This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0523562AC48711F0A509FBE6DAE4EC9C.roa File: 0523562AC48711F0A509FBE6DAE4EC9C.roa (raw, json) Hash identifier: /dr0PFNrlAxLQ3XWwcfULtUZyEfwZ7KvJUF0aHXy25w= Subject key identifier: E2:0C:F9:A4:1A:7F:1B:8D:B8:1F:F6:66:52:1A:07:1A:F2:C9:D2:59 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A9AA Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0523562AC48711F0A509FBE6DAE4EC9C.roa Signing time: Tue 18 Nov 2025 14:01:04 +0000 ROA not before: Tue 18 Nov 2025 14:00:59 +0000 ROA not after: Sun 15 Mar 2026 14:00:59 +0000 asID: 139880 IP address blocks: 154.83.224.0/20 maxlen: 24 154.89.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108970 (0x1a9aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 18 14:00:59 2025 GMT Not After : Mar 15 14:00:59 2026 GMT Subject: CN=691c7c20-70fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:6d:c3:75:11:58:72:9d:40:6d:8c:93:26: 1d:1e:17:14:86:b4:f4:76:e2:eb:d7:b3:a8:c7:b1: 2b:88:52:c9:d8:c1:74:ee:74:6a:bc:1a:4b:0b:d9: 69:b2:63:f9:8b:0a:8c:ee:4a:0f:38:93:60:f7:3f: 81:c8:20:3c:0c:26:b1:8b:c6:0d:ec:f1:db:53:f8: b4:2a:27:1f:38:78:e3:9e:90:8d:49:d3:98:cc:d8: cb:46:d9:41:c3:78:b6:f2:f8:5c:a8:59:1c:ac:69: ff:58:07:b2:9c:9d:7b:49:c2:de:0d:2a:21:6e:f3: 79:b9:9f:ec:ed:12:8d:c9:4e:2a:95:b3:1a:0e:9c: 5c:2f:dc:fb:9e:f6:f5:6c:0f:75:05:0c:1f:cd:65: 97:cc:3c:61:ae:70:7d:31:79:81:2e:5c:68:b1:01: 2a:4f:e9:ec:d5:18:d8:3b:60:23:49:58:80:c5:ca: 9f:a2:bf:f3:ae:eb:29:e5:74:c7:0a:5c:71:3f:7b: 61:e5:2a:5e:33:ee:a7:94:df:ab:8b:53:d5:ac:b7: d8:bd:d6:7b:68:35:f1:24:57:6d:3e:23:d9:4e:42: 7e:e0:71:ea:c3:6a:5d:f7:7e:96:18:8e:57:fd:64: 08:42:ba:63:9b:38:b0:5e:af:d3:7c:fa:b6:be:f2: 85:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:0C:F9:A4:1A:7F:1B:8D:B8:1F:F6:66:52:1A:07:1A:F2:C9:D2:59 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0523562AC48711F0A509FBE6DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.83.224.0/20 154.89.224.0/20 Signature Algorithm: sha256WithRSAEncryption 44:ea:40:01:90:f3:40:d1:bc:c1:d8:d0:0f:99:a5:1b:a9:28: 7d:02:42:bb:d1:db:a6:16:89:56:47:93:60:d4:ad:bf:b9:d2: 06:c9:b2:7c:0c:3e:93:13:05:6d:e7:3f:3e:4c:04:ea:2a:f6: 69:e7:58:dc:46:ed:00:ad:11:0d:bf:89:72:d7:6a:09:de:d8: ad:4c:dc:ce:28:82:c6:0f:52:15:cd:9a:a1:5d:9a:14:86:53: 5e:e0:d9:ae:de:b0:21:03:c8:06:ce:20:60:66:07:60:9a:79: f9:f4:d6:c7:c0:77:8c:a6:6a:ff:79:ff:62:45:c7:d0:6d:c5: a0:af:4f:32:d5:1f:c7:55:ab:bf:2b:4f:cc:a6:07:47:58:fc: d9:3e:cb:ce:9e:39:05:10:fc:8a:1e:f8:9c:82:1a:8d:25:73: dc:f5:84:10:f5:80:88:6e:e5:a7:32:8f:77:44:ec:36:2e:55: 38:a4:de:f5:3e:26:e6:3b:c2:fa:65:a9:46:14:39:b7:7e:4b: c7:bd:43:77:67:74:3f:c1:01:4b:5e:73:f1:15:82:e9:c7:f5: b9:cd:72:35:18:79:76:47:ec:75:84:e1:4e:2d:66:bb:0c:4b: 8b:f9:61:3f:32:e6:16:a6:96:5c:ce:d7:ce:54:76:51:88:a4: 1f:cf:16:38 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAamqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTE4MTQwMDU5WhcNMjYwMzE1MTQwMDU5WjAYMRYw FAYDVQQDEw02OTFjN2MyMC03MGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAscFtw3URWHKdQG2MkyYdHhcUhrT0duLr17Oox7EriFLJ2MF07nRqvBpL C9lpsmP5iwqM7koPOJNg9z+ByCA8DCaxi8YN7PHbU/i0KicfOHjjnpCNSdOYzNjL RtlBw3i28vhcqFkcrGn/WAeynJ17ScLeDSohbvN5uZ/s7RKNyU4qlbMaDpxcL9z7 nvb1bA91BQwfzWWXzDxhrnB9MXmBLlxosQEqT+ns1RjYO2AjSViAxcqfor/zrusp 5XTHClxxP3th5SpeM+6nlN+ri1PVrLfYvdZ7aDXxJFdtPiPZTkJ+4HHqw2pd936W GI5X/WQIQrpjmziwXq/TfPq2vvKFXwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFOIM +aQafxuNuB/2ZlIaBxryydJZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8wNTIzNTYyQUM0ODcxMUYwQTUwOUZCRTZEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEmlPgAwQEmlngMA0GCSqG SIb3DQEBCwUAA4IBAQBE6kABkPNA0bzB2NAPmaUbqSh9AkK70dumFolWR5Ng1K2/ udIGybJ8DD6TEwVt5z8+TATqKvZp51jcRu0ArRENv4ly12oJ3titTNzOKILGD1IV zZqhXZoUhlNe4Nmu3rAhA8gGziBgZgdgmnn59NbHwHeMpmr/ef9iRcfQbcWgr08y 1R/HVau/K0/MpgdHWPzZPsvOnjkFEPyKHvicghqNJXPc9YQQ9YCIbuWnMo93ROw2 LlU4pN71PibmO8L6ZalGFDm3fkvHvUN3Z3Q/wQFLXnPxFYLpx/W5zXI1GHl2R+x1 hOFOLWa7DEuL+WE/MuYWppZcztfOVHZRiKQfzxY4 -----END CERTIFICATE-----Generated at Wed Dec 3 11:07:10 2025 by rpki-client