This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/75F35BDAC49011F0906111A1DAE4EC9C.roa File: 75F35BDAC49011F0906111A1DAE4EC9C.roa (raw, json) Hash identifier: 4RvNDNliMcXQ5K7Mr6cyGe6CmDpQiWTxW6G1yWDCrt0= Subject key identifier: 56:89:8F:01:B2:BA:CB:4B:C9:59:69:5A:F8:AE:E2:31:18:32:5D:CB Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Certificate serial: 1CD7 Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/75F35BDAC49011F0906111A1DAE4EC9C.roa Signing time: Tue 18 Nov 2025 15:08:39 +0000 ROA not before: Tue 18 Nov 2025 15:08:34 +0000 ROA not after: Sat 20 Nov 2027 15:08:34 +0000 asID: 212238 IP address blocks: 154.16.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 23 Nov 2025 01:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7383 (0x1cd7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Validity Not Before: Nov 18 15:08:34 2025 GMT Not After : Nov 20 15:08:34 2027 GMT Subject: CN=691c8bf6-9431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:40:79:b8:86:da:3e:10:ec:07:02:7c:43:48: e7:96:89:ad:72:fb:8c:64:07:2e:af:95:e7:f2:1e: b1:1a:4e:ab:aa:2b:db:4b:c6:47:1a:a2:37:57:f0: 67:62:89:31:16:3b:f2:58:ad:e9:e9:34:87:ed:a0: 2c:58:b1:3f:e4:1e:9c:2f:57:95:7a:f5:ae:db:a6: 43:65:67:a2:fb:49:a5:9b:e9:6d:12:13:db:f0:68: ff:17:e3:57:91:da:63:5d:38:4b:ca:e9:1e:38:26: 78:46:fb:d6:7b:69:d8:50:fa:54:30:71:4f:a2:52: c8:be:c3:b3:33:f6:06:1c:56:0e:90:ec:cd:ca:d7: 39:27:87:e5:be:30:91:8c:a3:ee:a0:97:0c:4a:68: 7e:fb:53:c5:6e:c6:7c:c5:97:80:65:94:db:7e:0b: f8:55:b7:0c:f3:d7:04:06:33:7e:cd:cb:ef:82:97: be:f4:02:1e:b5:5e:7b:50:64:b5:44:93:25:54:96: 0d:23:94:02:09:99:1c:db:b6:c9:d6:97:ed:1a:8c: f4:e9:a4:d2:99:33:6b:32:da:16:ff:47:a5:b3:7b: c8:e3:c7:fe:92:97:ca:a6:b7:7b:57:08:70:6e:cc: d1:65:f4:65:ed:35:70:7d:35:f6:49:a1:a7:8d:be: e5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:89:8F:01:B2:BA:CB:4B:C9:59:69:5A:F8:AE:E2:31:18:32:5D:CB X509v3 Authority Key Identifier: keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/75F35BDAC49011F0906111A1DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.16.89.0/24 Signature Algorithm: sha256WithRSAEncryption 82:88:cc:e6:0b:b6:8b:e4:89:83:2b:a1:15:6d:2d:53:03:04: cf:72:54:13:32:6a:2e:c3:ab:cd:48:75:c3:1e:bc:3b:6b:a5: e5:07:71:bd:d2:a2:c5:d4:35:7d:fb:a4:d3:fd:36:47:ce:eb: 36:62:11:50:99:92:9e:92:33:7b:9f:51:d9:57:85:9a:29:42: e0:a3:9e:06:a7:21:cd:be:fe:68:e9:90:1c:19:82:a4:56:c8: dd:17:ed:de:cb:74:02:c6:89:72:66:d0:14:d9:05:ab:ca:f0: 02:4f:74:0c:2d:67:74:5a:cf:15:ca:a1:3b:59:ce:08:99:cc: 61:82:c6:a7:ce:bf:a6:d1:46:7e:a7:2c:43:26:9d:f6:8a:c5: dc:df:97:cc:86:30:6e:43:4f:cb:17:c6:fe:48:d6:63:5c:98: 09:47:b4:e0:b7:19:6c:d1:ba:d1:cd:7f:6e:47:03:ec:81:82: 01:44:df:d5:1d:cb:0b:e2:da:33:79:83:e5:09:57:62:f3:cd: cb:65:4c:be:20:a9:47:d3:b5:d0:75:8e:33:73:ce:70:97:96: 08:01:cc:4f:cb:14:be:66:88:89:0f:a9:6f:72:be:cd:dd:81: 0c:8b:e9:be:ca:9c:94:99:7b:35:f0:ea:ff:58:b2:cf:dc:c8: 17:02:07:43 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHNcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC MzRGM0Y5Q0E1MzAeFw0yNTExMTgxNTA4MzRaFw0yNzExMjAxNTA4MzRaMBgxFjAU BgNVBAMTDTY5MWM4YmY2LTk0MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCjQHm4hto+EOwHAnxDSOeWia1y+4xkBy6vlefyHrEaTquqK9tLxkcaojdX 8GdiiTEWO/JYrenpNIftoCxYsT/kHpwvV5V69a7bpkNlZ6L7SaWb6W0SE9vwaP8X 41eR2mNdOEvK6R44JnhG+9Z7adhQ+lQwcU+iUsi+w7Mz9gYcVg6Q7M3K1zknh+W+ MJGMo+6glwxKaH77U8VuxnzFl4BllNt+C/hVtwzz1wQGM37Ny++Cl770Ah61XntQ ZLVEkyVUlg0jlAIJmRzbtsnWl+0ajPTppNKZM2sy2hb/R6Wze8jjx/6Sl8qmt3tX CHBuzNFl9GXtNXB9NfZJoaeNvuW7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUVomP AbK6y0vJWWla+K7iMRgyXcswHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5 ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4 QUVBMjI4Lzc1RjM1QkRBQzQ5MDExRjA5MDYxMTFBMURBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEFkwDQYJKoZIhvcNAQEL BQADggEBAIKIzOYLtovkiYMroRVtLVMDBM9yVBMyai7Dq81IdcMevDtrpeUHcb3S osXUNX37pNP9NkfO6zZiEVCZkp6SM3ufUdlXhZopQuCjnganIc2+/mjpkBwZgqRW yN0X7d7LdALGiXJm0BTZBavK8AJPdAwtZ3RazxXKoTtZzgiZzGGCxqfOv6bRRn6n LEMmnfaKxdzfl8yGMG5DT8sXxv5I1mNcmAlHtOC3GWzRutHNf25HA+yBggFE39Ud ywvi2jN5g+UJV2LzzctlTL4gqUfTtdB1jjNzznCXlggBzE/LFL5miIkPqW9yvs3d gQyL6b7KnJSZezXw6v9Yss/cyBcCB0M= -----END CERTIFICATE-----Generated at Fri Nov 21 13:51:15 2025 by rpki-client