This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9D464D9EC48811F0B2FE82EFDAE4EC9C.roa File: 9D464D9EC48811F0B2FE82EFDAE4EC9C.roa (raw, json) Hash identifier: pjl6PGpq5twBeUWrEuXb14pQia6/Ghtl7dmnAIcwWhQ= Subject key identifier: F1:FB:5A:00:CD:3A:52:3C:AB:42:A2:A0:99:80:70:8D:D4:1D:91:F8 Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Certificate serial: 1CB6 Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9D464D9EC48811F0B2FE82EFDAE4EC9C.roa Signing time: Tue 18 Nov 2025 14:12:28 +0000 ROA not before: Tue 18 Nov 2025 14:12:24 +0000 ROA not after: Sat 20 Nov 2027 14:12:24 +0000 asID: 212238 IP address blocks: 154.16.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 23 Nov 2025 01:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7350 (0x1cb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Validity Not Before: Nov 18 14:12:24 2025 GMT Not After : Nov 20 14:12:24 2027 GMT Subject: CN=691c7ecc-ea4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:02:7d:4f:42:8c:78:59:bf:12:c4:ca:39:67: 70:d5:c0:3c:a6:27:49:95:35:10:1f:21:fa:b4:83: 6b:f9:c0:b0:5a:cc:1e:e8:17:d5:28:b4:66:01:23: 3f:00:17:8c:58:4b:15:9f:a3:c7:d2:7a:4d:ed:95: 14:79:29:32:88:a5:0b:d5:26:db:6a:97:ff:75:18: 47:8c:c2:ba:1a:ff:70:52:e3:73:22:50:d2:07:f5: e3:ca:fe:ac:f3:2b:76:6c:f8:30:d7:47:27:8a:66: 40:59:54:9b:94:fd:27:bd:c0:fb:f6:53:80:14:d2: 19:a4:09:4d:3b:18:ef:c9:51:68:3a:0c:b6:c3:f1: 89:6e:9b:04:52:e1:b9:8d:79:7b:0d:05:7d:0f:bb: c3:7f:37:4b:18:9f:7c:fa:cc:f2:f1:69:87:32:1c: 66:14:ab:7a:2b:9c:f6:80:d1:df:a7:22:4c:26:68: 56:e5:46:f2:00:ba:b1:4f:ea:29:68:15:87:6d:eb: ee:5f:b3:91:fe:fc:c6:09:db:12:36:ed:5d:da:a8: b7:a1:0a:c7:a9:96:c9:c9:ba:29:cc:e4:92:12:07: ea:c3:29:0d:14:4e:69:25:65:1c:9c:7a:fc:c8:4a: 07:ab:5b:ba:99:02:94:29:c1:c4:d5:98:c0:6c:a6: e0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FB:5A:00:CD:3A:52:3C:AB:42:A2:A0:99:80:70:8D:D4:1D:91:F8 X509v3 Authority Key Identifier: keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9D464D9EC48811F0B2FE82EFDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.16.21.0/24 Signature Algorithm: sha256WithRSAEncryption 99:91:1d:6b:18:af:d1:89:41:64:e8:cf:b7:ac:04:4e:81:22: 25:76:2e:f8:62:1e:df:87:42:2d:d4:02:7a:10:14:8e:1d:84: 12:38:e2:05:6b:4e:fc:b0:90:df:02:71:24:1c:52:92:f1:02: 09:ad:4f:80:98:e5:27:54:13:ec:cb:03:2d:b8:cc:ea:8d:b5: 45:5d:56:6a:9d:9c:b4:7c:83:1d:14:39:b9:46:b5:34:96:f0: 5b:e9:5c:5d:f2:e8:67:24:7e:f1:6b:6c:44:fe:59:a3:ef:42: 2a:0c:d1:60:47:81:00:c9:40:44:bf:f6:9e:5e:65:49:2a:54: 0d:21:40:7a:3e:11:a3:9e:cb:ec:05:b1:88:61:8f:66:21:1c: e2:63:e6:19:47:f2:6a:ca:db:12:d5:f1:f2:a7:5f:b3:63:6d: 57:cf:80:03:0a:ce:c2:1b:02:c5:83:e7:81:f9:aa:78:54:65: 41:ac:d2:36:73:3a:3b:12:b1:99:d6:ed:02:9b:8b:b4:3b:d2: c6:07:4c:85:75:37:af:0d:57:93:25:cb:9b:ad:0b:85:63:ff: 5b:eb:59:81:2a:cf:c2:8e:a9:42:cc:6a:78:bd:9e:45:8d:de: e3:3c:24:e8:fd:2e:1e:2d:4c:18:18:a3:3c:b4:c4:19:6c:d6: 9a:4b:fe:50 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHLYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC MzRGM0Y5Q0E1MzAeFw0yNTExMTgxNDEyMjRaFw0yNzExMjAxNDEyMjRaMBgxFjAU BgNVBAMTDTY5MWM3ZWNjLWVhNGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDNAn1PQox4Wb8SxMo5Z3DVwDymJ0mVNRAfIfq0g2v5wLBazB7oF9UotGYB Iz8AF4xYSxWfo8fSek3tlRR5KTKIpQvVJttql/91GEeMwroa/3BS43MiUNIH9ePK /qzzK3Zs+DDXRyeKZkBZVJuU/Se9wPv2U4AU0hmkCU07GO/JUWg6DLbD8YlumwRS 4bmNeXsNBX0Pu8N/N0sYn3z6zPLxaYcyHGYUq3ornPaA0d+nIkwmaFblRvIAurFP 6iloFYdt6+5fs5H+/MYJ2xI27V3aqLehCseplsnJuinM5JISB+rDKQ0UTmklZRyc evzISgerW7qZApQpwcTVmMBspuBvAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU8fta AM06UjyrQqKgmYBwjdQdkfgwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5 ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4 QUVBMjI4LzlENDY0RDlFQzQ4ODExRjBCMkZFODJFRkRBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBUwDQYJKoZIhvcNAQEL BQADggEBAJmRHWsYr9GJQWToz7esBE6BIiV2LvhiHt+HQi3UAnoQFI4dhBI44gVr TvywkN8CcSQcUpLxAgmtT4CY5SdUE+zLAy24zOqNtUVdVmqdnLR8gx0UOblGtTSW 8FvpXF3y6GckfvFrbET+WaPvQioM0WBHgQDJQES/9p5eZUkqVA0hQHo+EaOey+wF sYhhj2YhHOJj5hlH8mrK2xLV8fKnX7NjbVfPgAMKzsIbAsWD54H5qnhUZUGs0jZz OjsSsZnW7QKbi7Q70sYHTIV1N68NV5Mly5utC4Vj/1vrWYEqz8KOqULMani9nkWN 3uM8JOj9Lh4tTBgYozy0xBls1ppL/lA= -----END CERTIFICATE-----Generated at Fri Nov 21 13:50:19 2025 by rpki-client