This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FF5940CEC48B11F09FE11287DAE4EC9C.roa File: FF5940CEC48B11F09FE11287DAE4EC9C.roa (raw, json) Hash identifier: a2ZsEuduC98mZX4MqpniYygjrVvbjEorN8+fcvdvPXg= Subject key identifier: 4A:BC:01:26:0A:D4:CE:96:79:85:B4:93:E7:8B:8A:F0:5A:45:EA:AD Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Certificate serial: 1CC8 Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FF5940CEC48B11F09FE11287DAE4EC9C.roa Signing time: Tue 18 Nov 2025 14:36:43 +0000 ROA not before: Tue 18 Nov 2025 14:36:37 +0000 ROA not after: Sat 20 Nov 2027 14:36:37 +0000 asID: 212238 IP address blocks: 154.16.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 23 Nov 2025 01:15:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7368 (0x1cc8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Validity Not Before: Nov 18 14:36:37 2025 GMT Not After : Nov 20 14:36:37 2027 GMT Subject: CN=691c847b-3634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0e:9e:a3:60:ba:f3:6d:8f:5d:9e:49:81:40: 76:f0:79:a2:36:b1:7c:33:0d:19:1d:ab:ad:76:6d: 2e:ef:33:bc:76:49:52:25:b7:96:09:0c:48:3c:98: 69:23:5f:f4:64:b6:f1:ed:f6:a7:d1:2e:e8:bf:da: 51:67:a0:ec:ce:d1:39:44:73:a8:0a:27:9c:c0:47: 25:98:de:a1:6e:bd:ad:19:c2:f7:14:1b:f8:b8:57: cc:dc:41:f9:97:54:2b:b8:5f:22:92:74:6c:e8:26: be:55:9d:7b:b9:c3:f4:02:a0:5b:fd:b1:b8:8f:64: 23:9b:fb:83:71:6a:de:7f:7a:0f:4b:da:bf:f1:6c: d8:b0:f7:86:f5:97:e1:aa:a4:85:ac:37:24:d1:fb: 6a:57:80:bd:b1:f9:73:15:c5:da:f5:df:cf:6f:50: 4d:a5:b2:3b:41:23:87:da:e6:f5:64:8e:18:7a:de: d5:44:4a:f9:80:17:d9:89:d7:df:27:75:8b:33:8a: 96:9e:20:60:45:d4:a6:30:c4:ed:ee:1e:f9:13:76: f3:04:d6:aa:3d:05:4e:cb:df:99:1d:0a:49:34:80: ac:71:41:f4:f0:1b:a7:a6:18:78:8c:8a:e0:16:de: e4:9c:a7:c6:31:04:59:c3:43:29:e0:a7:0d:93:21: c4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:BC:01:26:0A:D4:CE:96:79:85:B4:93:E7:8B:8A:F0:5A:45:EA:AD X509v3 Authority Key Identifier: keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FF5940CEC48B11F09FE11287DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.16.51.0/24 Signature Algorithm: sha256WithRSAEncryption 34:93:7a:88:07:e0:9f:49:71:67:9f:2e:6f:6c:b7:46:8f:a1: 45:fe:80:26:06:02:b4:af:88:31:01:02:2b:83:27:60:68:37: 68:20:d2:2d:1d:58:16:f3:de:db:6c:3c:89:a4:1e:71:9e:83: 39:5f:5a:3b:2d:74:0c:66:64:44:da:23:d3:d4:de:0c:0c:90: fd:51:cd:90:1c:4e:36:36:4b:83:26:1d:97:70:8d:d9:2e:e2: 30:0c:62:da:63:9c:3b:15:8b:44:99:d8:08:e3:33:1a:98:d6: 69:ba:cf:62:75:44:b5:dc:15:68:06:cf:2c:14:99:30:f5:0b: 52:90:2e:fc:29:bf:a5:84:ed:92:ad:be:96:10:de:ab:b9:9b: 87:16:a3:c9:8d:9e:ae:f9:a3:b4:b5:4f:42:dc:5c:a5:b3:6c: bf:f8:70:f1:61:a9:71:91:ca:3d:d3:e6:20:6b:75:be:83:15: 62:db:dc:c7:d8:a1:01:78:95:64:47:ae:b2:16:7c:97:05:4c: 2b:ba:a7:7b:95:23:13:71:7a:d5:75:24:80:ff:7e:ec:4a:93: 1d:49:88:fa:15:00:13:ff:e6:e3:1f:f9:8b:db:a1:fd:62:10: 80:ef:b2:c5:5c:34:43:06:eb:0b:68:73:90:fe:a5:69:3c:7b: 5f:66:89:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHMgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC MzRGM0Y5Q0E1MzAeFw0yNTExMTgxNDM2MzdaFw0yNzExMjAxNDM2MzdaMBgxFjAU BgNVBAMTDTY5MWM4NDdiLTM2MzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCnDp6jYLrzbY9dnkmBQHbweaI2sXwzDRkdq612bS7vM7x2SVIlt5YJDEg8 mGkjX/RktvHt9qfRLui/2lFnoOzO0TlEc6gKJ5zARyWY3qFuva0ZwvcUG/i4V8zc QfmXVCu4XyKSdGzoJr5VnXu5w/QCoFv9sbiPZCOb+4Nxat5/eg9L2r/xbNiw94b1 l+GqpIWsNyTR+2pXgL2x+XMVxdr1389vUE2lsjtBI4fa5vVkjhh63tVESvmAF9mJ 198ndYszipaeIGBF1KYwxO3uHvkTdvME1qo9BU7L35kdCkk0gKxxQfTwG6emGHiM iuAW3uScp8YxBFnDQyngpw2TIcRxAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUSrwB JgrUzpZ5hbST54uK8FpF6q0wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5 ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4 QUVBMjI4L0ZGNTk0MENFQzQ4QjExRjA5RkUxMTI4N0RBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDMwDQYJKoZIhvcNAQEL BQADggEBADSTeogH4J9JcWefLm9st0aPoUX+gCYGArSviDEBAiuDJ2BoN2gg0i0d WBbz3ttsPImkHnGegzlfWjstdAxmZETaI9PU3gwMkP1RzZAcTjY2S4MmHZdwjdku 4jAMYtpjnDsVi0SZ2AjjMxqY1mm6z2J1RLXcFWgGzywUmTD1C1KQLvwpv6WE7ZKt vpYQ3qu5m4cWo8mNnq75o7S1T0LcXKWzbL/4cPFhqXGRyj3T5iBrdb6DFWLb3MfY oQF4lWRHrrIWfJcFTCu6p3uVIxNxetV1JID/fuxKkx1JiPoVABP/5uMf+Yvbof1i EIDvssVcNEMG6wtoc5D+pWk8e19miZQ= -----END CERTIFICATE-----Generated at Fri Nov 21 13:48:53 2025 by rpki-client