:df:62:66:a4: a8:18:b2:a8:95:1e:f5:de:45:15:5e:98:78:8b:32: 6e:71:3b:01:69:ab:ba:cc:3c:a6:a2:6a:3b:d5:5c: fb:cb:e5:b6:5e:65:72:87:01:42:d6:f6:ab:dd:4d: 41:81:32:c7:48:80:fb:1e:67:4b:60:c3:65:ed:45: 85:21:b1:f2:53:8a:d2:50:96:4f:44:47:14:4d:09: 6e:b3:37:d9:7f:7d:54:fa:d3:83:ae:5f:03:c3:68: b2:ac:f5:97:35:5a:ee:5a:b3:ba:57:75:24:c2:d3: 92:e4:8b:95:84:52:38:42:8a:fa:50:3e:d2:27:93: 67:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C7:E8:CC:6A:E9:9F:5B:58:78:2F:41:AF:9A:42:63:03:89:EC:7A X509v3 Authority Key Identifier: keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/1FC3EDE8C48A11F0A53DBC79DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.16.34.0/24 Signature Algorithm: sha256WithRSAEncryption d4:8b:6f:14:35:ea:ff:a1:e8:68:2b:be:e8:02:14:c8:1a:51: 36:90:92:06:74:cb:d6:85:cf:13:0a:28:6f:e6:df:e2:56:13: a6:67:cf:d6:70:fb:cc:38:38:1c:4b:72:3a:bf:1f:ef:61:4a: 31:2e:e5:fe:19:fc:7d:b3:d2:25:7c:d5:9e:07:cf:45:22:4b: 56:5a:5d:22:29:1a:a7:f6:73:a4:67:b0:af:7d:3a:20:c3:2f: 46:9d:e1:24:92:ab:6e:b4:79:25:95:d4:12:d9:7f:15:68:3c: 42:55:9e:08:c0:a7:ad:03:70:58:da:02:56:97:82:75:45:62: ac:81:6c:bc:38:24:7e:45:2b:30:27:28:bc:b6:53:f9:fc:7f: 98:db:4a:47:45:b7:b4:f8:14:af:60:7a:f9:11:c1:59:ce:43: 12:e5:2c:b2:5b:cf:e9:ae:5d:33:9e:ab:99:37:b4:78:42:94: 16:3a:a2:b9:bb:0b:64:ae:76:ba:5b:f7:9b:8d:76:ea:00:22: 63:53:dd:85:04:72:39:c7:da:00:bd:a7:53:ef:db:29:c7:cd: eb:09:3c:4c:27:6a:e3:53:70:9f:86:e2:20:49:6c:5e:87:3e: 4a:ed:bb:78:9e:33:6e:2a:35:19:53:53:21:95:ba:a5:ad:d4: e6:f2:f0:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHMAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC MzRGM0Y5Q0E1MzAeFw0yNTExMTgxNDIzMTJaFw0yNzExMjAxNDIzMTJaMBgxFjAU BgNVBAMTDTY5MWM4MTU1LWM1OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDKU3Py9dJrtoAgNrv5Fu/LFzM6Ng5DMRReulSP3FINEt71ugvJEcu62xhZ SHSv4uMBvp2X5Dqe2U0WNVYm7w/ZDzs+4aXC1s8yH2BldCk6U1/wkCh3amfJGz3y f9Mkq8vWOq88siO0Wkd+3gakjvYEtSR08by+bwwkbP7Xo4hit1zd32JmpKgYsqiV HvXeRRVemHiLMm5xOwFpq7rMPKaiajvVXPvL5bZeZXKHAULW9qvdTUGBMsdIgPse Z0tgw2XtRYUhsfJTitJQlk9ERxRNCW6zN9l/fVT604OuXwPDaLKs9Zc1Wu5as7pX dSTC05Lki5WEUjhCivpQPtInk2cvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUcMfo zGrpn1tYeC9Br5pCYwOJ7HowHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5 ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4 QUVBMjI4LzFGQzNFREU4QzQ4QTExRjBBNTNEQkM3OURBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaECIwDQYJKoZIhvcNAQEL BQADggEBANSLbxQ16v+h6GgrvugCFMgaUTaQkgZ0y9aFzxMKKG/m3+JWE6Znz9Zw +8w4OBxLcjq/H+9hSjEu5f4Z/H2z0iV81Z4Hz0UiS1ZaXSIpGqf2c6RnsK99OiDD L0ad4SSSq260eSWV1BLZfxVoPEJVngjAp60DcFjaAlaXgnVFYqyBbLw4JH5FKzAn KLy2U/n8f5jbSkdFt7T4FK9gevkRwVnOQxLlLLJbz+muXTOeq5k3tHhClBY6orm7 C2Sudrpb95uNduoAImNT3YUEcjnH2gC9p1Pv2ynHzesJPEwnauNTcJ+G4iBJbF6H Pkrtu3ieM24qNRlTUyGVuqWt1Oby8Iw= -----END CERTIFICATE-----Generated at Fri Nov 21 13:49:18 2025 by rpki-client