This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2DE38260C48C11F099DA2287DAE4EC9C.roa File: 2DE38260C48C11F099DA2287DAE4EC9C.roa (raw, json) Hash identifier: nl2LvohF64GQmaUADWgUgNexlJ/bKirUkKG2ORcPHxQ= Subject key identifier: 7F:54:E0:7F:A9:AE:CB:94:EA:AE:12:8C:61:A4:3E:26:5A:D3:10:C1 Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Certificate serial: 1CCA Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2DE38260C48C11F099DA2287DAE4EC9C.roa Signing time: Tue 18 Nov 2025 14:37:59 +0000 ROA not before: Tue 18 Nov 2025 14:37:54 +0000 ROA not after: Sat 20 Nov 2027 14:37:54 +0000 asID: 212238 IP address blocks: 154.16.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 23 Nov 2025 01:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7370 (0x1cca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Validity Not Before: Nov 18 14:37:54 2025 GMT Not After : Nov 20 14:37:54 2027 GMT Subject: CN=691c84c7-b3a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:63:ad:cc:eb:73:76:84:28:5c:c0:2d:49:41: cc:db:90:e3:e5:bf:17:70:93:eb:5b:7b:bd:9f:78: 85:3a:ba:e7:f1:c2:ed:e2:4c:c2:07:28:78:fb:7d: 8a:7a:9a:1d:0f:02:43:47:f4:e0:52:fc:a4:e0:18: e0:a7:d5:36:9d:48:06:dc:6f:78:aa:e3:26:e1:8e: 48:d3:7d:9e:33:cc:c2:f3:0d:4e:8b:99:9b:d6:1f: c9:60:ee:38:5f:7b:cd:52:7c:18:60:7e:fd:39:46: 15:8e:35:61:b7:d1:91:34:5c:2b:90:f5:a7:18:3d: f4:e4:7c:b7:57:c1:44:ca:6f:44:87:f6:6a:43:ae: b8:1d:ab:56:59:e2:8a:c2:c5:84:99:cb:9e:ae:ff: 8d:3a:82:a3:9f:74:ad:86:62:c1:7d:e4:6f:f6:7d: 1c:14:f3:9f:33:8f:f5:07:57:82:b6:d6:fe:9e:e6: ae:a2:b5:ae:e1:a0:65:67:85:5f:86:71:6c:a4:ce: 70:2e:61:12:af:ea:2f:39:f1:91:44:6a:b7:f3:14: c9:e0:49:09:c3:ec:d9:98:e7:50:2b:d9:4f:40:57: df:91:19:53:4f:eb:55:62:74:91:18:44:a5:90:13: 32:e8:32:49:c6:46:50:2b:e9:5c:20:56:b5:59:d0: 85:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:54:E0:7F:A9:AE:CB:94:EA:AE:12:8C:61:A4:3E:26:5A:D3:10:C1 X509v3 Authority Key Identifier: keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/2DE38260C48C11F099DA2287DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.16.53.0/24 Signature Algorithm: sha256WithRSAEncryption 39:0b:e1:c1:02:86:02:58:19:ca:bc:23:2f:f2:bf:4d:84:66: 3a:8c:c3:00:ab:2d:1a:68:01:62:77:d1:2f:d5:14:1d:4e:59: f6:6e:1e:9d:ce:31:5a:dd:02:88:b5:83:d4:55:21:1d:19:a7: 2e:2d:97:51:92:34:bc:09:6c:2a:02:c2:e8:f4:97:19:74:02: 25:01:e6:cd:32:f4:89:05:b0:40:c9:8c:8d:f7:dc:8e:54:fd: b8:5a:24:68:11:a5:c0:ac:62:7b:c5:57:e8:e8:c4:ec:49:7b: 40:c8:ad:be:14:b8:dd:a1:d6:e6:ae:ae:83:92:04:48:18:13: 5c:46:cc:35:1d:61:75:23:3f:52:7f:3e:2c:c7:2b:5c:6d:cf: cf:f4:60:fd:0e:ab:39:c3:17:04:32:38:f8:25:1a:5a:ad:e5: a6:f9:68:ae:98:60:09:43:12:50:59:14:0f:ab:83:bb:9c:52: d6:9e:bd:13:de:fa:7a:c9:6b:af:d2:06:58:65:89:7c:4f:ef: 9d:0c:2f:e5:fe:45:00:df:0d:74:11:d6:a8:ab:dc:58:c9:e7: ed:c9:33:a1:96:21:9d:cd:b1:92:34:92:d4:aa:01:58:54:4a: 5f:2e:67:b2:b5:62:7f:42:11:ca:d6:b2:81:cb:1b:13:d6:ea: 47:5d:c0:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHMowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC MzRGM0Y5Q0E1MzAeFw0yNTExMTgxNDM3NTRaFw0yNzExMjAxNDM3NTRaMBgxFjAU BgNVBAMTDTY5MWM4NGM3LWIzYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDxY63M63N2hChcwC1JQczbkOPlvxdwk+tbe72feIU6uufxwu3iTMIHKHj7 fYp6mh0PAkNH9OBS/KTgGOCn1TadSAbcb3iq4ybhjkjTfZ4zzMLzDU6LmZvWH8lg 7jhfe81SfBhgfv05RhWONWG30ZE0XCuQ9acYPfTkfLdXwUTKb0SH9mpDrrgdq1ZZ 4orCxYSZy56u/406gqOfdK2GYsF95G/2fRwU858zj/UHV4K21v6e5q6ita7hoGVn hV+GcWykznAuYRKv6i858ZFEarfzFMngSQnD7NmY51Ar2U9AV9+RGVNP61VidJEY RKWQEzLoMknGRlAr6VwgVrVZ0IVDAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUf1Tg f6muy5TqrhKMYaQ+JlrTEMEwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5 ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4 QUVBMjI4LzJERTM4MjYwQzQ4QzExRjA5OURBMjI4N0RBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDUwDQYJKoZIhvcNAQEL BQADggEBADkL4cEChgJYGcq8Iy/yv02EZjqMwwCrLRpoAWJ30S/VFB1OWfZuHp3O MVrdAoi1g9RVIR0Zpy4tl1GSNLwJbCoCwuj0lxl0AiUB5s0y9IkFsEDJjI333I5U /bhaJGgRpcCsYnvFV+joxOxJe0DIrb4UuN2h1uauroOSBEgYE1xGzDUdYXUjP1J/ PizHK1xtz8/0YP0OqznDFwQyOPglGlqt5ab5aK6YYAlDElBZFA+rg7ucUtaevRPe +nrJa6/SBlhliXxP750ML+X+RQDfDXQR1qir3FjJ5+3JM6GWIZ3NsZI0ktSqAVhU Sl8uZ7K1Yn9CEcrWsoHLGxPW6kddwAw= -----END CERTIFICATE-----Generated at Fri Nov 21 13:49:54 2025 by rpki-client