This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3AA686D8C48B11F0B6B9A182DAE4EC9C.roa File: 3AA686D8C48B11F0B6B9A182DAE4EC9C.roa (raw, json) Hash identifier: vADPsVyO+w6qckyXbAuqJPyl5cFWOeh86ostPNNqDj8= Subject key identifier: 36:2E:04:FA:68:2D:8C:29:AC:85:FB:7C:DA:D0:4B:C3:A5:D8:BA:2E Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Certificate serial: 1CC4 Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3AA686D8C48B11F0B6B9A182DAE4EC9C.roa Signing time: Tue 18 Nov 2025 14:31:11 +0000 ROA not before: Tue 18 Nov 2025 14:31:06 +0000 ROA not after: Sat 20 Nov 2027 14:31:06 +0000 asID: 212238 IP address blocks: 154.16.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 23 Nov 2025 01:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7364 (0x1cc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Validity Not Before: Nov 18 14:31:06 2025 GMT Not After : Nov 20 14:31:06 2027 GMT Subject: CN=691c832f-419a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:bb:99:b4:7a:8d:6f:0a:7c:a2:0f:e3:f4:0f: 0d:06:3e:30:1a:4d:6f:45:c1:05:57:96:61:27:37: 97:a8:41:7e:ba:52:1c:ab:db:66:88:5e:e3:3e:6f: 6c:fe:26:9e:67:a2:5f:92:53:28:11:08:e2:36:c8: 3b:bb:f5:20:9b:03:75:4a:4d:e4:7b:6c:aa:fe:35: 4c:26:ea:bc:ad:d9:6d:c2:4e:cc:2c:61:86:ee:95: ae:f2:35:e9:55:1a:39:f2:1d:c0:4c:9e:55:9d:39: 0d:4c:f1:be:85:5c:03:bb:77:38:08:20:03:95:cd: 5a:81:56:ff:8b:80:34:c2:3d:a6:84:0f:df:0d:45: 7b:a8:9b:cf:5f:f9:19:95:6b:65:ce:8c:d2:3f:fd: 29:a2:ab:dc:55:14:24:47:31:59:c7:5a:d8:68:75: ca:33:29:85:9a:ce:3b:26:12:2e:52:1d:c7:90:64: 37:90:ea:0d:5c:4d:52:69:02:bd:47:34:d1:f0:cd: 4a:88:09:81:2d:30:94:cd:28:28:68:cf:59:f7:ae: de:ab:1d:14:90:bc:67:af:3d:6a:0e:ce:b5:da:94: 72:cb:a5:eb:4d:7b:21:64:00:a6:81:00:b1:f3:9a: 5f:f8:e0:b8:ad:82:82:9d:e8:f8:46:e3:9b:3d:e7: f9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2E:04:FA:68:2D:8C:29:AC:85:FB:7C:DA:D0:4B:C3:A5:D8:BA:2E X509v3 Authority Key Identifier: keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/3AA686D8C48B11F0B6B9A182DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.16.45.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:2d:1e:4b:5f:e7:e5:ad:b6:11:24:44:6b:2d:19:00:ff:dc: e7:a1:31:13:ee:cc:6b:86:5b:7f:87:1f:57:db:f0:69:95:1a: 0a:e1:80:46:ad:ea:93:4a:0f:40:11:01:3d:29:f3:ef:91:91: b2:8b:e1:14:59:28:c4:94:38:08:8e:27:ce:f9:5a:24:1d:7a: db:0d:eb:0e:88:11:30:a6:8f:16:eb:28:d6:49:24:88:ee:d6: 67:85:64:09:54:3c:cd:ac:c7:c1:b7:5d:62:37:44:bb:49:d7: 26:1a:15:7c:ba:a5:ef:07:71:c1:ba:d6:68:75:80:14:f9:23: e2:c5:74:bc:a2:4c:ed:d1:20:30:53:16:32:61:7c:20:69:d0: f0:19:58:6d:6f:b4:12:25:be:2d:98:d3:58:13:a5:cb:c9:8f: 79:46:01:91:53:a5:49:e6:d5:ec:64:3a:d6:38:5c:95:11:95: 39:fa:df:d9:8c:15:a4:03:f4:50:7e:10:1e:d3:c2:f6:13:68: 30:47:10:1e:cc:ec:dc:46:71:7c:ea:c5:94:9c:c6:b9:02:c0: 53:32:b3:fd:79:c0:d0:3a:0e:b4:a5:75:70:14:1a:73:52:6d: 26:36:63:c3:4d:c1:4a:8e:5c:bf:27:57:90:0a:bd:b1:72:d1: 6f:ee:94:eb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHMQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC MzRGM0Y5Q0E1MzAeFw0yNTExMTgxNDMxMDZaFw0yNzExMjAxNDMxMDZaMBgxFjAU BgNVBAMTDTY5MWM4MzJmLTQxOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC0u5m0eo1vCnyiD+P0Dw0GPjAaTW9FwQVXlmEnN5eoQX66Uhyr22aIXuM+ b2z+Jp5nol+SUygRCOI2yDu79SCbA3VKTeR7bKr+NUwm6ryt2W3CTswsYYbula7y NelVGjnyHcBMnlWdOQ1M8b6FXAO7dzgIIAOVzVqBVv+LgDTCPaaED98NRXuom89f +RmVa2XOjNI//Smiq9xVFCRHMVnHWthodcozKYWazjsmEi5SHceQZDeQ6g1cTVJp Ar1HNNHwzUqICYEtMJTNKChoz1n3rt6rHRSQvGevPWoOzrXalHLLpetNeyFkAKaB ALHzml/44LitgoKd6PhG45s95/l9AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUNi4E +mgtjCmshft82tBLw6XYui4wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5 ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4 QUVBMjI4LzNBQTY4NkQ4QzQ4QjExRjBCNkI5QTE4MkRBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEC0wDQYJKoZIhvcNAQEL BQADggEBAHwtHktf5+WtthEkRGstGQD/3OehMRPuzGuGW3+HH1fb8GmVGgrhgEat 6pNKD0ARAT0p8++RkbKL4RRZKMSUOAiOJ875WiQdetsN6w6IETCmjxbrKNZJJIju 1meFZAlUPM2sx8G3XWI3RLtJ1yYaFXy6pe8HccG61mh1gBT5I+LFdLyiTO3RIDBT FjJhfCBp0PAZWG1vtBIlvi2Y01gTpcvJj3lGAZFTpUnm1exkOtY4XJURlTn639mM FaQD9FB+EB7TwvYTaDBHEB7M7NxGcXzqxZScxrkCwFMys/15wNA6DrSldXAUGnNS bSY2Y8NNwUqOXL8nV5AKvbFy0W/ulOs= -----END CERTIFICATE-----Generated at Fri Nov 21 13:49:28 2025 by rpki-client