This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D473F9A8E17811F0BB35DB9ADAE4EC9C.roa File: D473F9A8E17811F0BB35DB9ADAE4EC9C.roa (raw, json) Hash identifier: +2qJT92W7hLevHcraAmFLhw3NXk5CWyvZoyqMw6L190= Subject key identifier: 80:E8:6F:64:89:EF:FD:38:E0:9E:83:FE:97:AC:FB:9B:20:16:78:85 Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Certificate serial: 1D5F Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D473F9A8E17811F0BB35DB9ADAE4EC9C.roa Signing time: Thu 25 Dec 2025 10:02:33 +0000 ROA not before: Thu 25 Dec 2025 10:02:28 +0000 ROA not after: Sat 25 Dec 2027 10:02:28 +0000 asID: 834 IP address blocks: 154.16.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 29 Dec 2025 00:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7519 (0x1d5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Validity Not Before: Dec 25 10:02:28 2025 GMT Not After : Dec 25 10:02:28 2027 GMT Subject: CN=694d0bb9-d6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0a:85:d6:68:ba:76:99:e1:85:6e:cb:30:22: 34:2b:8b:09:5e:f0:1f:c7:68:23:d9:9d:11:b2:dc: 36:06:e7:01:11:9d:82:f6:81:22:7c:14:b5:de:e1: da:79:39:c8:3d:af:c6:ea:f8:86:0b:30:e4:61:e9: 8e:20:35:04:4e:35:2e:31:ef:a7:ee:2f:33:cb:ae: 51:b5:14:ca:4b:70:e3:0d:ca:f8:e7:1f:e3:37:79: b8:c8:0d:3b:c5:a2:90:0a:12:71:c4:68:f9:97:13: 24:cd:0a:f6:6f:5e:78:dd:d4:e1:9f:44:c9:e8:41: b2:e1:8a:a5:22:4b:75:8c:ff:f0:20:45:49:ac:18: f9:25:b4:50:d8:24:77:2a:42:ec:f8:64:44:4b:f3: 2e:c8:cc:dd:cb:73:a2:e1:45:4c:ea:9f:f5:cd:84: 1f:36:b9:fb:29:80:37:ef:5c:87:72:30:2b:7c:0f: 82:8f:54:58:53:ec:b4:0c:2c:bf:ac:d6:a5:10:15: 94:db:f5:e9:4c:ad:d1:9b:39:2b:b2:a1:b2:4e:70: a8:ff:03:43:ec:c5:98:08:7c:ad:d6:c9:2e:31:ee: 89:18:62:df:92:3d:1f:59:65:47:05:59:d7:89:ed: 60:30:2a:c5:88:dc:8b:94:40:17:ea:ca:66:5f:6d: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:E8:6F:64:89:EF:FD:38:E0:9E:83:FE:97:AC:FB:9B:20:16:78:85 X509v3 Authority Key Identifier: keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D473F9A8E17811F0BB35DB9ADAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.16.160.0/24 Signature Algorithm: sha256WithRSAEncryption a6:dc:91:13:e6:9a:1f:d1:ae:72:ce:e6:d2:6d:8c:a0:b7:d5: d7:8f:27:d1:bb:5c:56:ad:96:37:8a:3e:f8:db:89:6e:35:a6: 71:19:47:4b:bb:27:1b:00:55:99:9d:3c:4d:95:29:8c:3e:17: 95:fe:f9:55:41:cf:d3:8d:0b:73:87:10:e5:57:77:3e:57:57: 75:7e:9f:73:86:34:b0:47:4c:bb:dd:dc:0f:df:91:75:63:23: e8:31:fe:19:58:b0:b8:3a:3b:1b:5f:18:38:91:b2:4c:00:87: 92:34:fd:2b:d3:08:12:1a:22:94:43:07:a0:97:73:36:a9:ed: 01:a3:1d:d5:3b:42:b1:f6:21:1c:af:ad:de:50:1f:aa:6b:be: 71:19:91:4f:60:11:28:30:99:a0:10:e1:73:89:0b:18:df:78: 45:fc:4e:fd:82:5e:95:7c:2a:80:cf:f5:40:90:71:eb:30:29: 85:27:5e:46:24:de:2b:ee:84:1f:75:37:1c:3b:b0:62:08:f8: 3b:09:e6:49:2c:fb:d7:ec:bb:0b:35:fd:29:10:d7:35:86:b7: 5e:ce:f4:33:3e:50:5a:7d:48:0f:a2:8f:1d:0c:38:47:3f:f6: a9:13:0e:7d:80:8c:39:4e:83:a3:83:c5:2d:13:49:cf:0f:5b: 50:c9:56:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHV8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC MzRGM0Y5Q0E1MzAeFw0yNTEyMjUxMDAyMjhaFw0yNzEyMjUxMDAyMjhaMBgxFjAU BgNVBAMTDTY5NGQwYmI5LWQ2ZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDLCoXWaLp2meGFbsswIjQriwle8B/HaCPZnRGy3DYG5wERnYL2gSJ8FLXe 4dp5Ocg9r8bq+IYLMORh6Y4gNQRONS4x76fuLzPLrlG1FMpLcOMNyvjnH+M3ebjI DTvFopAKEnHEaPmXEyTNCvZvXnjd1OGfRMnoQbLhiqUiS3WM//AgRUmsGPkltFDY JHcqQuz4ZERL8y7IzN3Lc6LhRUzqn/XNhB82ufspgDfvXIdyMCt8D4KPVFhT7LQM LL+s1qUQFZTb9elMrdGbOSuyobJOcKj/A0PsxZgIfK3WyS4x7okYYt+SPR9ZZUcF WdeJ7WAwKsWI3IuUQBfqymZfbaShAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUgOhv ZInv/TjgnoP+l6z7myAWeIUwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5 ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4 QUVBMjI4L0Q0NzNGOUE4RTE3ODExRjBCQjM1REI5QURBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEKAwDQYJKoZIhvcNAQEL BQADggEBAKbckRPmmh/RrnLO5tJtjKC31dePJ9G7XFatljeKPvjbiW41pnEZR0u7 JxsAVZmdPE2VKYw+F5X++VVBz9ONC3OHEOVXdz5XV3V+n3OGNLBHTLvd3A/fkXVj I+gx/hlYsLg6OxtfGDiRskwAh5I0/SvTCBIaIpRDB6CXczap7QGjHdU7QrH2IRyv rd5QH6prvnEZkU9gESgwmaAQ4XOJCxjfeEX8Tv2CXpV8KoDP9UCQceswKYUnXkYk 3ivuhB91Nxw7sGII+DsJ5kks+9fsuws1/SkQ1zWGt17O9DM+UFp9SA+ijx0MOEc/ 9qkTDn2AjDlOg6ODxS0TSc8PW1DJVgg= -----END CERTIFICATE-----Generated at Sat Dec 27 19:19:48 2025 by rpki-client