This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A611BBECE48C11F0BF9A8DDFDAE4EC9C.roa File: A611BBECE48C11F0BF9A8DDFDAE4EC9C.roa (raw, json) Hash identifier: eeDvG2qvTu9g+2q6aMvzCeEORqKIfzWW5LLoeVJe1VY= Subject key identifier: 9D:FB:A7:27:31:E6:96:08:5B:8A:15:A0:59:F7:C5:16:60:80:B3:B2 Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Certificate serial: 1D66 Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A611BBECE48C11F0BF9A8DDFDAE4EC9C.roa Signing time: Mon 29 Dec 2025 08:01:58 +0000 ROA not before: Mon 29 Dec 2025 08:01:50 +0000 ROA not after: Wed 29 Dec 2027 08:01:50 +0000 asID: 834 IP address blocks: 154.16.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 31 Dec 2025 00:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7526 (0x1d66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Validity Not Before: Dec 29 08:01:50 2025 GMT Not After : Dec 29 08:01:50 2027 GMT Subject: CN=69523576-9b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7b:20:4e:55:3f:73:79:4b:ed:ce:0e:fa:fe: 86:3a:5d:b3:21:79:76:0a:6a:fb:98:12:52:02:c5: c2:8b:0e:91:c0:e8:13:e9:61:ee:73:b9:9d:7d:8c: 29:eb:ad:49:a4:8d:6a:b4:76:a4:6c:83:8b:8a:9b: 99:ee:66:41:71:da:c7:b1:95:1b:ce:02:98:50:8d: ce:bf:7c:df:00:4e:6e:18:02:d1:6b:62:91:bf:6e: b1:10:79:45:c4:04:e8:77:89:4f:13:68:3d:f3:f1: c8:a5:c0:cc:85:54:04:64:0c:70:80:ae:4e:35:3d: fb:37:08:44:5e:69:4e:44:50:18:ad:99:1d:9c:bf: b0:0d:d9:8f:b2:7e:a4:96:d6:e9:58:22:0f:ea:5f: 24:ba:b0:9b:b3:00:1c:04:d2:c0:7c:b5:01:5b:20: eb:c7:c1:7c:fa:03:19:9c:ea:24:ca:bd:0d:68:33: f7:4f:52:c1:78:e7:a1:ab:d7:12:30:4e:74:dc:1f: d2:58:61:ab:ea:54:e7:20:81:62:12:ad:e1:76:06: e5:1c:e7:5d:1b:a8:b5:9a:cd:d4:27:f4:8c:5d:36: 86:08:9c:ba:53:95:ed:75:a6:df:39:66:4d:80:79: 5c:d0:00:31:6c:a4:7d:9b:7e:0b:9e:97:a3:b2:27: 22:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FB:A7:27:31:E6:96:08:5B:8A:15:A0:59:F7:C5:16:60:80:B3:B2 X509v3 Authority Key Identifier: keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/A611BBECE48C11F0BF9A8DDFDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.16.26.0/24 Signature Algorithm: sha256WithRSAEncryption cf:9c:d7:27:d8:18:5f:95:8e:ea:4a:13:4e:5a:ac:7a:7e:ad: 14:44:01:5b:d0:50:4a:fc:7d:52:82:f5:68:d0:e5:55:bc:c7: b4:97:7f:e6:7d:01:8d:da:9c:f2:c2:92:2c:06:f2:e7:66:db: 80:86:8d:1b:9a:2c:30:22:ac:07:8a:54:d9:56:05:26:cc:25: 73:b8:49:78:ff:bb:7c:d9:b1:c7:f4:ca:07:0d:b9:7a:94:fa: c1:32:83:2a:5d:49:f3:44:8a:b2:46:92:64:7e:72:10:c7:0f: bc:54:35:d0:ec:67:2f:14:f3:5b:69:3d:67:bb:4a:1d:6c:f1: 0a:17:66:6c:cc:8d:6a:71:ff:ad:4f:eb:e2:98:fb:9a:37:df: cd:48:b2:74:7f:30:6d:0d:9c:cb:a0:d7:51:30:6b:94:81:10: 83:86:63:c0:61:ca:67:f1:36:46:eb:dd:1d:fe:b0:86:45:42: 8e:35:6d:1b:d2:d8:bb:28:8d:4d:c5:19:ea:75:b9:5c:53:56: c3:d9:d6:df:1f:13:f4:24:2e:7d:44:ed:cf:8f:d0:d3:25:45: 24:c3:b5:63:45:40:cb:d8:ff:95:63:a5:d1:c4:af:2a:9b:b7: f6:d8:5d:f6:bf:b2:30:66:96:ed:42:9a:59:a5:66:4b:5d:38: e3:48:28:3d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHWYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC MzRGM0Y5Q0E1MzAeFw0yNTEyMjkwODAxNTBaFw0yNzEyMjkwODAxNTBaMBgxFjAU BgNVBAMTDTY5NTIzNTc2LTliMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCxeyBOVT9zeUvtzg76/oY6XbMheXYKavuYElICxcKLDpHA6BPpYe5zuZ19 jCnrrUmkjWq0dqRsg4uKm5nuZkFx2sexlRvOAphQjc6/fN8ATm4YAtFrYpG/brEQ eUXEBOh3iU8TaD3z8cilwMyFVARkDHCArk41Pfs3CEReaU5EUBitmR2cv7AN2Y+y fqSW1ulYIg/qXyS6sJuzABwE0sB8tQFbIOvHwXz6Axmc6iTKvQ1oM/dPUsF456Gr 1xIwTnTcH9JYYavqVOcggWISreF2BuUc510bqLWazdQn9IxdNoYInLpTle11pt85 Zk2AeVzQADFspH2bfguel6OyJyL1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUnfun JzHmlghbihWgWffFFmCAs7IwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5 ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4 QUVBMjI4L0E2MTFCQkVDRTQ4QzExRjBCRjlBOERERkRBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBowDQYJKoZIhvcNAQEL BQADggEBAM+c1yfYGF+VjupKE05arHp+rRREAVvQUEr8fVKC9WjQ5VW8x7SXf+Z9 AY3anPLCkiwG8udm24CGjRuaLDAirAeKVNlWBSbMJXO4SXj/u3zZscf0ygcNuXqU +sEygypdSfNEirJGkmR+chDHD7xUNdDsZy8U81tpPWe7Sh1s8QoXZmzMjWpx/61P 6+KY+5o3381IsnR/MG0NnMug11Ewa5SBEIOGY8BhymfxNkbr3R3+sIZFQo41bRvS 2LsojU3FGep1uVxTVsPZ1t8fE/QkLn1E7c+P0NMlRSTDtWNFQMvY/5VjpdHEryqb t/bYXfa/sjBmlu1CmlmlZktdOONIKD0= -----END CERTIFICATE-----Generated at Mon Dec 29 20:21:38 2025 by rpki-client