This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7B70C2F8C49211F0841BF9ADDAE4EC9C.roa File: 7B70C2F8C49211F0841BF9ADDAE4EC9C.roa (raw, json) Hash identifier: NOcqFjHfdzufTBkbO2IW/YP0JopohjeG8WD4KnpAb6o= Subject key identifier: AB:A6:94:89:AB:DA:8A:84:14:3A:4C:6F:E8:09:58:92:7D:64:BB:7D Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Certificate serial: 1CE7 Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7B70C2F8C49211F0841BF9ADDAE4EC9C.roa Signing time: Tue 18 Nov 2025 15:23:07 +0000 ROA not before: Tue 18 Nov 2025 15:23:02 +0000 ROA not after: Sat 20 Nov 2027 15:23:02 +0000 asID: 212238 IP address blocks: 154.16.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 23 Nov 2025 01:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7399 (0x1ce7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Validity Not Before: Nov 18 15:23:02 2025 GMT Not After : Nov 20 15:23:02 2027 GMT Subject: CN=691c8f5b-e704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:7f:3c:d6:8d:db:2b:e3:40:b4:4c:1d:ac: dc:88:b5:44:1d:0f:07:a0:dd:5a:ed:22:25:ce:19: 00:75:11:c9:60:59:87:40:7a:31:c9:fc:cb:ae:44: ca:ea:0f:44:30:83:0f:6f:e4:2e:14:83:5d:6c:d9: 8e:0c:5d:7a:c1:99:e9:0f:c8:47:a7:ca:eb:ea:17: 7e:c5:86:7c:7b:f3:c8:83:85:e4:a3:bd:b3:ff:6e: d5:e5:eb:e2:c6:cf:aa:62:6c:dd:69:9e:47:c0:96: 15:8a:b5:45:e6:25:b6:81:e2:12:d3:08:d1:83:b6: a3:ec:40:ed:94:40:64:77:5f:0b:b0:34:aa:73:a7: 39:dc:e7:a7:90:35:9c:36:c4:e2:da:4f:47:9f:14: 88:39:a1:c8:6c:6d:10:35:1b:ec:fe:be:df:e5:a6: 88:1b:55:05:ab:d4:23:9b:17:bf:86:42:53:e5:6c: 3e:2c:00:29:ca:be:6c:2c:eb:a6:18:ed:a2:d1:26: 93:d8:f0:8d:09:a0:3e:ad:1b:a5:7c:16:08:47:f6: 45:69:44:64:ff:bd:b9:9e:29:b7:15:2a:3a:ff:c7: 69:87:a4:9d:41:02:5f:6f:32:09:28:01:8e:66:18: 06:30:19:71:71:ef:7d:90:ce:1f:37:93:54:0e:b2: 31:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A6:94:89:AB:DA:8A:84:14:3A:4C:6F:E8:09:58:92:7D:64:BB:7D X509v3 Authority Key Identifier: keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/7B70C2F8C49211F0841BF9ADDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.16.107.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:60:7e:74:d7:fa:68:b0:8b:5a:fa:f4:5d:4a:bd:8d:aa:65: 45:6e:55:98:51:fb:ba:d6:8c:05:84:cd:3e:df:71:3a:14:9b: 36:12:c8:79:50:e9:06:34:75:0a:67:21:e1:fd:a7:f6:e0:80: 71:25:8f:94:f5:58:4d:49:43:b5:35:45:61:c5:63:c8:c6:07: 49:22:ad:4f:8b:24:99:91:ea:94:3b:8c:b2:d8:9d:54:e9:c1: 18:38:e0:94:ac:64:94:70:b6:ff:62:83:a3:8e:8c:eb:1d:40: 8a:76:5e:8c:00:fb:11:bb:1e:b8:2e:fd:08:04:47:15:40:77: c1:10:01:c6:25:4c:25:be:1d:a4:1c:e9:82:a0:ac:d5:16:5b: d2:60:49:ee:b0:8a:65:88:10:8e:99:c7:32:01:a8:44:f5:8f: ef:c9:d9:a3:e3:c9:3d:95:f6:0c:6f:62:62:58:44:a0:c8:9e: 9b:21:0c:a1:1d:c7:f0:83:40:d7:38:dd:30:33:06:82:8a:6a: 7d:f4:e3:69:14:ba:35:4d:23:92:ed:05:4b:79:43:12:b5:ae: 53:8b:3c:3f:be:87:40:c9:84:50:aa:64:55:dd:7c:22:e8:23: 54:08:a7:b0:7d:4f:06:13:01:ae:3a:18:d9:9e:f2:01:d1:da: b2:12:35:fb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHOcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC MzRGM0Y5Q0E1MzAeFw0yNTExMTgxNTIzMDJaFw0yNzExMjAxNTIzMDJaMBgxFjAU BgNVBAMTDTY5MWM4ZjViLWU3MDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC+WH881o3bK+NAtEwdrNyItUQdDweg3VrtIiXOGQB1EclgWYdAejHJ/Muu RMrqD0Qwgw9v5C4Ug11s2Y4MXXrBmekPyEenyuvqF37Fhnx788iDheSjvbP/btXl 6+LGz6pibN1pnkfAlhWKtUXmJbaB4hLTCNGDtqPsQO2UQGR3XwuwNKpzpznc56eQ NZw2xOLaT0efFIg5ochsbRA1G+z+vt/lpogbVQWr1CObF7+GQlPlbD4sACnKvmws 66YY7aLRJpPY8I0JoD6tG6V8FghH9kVpRGT/vbmeKbcVKjr/x2mHpJ1BAl9vMgko AY5mGAYwGXFx732Qzh83k1QOsjEvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUq6aU iavaioQUOkxv6AlYkn1ku30wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5 ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4 QUVBMjI4LzdCNzBDMkY4QzQ5MjExRjA4NDFCRjlBRERBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEGswDQYJKoZIhvcNAQEL BQADggEBAExgfnTX+miwi1r69F1KvY2qZUVuVZhR+7rWjAWEzT7fcToUmzYSyHlQ 6QY0dQpnIeH9p/bggHElj5T1WE1JQ7U1RWHFY8jGB0kirU+LJJmR6pQ7jLLYnVTp wRg44JSsZJRwtv9ig6OOjOsdQIp2XowA+xG7Hrgu/QgERxVAd8EQAcYlTCW+HaQc 6YKgrNUWW9JgSe6wimWIEI6ZxzIBqET1j+/J2aPjyT2V9gxvYmJYRKDInpshDKEd x/CDQNc43TAzBoKKan3042kUujVNI5LtBUt5QxK1rlOLPD++h0DJhFCqZFXdfCLo I1QIp7B9TwYTAa46GNme8gHR2rISNfs= -----END CERTIFICATE-----Generated at Fri Nov 21 13:48:53 2025 by rpki-client