This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BACF3EF2C48811F0926987EFDAE4EC9C.roa File: BACF3EF2C48811F0926987EFDAE4EC9C.roa (raw, json) Hash identifier: eyp31IDPBdP1cum9Uo+bH4WyAz1dYwRwXQ4QrxD6w+M= Subject key identifier: 7F:26:E2:1D:2E:32:8C:18:EC:F1:6C:4D:CA:F0:7B:02:2F:6C:99:8E Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Certificate serial: 1CB8 Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BACF3EF2C48811F0926987EFDAE4EC9C.roa Signing time: Tue 18 Nov 2025 14:13:18 +0000 ROA not before: Tue 18 Nov 2025 14:13:13 +0000 ROA not after: Sat 20 Nov 2027 14:13:13 +0000 asID: 212238 IP address blocks: 154.16.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 23 Nov 2025 01:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7352 (0x1cb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Validity Not Before: Nov 18 14:13:13 2025 GMT Not After : Nov 20 14:13:13 2027 GMT Subject: CN=691c7efe-bbf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6c:73:17:07:6a:e4:74:f2:34:cb:c5:1d:1b: 0a:2b:12:cc:1f:6b:53:71:9e:a2:24:98:4d:b1:80: 91:47:69:02:93:ac:85:f7:be:4a:fb:a7:58:c1:39: ea:e8:05:96:3d:fe:ad:ba:be:74:21:44:2c:63:12: 83:25:8a:74:be:ea:7f:34:92:6a:cb:da:55:53:c1: 92:4d:25:9c:78:58:91:35:5c:09:c6:fa:dc:a2:5d: a7:3a:65:60:b5:73:89:82:dc:e7:46:31:fb:0c:8d: 69:60:39:08:95:e9:86:e3:ba:56:fb:c1:cd:b3:a7: b3:e1:76:53:13:0c:c6:ab:92:7c:3b:67:8c:9a:4f: b3:93:3c:00:65:18:87:86:d7:17:db:5a:dc:e1:7f: e5:3f:6a:7c:45:3c:a6:4e:87:54:a2:22:01:15:52: ad:78:d9:00:8b:3a:47:a0:34:c7:2d:35:0f:87:71: d8:ed:cf:66:7e:0b:6d:47:4e:76:ba:13:1d:31:e7: 5a:ea:92:28:49:58:47:9a:1d:c2:17:4a:e9:cc:fb: 79:9a:57:cb:f0:73:89:3d:b5:2d:93:69:c1:f5:ca: 07:4f:31:99:f5:60:1c:0c:c0:f3:e4:74:c4:ab:b2: 31:85:6e:48:17:96:fb:e5:b3:89:21:f3:ad:e4:ec: fa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:26:E2:1D:2E:32:8C:18:EC:F1:6C:4D:CA:F0:7B:02:2F:6C:99:8E X509v3 Authority Key Identifier: keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BACF3EF2C48811F0926987EFDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.16.23.0/24 Signature Algorithm: sha256WithRSAEncryption d2:61:eb:0f:de:f5:c8:cb:4e:a5:29:8a:9a:34:58:2a:46:d5: 28:ef:f9:2f:c0:1d:b4:56:a0:6e:b6:0b:72:74:cb:5e:5f:73: 89:43:be:c4:45:b3:f9:e8:2c:2a:6b:53:1a:64:c8:97:e9:43: 4f:a9:5a:4a:6a:86:5a:53:38:ed:26:a4:61:d9:8f:0d:00:89: 3f:63:40:0f:36:ab:b3:fc:e0:16:0d:9a:7d:b7:54:da:03:9b: 29:34:ce:a3:f8:7d:0b:61:4c:ee:63:0f:70:b5:e0:d0:cc:ad: 73:9e:da:79:13:fd:7c:47:1a:b0:f8:fe:77:ee:ed:31:05:2d: 57:da:6f:f2:fd:e3:e4:f7:2a:b0:b0:7d:dd:b4:a8:a0:11:38: 2c:45:75:d7:46:40:f6:07:ad:03:be:54:7e:52:a4:56:9f:ed: 77:3f:b1:18:8a:52:70:7e:96:47:b4:21:1e:c0:c5:d2:cb:d9: b1:a8:24:a8:34:38:78:4f:20:35:30:a4:04:32:23:89:dc:09: 7b:77:a4:72:80:19:6f:82:54:38:35:99:ea:32:67:2d:82:32: fc:25:45:f7:15:b3:c5:4a:55:de:8a:d5:3a:c5:2b:cf:ba:0d: 47:68:25:8d:f9:26:08:81:c3:35:b5:a1:1b:a1:a5:11:52:9b: c7:81:82:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHLgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC MzRGM0Y5Q0E1MzAeFw0yNTExMTgxNDEzMTNaFw0yNzExMjAxNDEzMTNaMBgxFjAU BgNVBAMTDTY5MWM3ZWZlLWJiZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDTbHMXB2rkdPI0y8UdGworEswfa1NxnqIkmE2xgJFHaQKTrIX3vkr7p1jB OeroBZY9/q26vnQhRCxjEoMlinS+6n80kmrL2lVTwZJNJZx4WJE1XAnG+tyiXac6 ZWC1c4mC3OdGMfsMjWlgOQiV6Ybjulb7wc2zp7PhdlMTDMarknw7Z4yaT7OTPABl GIeG1xfbWtzhf+U/anxFPKZOh1SiIgEVUq142QCLOkegNMctNQ+Hcdjtz2Z+C21H Tna6Ex0x51rqkihJWEeaHcIXSunM+3maV8vwc4k9tS2TacH1ygdPMZn1YBwMwPPk dMSrsjGFbkgXlvvls4kh863k7Pp7AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUfybi HS4yjBjs8WxNyvB7Ai9smY4wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5 ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4 QUVBMjI4L0JBQ0YzRUYyQzQ4ODExRjA5MjY5ODdFRkRBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBcwDQYJKoZIhvcNAQEL BQADggEBANJh6w/e9cjLTqUpipo0WCpG1Sjv+S/AHbRWoG62C3J0y15fc4lDvsRF s/noLCprUxpkyJfpQ0+pWkpqhlpTOO0mpGHZjw0AiT9jQA82q7P84BYNmn23VNoD myk0zqP4fQthTO5jD3C14NDMrXOe2nkT/XxHGrD4/nfu7TEFLVfab/L94+T3KrCw fd20qKAROCxFdddGQPYHrQO+VH5SpFaf7Xc/sRiKUnB+lke0IR7AxdLL2bGoJKg0 OHhPIDUwpAQyI4ncCXt3pHKAGW+CVDg1meoyZy2CMvwlRfcVs8VKVd6K1TrFK8+6 DUdoJY35JgiBwzW1oRuhpRFSm8eBgiM= -----END CERTIFICATE-----Generated at Fri Nov 21 13:52:26 2025 by rpki-client