This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BBFF97F4C48D11F0AEA4E78FDAE4EC9C.roa File: BBFF97F4C48D11F0AEA4E78FDAE4EC9C.roa (raw, json) Hash identifier: sD6bk4JET89kbcIHrBTtyyZ/SHGzk6237yaizPTezI4= Subject key identifier: 91:E2:A3:3E:8E:06:C5:C8:49:EA:8B:4C:20:54:00:7C:97:BB:E4:90 Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Certificate serial: 1CCE Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BBFF97F4C48D11F0AEA4E78FDAE4EC9C.roa Signing time: Tue 18 Nov 2025 14:49:07 +0000 ROA not before: Tue 18 Nov 2025 14:49:03 +0000 ROA not after: Sat 20 Nov 2027 14:49:03 +0000 asID: 212238 IP address blocks: 154.16.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 23 Nov 2025 01:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7374 (0x1cce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Validity Not Before: Nov 18 14:49:03 2025 GMT Not After : Nov 20 14:49:03 2027 GMT Subject: CN=691c8763-b4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:2c:1b:cb:70:c5:86:a2:96:b6:26:f2:2a:6d: b3:57:30:cc:d7:5b:3b:b6:4c:6c:91:37:b4:24:2f: da:33:a2:96:38:0b:c7:a2:85:95:a3:0d:c7:3b:28: a5:99:aa:85:e7:5e:5f:43:48:9c:e3:6a:bb:cc:c3: 5c:ff:33:79:ac:6c:b0:6c:4f:48:2d:fd:ad:73:b2: e1:27:ff:48:e8:2b:de:89:c8:9b:da:a4:ce:a1:20: a0:b6:50:39:af:ee:78:b9:04:6a:a7:5f:08:7d:09: 62:99:1b:a4:b7:88:16:9e:3f:19:20:96:e8:7c:61: 8a:65:c5:22:db:bf:ea:dc:c9:f4:dd:0b:c2:a5:bb: 59:a4:b2:fe:46:c2:c9:2d:50:36:b7:01:6e:9a:50: eb:a2:c4:e5:a5:89:cc:5f:47:c9:be:74:26:0b:4c: a2:95:34:75:b1:c5:2f:76:00:4c:07:1c:76:b7:80: c6:8b:a1:b5:6a:c0:b3:14:0d:91:11:86:45:84:a6: 9d:24:59:15:f1:73:18:ea:a5:a7:d2:f3:64:50:ef: 07:8c:e2:5d:41:c7:22:d8:aa:e2:bd:ae:e3:fb:fe: 0a:c9:a0:1f:bf:eb:a1:b5:b4:cf:46:80:cb:b2:7e: 8d:c8:cd:4f:f1:0c:7f:b3:8d:12:b5:70:05:d0:86: bc:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E2:A3:3E:8E:06:C5:C8:49:EA:8B:4C:20:54:00:7C:97:BB:E4:90 X509v3 Authority Key Identifier: keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/BBFF97F4C48D11F0AEA4E78FDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.16.75.0/24 Signature Algorithm: sha256WithRSAEncryption 54:2b:d0:18:97:ea:75:dd:bb:2a:16:fb:70:ec:4a:fc:1b:b6: 90:cd:39:25:74:21:fe:58:2d:55:ac:1d:2a:86:ef:88:36:b5: 44:d8:5e:b3:fc:52:e9:82:68:fd:5a:f3:fd:16:df:c0:a4:28: 5f:41:4a:10:81:f3:c3:8a:98:ba:90:4e:04:2c:35:05:40:05: 39:4d:97:a6:1a:a2:7a:80:87:0b:27:4d:7a:36:77:0b:f2:1a: 20:16:14:38:68:89:78:6f:1e:d8:01:30:30:2b:cb:5b:ed:3f: 8e:c0:39:ce:69:a3:40:9b:fd:6d:97:f6:75:0c:d1:2a:d3:fb: e0:29:2d:6d:37:9e:1d:1d:b3:eb:c1:4e:32:db:18:8c:2d:4d: 73:61:d5:b7:5f:99:f2:77:8b:0a:98:58:83:97:ae:c4:b0:b0: d6:87:61:2d:69:43:c9:c0:45:6d:97:1b:25:87:53:59:6a:d5: b6:36:21:30:d6:c0:f9:ee:0e:91:8e:6d:ec:71:c7:a4:f4:e0: d4:d7:9a:35:a1:81:82:fa:6e:97:82:64:a5:ee:6d:bd:4f:bb: c6:9a:2b:76:9f:6d:05:34:13:8d:b5:41:89:48:c1:09:d0:3d: 25:0c:f7:19:8e:08:e5:f9:fa:c2:fa:ef:c3:d8:a1:71:16:8f: c5:38:9a:b8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHM4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC MzRGM0Y5Q0E1MzAeFw0yNTExMTgxNDQ5MDNaFw0yNzExMjAxNDQ5MDNaMBgxFjAU BgNVBAMTDTY5MWM4NzYzLWI0YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDnLBvLcMWGopa2JvIqbbNXMMzXWzu2TGyRN7QkL9ozopY4C8eihZWjDcc7 KKWZqoXnXl9DSJzjarvMw1z/M3msbLBsT0gt/a1zsuEn/0joK96JyJvapM6hIKC2 UDmv7ni5BGqnXwh9CWKZG6S3iBaePxkgluh8YYplxSLbv+rcyfTdC8Klu1mksv5G wsktUDa3AW6aUOuixOWlicxfR8m+dCYLTKKVNHWxxS92AEwHHHa3gMaLobVqwLMU DZERhkWEpp0kWRXxcxjqpafS82RQ7weM4l1BxyLYquK9ruP7/grJoB+/66G1tM9G gMuyfo3IzU/xDH+zjRK1cAXQhrx1AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUkeKj Po4GxchJ6otMIFQAfJe75JAwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5 ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4 QUVBMjI4L0JCRkY5N0Y0QzQ4RDExRjBBRUE0RTc4RkRBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEEswDQYJKoZIhvcNAQEL BQADggEBAFQr0BiX6nXduyoW+3DsSvwbtpDNOSV0If5YLVWsHSqG74g2tUTYXrP8 UumCaP1a8/0W38CkKF9BShCB88OKmLqQTgQsNQVABTlNl6YaonqAhwsnTXo2dwvy GiAWFDhoiXhvHtgBMDAry1vtP47AOc5po0Cb/W2X9nUM0SrT++ApLW03nh0ds+vB TjLbGIwtTXNh1bdfmfJ3iwqYWIOXrsSwsNaHYS1pQ8nARW2XGyWHU1lq1bY2ITDW wPnuDpGObexxx6T04NTXmjWhgYL6bpeCZKXubb1Pu8aaK3afbQU0E421QYlIwQnQ PSUM9xmOCOX5+sL678PYoXEWj8U4mrg= -----END CERTIFICATE-----Generated at Fri Nov 21 13:52:01 2025 by rpki-client