This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02D9E7D8CC5411F0806CDF7ADAE4EC9C.roa File: 02D9E7D8CC5411F0806CDF7ADAE4EC9C.roa (raw, json) Hash identifier: T6sykZJ8BcLRpjbKkQmg6aQH23FrHwQJ0wntMTBJLrQ= Subject key identifier: E8:E8:F4:E4:F7:05:0C:72:35:46:DE:FF:FB:16:1F:A5:F4:84:6B:8D Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AB10 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02D9E7D8CC5411F0806CDF7ADAE4EC9C.roa Signing time: Fri 28 Nov 2025 12:16:05 +0000 ROA not before: Fri 28 Nov 2025 12:15:59 +0000 ROA not after: Thu 18 Dec 2025 12:15:59 +0000 asID: 399077 IP address blocks: 154.211.64.0/18 maxlen: 24 154.211.64.0/24 maxlen: 24 154.211.65.0/24 maxlen: 24 154.211.66.0/24 maxlen: 24 154.211.67.0/24 maxlen: 24 154.211.68.0/24 maxlen: 24 154.211.69.0/24 maxlen: 24 154.211.70.0/24 maxlen: 24 154.211.72.0/24 maxlen: 24 154.211.73.0/24 maxlen: 24 154.211.74.0/24 maxlen: 24 154.211.75.0/24 maxlen: 24 154.211.76.0/24 maxlen: 24 154.211.77.0/24 maxlen: 24 154.211.78.0/24 maxlen: 24 154.211.79.0/24 maxlen: 24 154.211.80.0/24 maxlen: 24 154.211.81.0/24 maxlen: 24 154.211.82.0/24 maxlen: 24 154.211.83.0/24 maxlen: 24 154.211.84.0/24 maxlen: 24 154.211.85.0/24 maxlen: 24 154.211.86.0/24 maxlen: 24 154.211.87.0/24 maxlen: 24 154.211.88.0/24 maxlen: 24 154.211.89.0/24 maxlen: 24 154.211.90.0/24 maxlen: 24 154.211.91.0/24 maxlen: 24 154.211.92.0/24 maxlen: 24 154.211.93.0/24 maxlen: 24 154.211.94.0/24 maxlen: 24 154.211.95.0/24 maxlen: 24 154.211.96.0/24 maxlen: 24 154.211.97.0/24 maxlen: 24 154.211.98.0/24 maxlen: 24 154.211.99.0/24 maxlen: 24 154.211.100.0/24 maxlen: 24 154.211.101.0/24 maxlen: 24 154.211.102.0/24 maxlen: 24 154.211.103.0/24 maxlen: 24 154.211.104.0/24 maxlen: 24 154.211.105.0/24 maxlen: 24 154.211.106.0/24 maxlen: 24 154.211.107.0/24 maxlen: 24 154.211.108.0/24 maxlen: 24 154.211.109.0/24 maxlen: 24 154.211.110.0/24 maxlen: 24 154.211.111.0/24 maxlen: 24 154.211.112.0/24 maxlen: 24 154.211.113.0/24 maxlen: 24 154.211.114.0/24 maxlen: 24 154.211.115.0/24 maxlen: 24 154.211.116.0/24 maxlen: 24 154.211.117.0/24 maxlen: 24 154.211.118.0/24 maxlen: 24 154.211.119.0/24 maxlen: 24 154.211.120.0/24 maxlen: 24 154.211.121.0/24 maxlen: 24 154.211.122.0/24 maxlen: 24 154.211.123.0/24 maxlen: 24 154.211.124.0/24 maxlen: 24 154.211.125.0/24 maxlen: 24 154.211.126.0/24 maxlen: 24 154.211.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109328 (0x1ab10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 28 12:15:59 2025 GMT Not After : Dec 18 12:15:59 2025 GMT Subject: CN=69299285-e9f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4d:b9:fa:d8:58:0d:08:11:73:e7:4a:4a:e7: ad:96:12:6b:d9:82:c7:6d:40:76:7a:e3:25:86:82: 2c:55:1f:7f:ab:1f:4a:9f:dd:89:77:d1:2b:34:d4: cf:dd:4f:31:d8:82:ea:36:32:39:78:9a:ce:5d:37: 77:8b:74:42:08:46:24:2a:b7:f0:8c:f9:a1:8d:2e: 0a:87:8d:0a:9a:64:b0:22:de:fb:b8:17:21:1e:cd: 2a:5f:95:00:ad:ab:38:05:8d:77:e5:95:f5:7f:63: 28:cc:b5:bf:d5:25:6b:1d:01:6e:aa:ff:6a:c1:7e: cf:08:f4:e3:f8:35:00:7a:14:18:df:7a:8c:49:6f: bd:e8:8e:6f:2a:8b:89:0b:2a:a3:e9:2b:c5:3c:ae: 47:6a:5d:17:ac:af:43:cc:9f:11:10:50:0b:70:ec: 6a:28:33:5a:99:67:b2:76:4c:33:5d:7b:59:d4:05: 8d:ab:e5:60:d7:20:a7:18:b7:67:de:01:b3:30:2a: 87:fc:4c:7c:21:9e:8c:06:e3:d6:f8:c9:61:23:69: 37:f8:6d:23:6b:42:bd:a4:f3:b5:84:33:ce:a7:72: 37:5c:37:f0:7c:c2:2f:cd:1f:9b:34:fc:6d:b5:91: f6:b6:b4:ea:b4:2b:f0:6a:99:ea:71:9a:b8:61:50: 2b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:E8:F4:E4:F7:05:0C:72:35:46:DE:FF:FB:16:1F:A5:F4:84:6B:8D X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02D9E7D8CC5411F0806CDF7ADAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.211.64.0/18 Signature Algorithm: sha256WithRSAEncryption 7c:28:a6:5e:81:de:80:e4:2b:84:ed:9d:69:39:4f:9d:fd:6e: 8b:bd:99:38:d8:8f:b1:fa:5f:9b:c1:cc:3e:86:d3:52:4b:38: 54:20:b6:b6:ee:39:0e:7c:87:b4:63:ee:47:98:b4:18:c8:99: 33:40:ac:c5:eb:b6:8f:77:83:6e:2d:64:5e:44:78:c5:f1:ca: 16:d4:1f:a9:ab:44:68:29:8d:e2:10:96:9f:12:b5:95:3b:3b: 99:83:a5:d8:ee:4a:62:ef:10:22:23:b1:aa:b0:88:34:6b:59: 2f:7f:47:2e:1c:82:eb:27:62:f4:01:b2:df:2b:cc:89:48:b0: 2a:d5:1f:d8:ca:14:3c:58:02:0d:f7:23:f6:8f:37:13:90:ca: 69:60:a2:e4:cb:37:83:d6:46:27:b8:ca:a1:d4:d3:af:c2:4c: 9f:e4:59:ba:17:37:de:17:93:03:35:ac:0e:b3:a0:07:b5:93: 01:58:30:6e:c4:1f:0e:8a:27:c8:73:c6:1b:5f:a9:51:46:bd: c3:72:ba:dd:21:1d:ae:90:7b:97:a4:6b:5f:78:f6:5d:29:08: 4b:ea:eb:8c:c4:a9:78:f0:1b:fb:76:82:06:02:fc:1e:0c:7a: f1:f6:59:56:0e:f2:08:ba:a9:95:51:90:a5:1e:13:ad:47:88: 69:25:bd:6a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAasQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTI4MTIxNTU5WhcNMjUxMjE4MTIxNTU5WjAYMRYw FAYDVQQDEw02OTI5OTI4NS1lOWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA1025+thYDQgRc+dKSuetlhJr2YLHbUB2euMlhoIsVR9/qx9Kn92Jd9Er NNTP3U8x2ILqNjI5eJrOXTd3i3RCCEYkKrfwjPmhjS4Kh40KmmSwIt77uBchHs0q X5UAras4BY135ZX1f2MozLW/1SVrHQFuqv9qwX7PCPTj+DUAehQY33qMSW+96I5v KouJCyqj6SvFPK5Hal0XrK9DzJ8REFALcOxqKDNamWeydkwzXXtZ1AWNq+Vg1yCn GLdn3gGzMCqH/Ex8IZ6MBuPW+MlhI2k3+G0ja0K9pPO1hDPOp3I3XDfwfMIvzR+b NPxttZH2trTqtCvwapnqcZq4YVArWwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOjo 9OT3BQxyNUbe//sWH6X0hGuNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8wMkQ5RTdEOENDNTQxMUYwODA2Q0RGN0FEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmtNAMA0GCSqGSIb3DQEB CwUAA4IBAQB8KKZegd6A5CuE7Z1pOU+d/W6LvZk42I+x+l+bwcw+htNSSzhUILa2 7jkOfIe0Y+5HmLQYyJkzQKzF67aPd4NuLWReRHjF8coW1B+pq0RoKY3iEJafErWV OzuZg6XY7kpi7xAiI7GqsIg0a1kvf0cuHILrJ2L0AbLfK8yJSLAq1R/YyhQ8WAIN 9yP2jzcTkMppYKLkyzeD1kYnuMqh1NOvwkyf5Fm6FzfeF5MDNawOs6AHtZMBWDBu xB8OiifIc8YbX6lRRr3DcrrdIR2ukHuXpGtfePZdKQhL6uuMxKl48Bv7doIGAvwe DHrx9llWDvIIuqmVUZClHhOtR4hpJb1q -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:08 2025 by rpki-client