This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/89F1D6E8C49011F0B09216A1DAE4EC9C.roa File: 89F1D6E8C49011F0B09216A1DAE4EC9C.roa (raw, json) Hash identifier: 0S42SH8htL+6zEIBfGAZqG/kjtVL2P9cY3dIVOHdWi8= Subject key identifier: EB:D9:B1:F5:D5:C3:4C:52:D3:3A:D3:F1:9F:D2:A2:6A:B2:59:9C:D4 Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Certificate serial: 1CD9 Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/89F1D6E8C49011F0B09216A1DAE4EC9C.roa Signing time: Tue 18 Nov 2025 15:09:12 +0000 ROA not before: Tue 18 Nov 2025 15:09:08 +0000 ROA not after: Sat 20 Nov 2027 15:09:08 +0000 asID: 212238 IP address blocks: 154.16.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 23 Nov 2025 01:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7385 (0x1cd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Validity Not Before: Nov 18 15:09:08 2025 GMT Not After : Nov 20 15:09:08 2027 GMT Subject: CN=691c8c18-a597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6d:80:4f:f4:3c:7f:0b:b5:79:64:35:17:61: 50:2e:f8:4b:1d:4d:bf:8a:a4:cd:92:76:98:92:c4: eb:d4:8a:62:b0:72:8c:93:be:33:68:5b:08:54:7e: 1f:79:c8:f2:18:5e:59:94:24:cc:4f:59:0c:88:70: d5:16:74:e2:b4:76:32:f0:15:65:e3:35:40:1b:d8: 81:89:f0:2a:d0:8b:71:d9:5a:ba:58:18:1e:bb:1e: a3:3c:22:5e:04:5f:73:dc:17:17:6e:c5:39:ef:42: 63:8f:f3:e4:ac:a1:62:87:4d:48:b8:e0:97:c3:7e: d6:54:fd:98:ab:c1:32:94:12:58:ee:e8:19:ea:70: ef:04:02:ca:8a:f2:69:e7:29:6b:48:3d:eb:0c:24: 17:28:77:62:62:9a:ae:13:a3:51:34:fb:1d:09:09: f9:ef:8a:cf:7e:5e:20:da:03:ac:98:8a:1e:52:a4: c1:ac:6b:20:ee:2d:1e:4e:95:df:85:4e:37:6e:bb: 3e:cf:75:4a:49:df:66:53:58:30:3d:86:74:1e:6f: 31:32:60:44:f8:a7:6d:ab:73:b5:46:57:61:71:b3: c3:1e:b3:50:61:2b:ae:8a:b1:1a:db:86:36:31:81: d9:a2:50:71:e3:37:ad:39:ac:96:79:49:27:d0:8c: 3d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:D9:B1:F5:D5:C3:4C:52:D3:3A:D3:F1:9F:D2:A2:6A:B2:59:9C:D4 X509v3 Authority Key Identifier: keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/89F1D6E8C49011F0B09216A1DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.16.90.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:76:3c:ea:52:1b:70:c6:83:35:76:9e:8e:aa:54:f5:98:1a: e6:c0:dc:38:51:48:69:52:71:67:e4:a9:90:fe:dd:97:ff:91: c5:b1:19:51:3f:f1:ea:52:b1:c2:41:78:11:3a:03:c1:73:d4: 41:f8:78:ed:f3:cc:93:33:8a:71:22:a1:77:61:a5:4e:a3:81: f8:80:04:36:ba:26:06:bc:f8:ac:b3:60:a1:85:0a:3b:78:4d: 70:10:6a:19:1d:0d:95:09:65:0e:95:c9:40:1f:d2:39:4b:61: e6:30:0e:a7:0d:1d:79:bc:98:a3:71:b0:6a:53:f5:db:29:21: 9a:59:07:17:23:1c:de:b5:95:77:f3:dd:04:e3:c5:e8:a3:e6: df:38:7c:18:dd:c8:9a:5c:69:21:80:91:08:11:ac:ce:44:55: b5:c6:69:d9:76:11:1a:f5:77:11:fe:49:32:b9:23:50:25:e7: 73:1d:4c:71:65:54:bf:81:d9:39:d4:2f:26:11:82:b8:85:60: 95:cf:f2:4c:cf:76:9d:9f:48:a6:25:d9:0e:8e:ed:48:2e:63: 57:40:a6:68:20:76:53:56:b5:88:10:f6:b4:0c:78:96:6e:11: 0b:8d:dc:2a:1b:98:bd:95:98:5c:08:3d:e5:3e:e6:f8:87:c1: 31:a0:8c:a2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHNkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC MzRGM0Y5Q0E1MzAeFw0yNTExMTgxNTA5MDhaFw0yNzExMjAxNTA5MDhaMBgxFjAU BgNVBAMTDTY5MWM4YzE4LWE1OTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCbbYBP9Dx/C7V5ZDUXYVAu+EsdTb+KpM2SdpiSxOvUimKwcoyTvjNoWwhU fh95yPIYXlmUJMxPWQyIcNUWdOK0djLwFWXjNUAb2IGJ8CrQi3HZWrpYGB67HqM8 Il4EX3PcFxduxTnvQmOP8+SsoWKHTUi44JfDftZU/ZirwTKUElju6BnqcO8EAsqK 8mnnKWtIPesMJBcod2Jimq4To1E0+x0JCfnvis9+XiDaA6yYih5SpMGsayDuLR5O ld+FTjduuz7PdUpJ32ZTWDA9hnQebzEyYET4p22rc7VGV2Fxs8Mes1BhK66KsRrb hjYxgdmiUHHjN605rJZ5SSfQjD3JAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU69mx 9dXDTFLTOtPxn9KiarJZnNQwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5 ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4 QUVBMjI4Lzg5RjFENkU4QzQ5MDExRjBCMDkyMTZBMURBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEFowDQYJKoZIhvcNAQEL BQADggEBAJp2POpSG3DGgzV2no6qVPWYGubA3DhRSGlScWfkqZD+3Zf/kcWxGVE/ 8epSscJBeBE6A8Fz1EH4eO3zzJMzinEioXdhpU6jgfiABDa6Jga8+KyzYKGFCjt4 TXAQahkdDZUJZQ6VyUAf0jlLYeYwDqcNHXm8mKNxsGpT9dspIZpZBxcjHN61lXfz 3QTjxeij5t84fBjdyJpcaSGAkQgRrM5EVbXGadl2ERr1dxH+STK5I1Al53MdTHFl VL+B2TnULyYRgriFYJXP8kzPdp2fSKYl2Q6O7UguY1dApmggdlNWtYgQ9rQMeJZu EQuN3CobmL2VmFwIPeU+5viHwTGgjKI= -----END CERTIFICATE-----Generated at Fri Nov 21 13:52:26 2025 by rpki-client