This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E5C975EC91B11F0847197B2DAE4EC9C.roa File: 0E5C975EC91B11F0847197B2DAE4EC9C.roa (raw, json) Hash identifier: 4SvfdqBSeI0ceOzVuSuj9pddzw4XhSRTEtGicZTJ5E0= Subject key identifier: 44:8A:22:6C:78:6C:6F:C7:9C:7E:E6:A4:E4:A3:6F:A8:03:F4:D5:66 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AA4D Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E5C975EC91B11F0847197B2DAE4EC9C.roa Signing time: Mon 24 Nov 2025 09:50:49 +0000 ROA not before: Mon 24 Nov 2025 09:50:43 +0000 ROA not after: Tue 30 Dec 2025 09:50:43 +0000 asID: 9304 IP address blocks: 154.200.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109133 (0x1aa4d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 24 09:50:43 2025 GMT Not After : Dec 30 09:50:43 2025 GMT Subject: CN=69242a79-0708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:91:38:e0:dd:f1:b3:91:4a:9c:e9:52:4b:b6: 60:1a:4e:0e:d5:7f:88:70:ed:64:28:5d:2c:dc:40: ac:33:f9:77:25:86:99:f4:0d:31:e1:e9:7c:ef:5e: fa:de:02:28:3d:86:7f:e5:fd:53:25:37:61:db:2b: 30:30:c6:b7:56:5e:ba:27:6a:f6:80:3b:47:3e:90: bd:67:4b:e7:e9:58:6d:be:72:9d:d1:a1:06:1a:24: 8c:f6:93:9e:09:c8:5e:d8:a7:b6:dd:2a:6d:25:a8: 54:95:79:a6:09:f5:2f:d0:4d:2f:a7:8a:ed:20:15: 02:05:59:30:32:dc:74:fb:9e:1d:a1:8a:9e:19:0f: 32:0b:05:f7:cf:f2:a7:92:2d:e6:c0:4e:50:60:97: 3c:32:b4:4e:68:94:6e:ea:a2:c7:22:cc:d5:a9:6b: a6:89:68:43:c4:c0:fc:98:f8:cb:be:6e:a4:c9:0e: a9:ee:42:f5:3d:59:f4:02:77:54:bc:7f:4d:77:2c: ed:9d:70:0b:fa:45:42:74:12:5d:45:f5:ee:2c:09: 9c:c7:58:dd:76:fd:20:7b:a1:da:a0:2c:22:d0:61: 1c:b7:f5:fc:94:1a:57:e2:35:08:1f:d5:fe:32:49: 1f:79:83:30:8a:33:47:0c:2c:c9:4a:d7:b8:f6:8e: 0d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8A:22:6C:78:6C:6F:C7:9C:7E:E6:A4:E4:A3:6F:A8:03:F4:D5:66 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0E5C975EC91B11F0847197B2DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.200.1.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:c7:3e:44:8a:7c:97:a8:8a:65:0b:7f:48:81:80:96:e4:27: 62:d6:ad:15:bf:ce:1f:40:f2:5a:8d:5b:db:57:39:a8:20:82: 71:f8:9f:f3:84:a6:10:bc:b7:7c:b8:85:b9:bc:df:82:c1:9f: de:88:6e:b9:56:76:25:38:b2:82:aa:27:b6:82:97:24:75:f6: 50:be:b1:43:66:94:18:6b:2c:1a:df:71:e9:2f:ed:f7:e3:95: a5:ba:23:b4:30:55:2d:2a:06:c7:e9:ae:f5:b2:1e:73:71:5c: 8a:c8:66:06:31:da:95:a5:9d:b1:af:92:42:75:20:43:46:ee: 87:ba:0e:c0:d8:f4:c1:dc:55:ef:28:1a:53:38:64:ec:34:eb: 6e:17:35:de:02:25:8e:4c:7b:8f:a4:db:c1:2c:ef:ea:08:33: 9e:c8:03:27:d3:7e:62:e9:8c:c3:fb:7f:18:fb:5c:a9:a4:ed: 86:07:a8:b2:44:b7:cd:44:c8:3b:13:4c:16:61:4c:0f:90:57: 17:f4:4b:de:2f:f2:bd:34:dc:58:75:45:5f:a9:61:fe:0d:05: dd:8d:5d:36:bf:94:87:25:fc:6c:7c:e3:23:dc:36:0f:ef:aa: 6e:82:33:94:8a:b4:2f:76:a5:fc:5c:89:21:c9:c4:57:0f:3c: 94:6f:eb:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAapNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTI0MDk1MDQzWhcNMjUxMjMwMDk1MDQzWjAYMRYw FAYDVQQDEw02OTI0MmE3OS0wNzA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAypE44N3xs5FKnOlSS7ZgGk4O1X+IcO1kKF0s3ECsM/l3JYaZ9A0x4el8 71763gIoPYZ/5f1TJTdh2yswMMa3Vl66J2r2gDtHPpC9Z0vn6VhtvnKd0aEGGiSM 9pOeCche2Ke23SptJahUlXmmCfUv0E0vp4rtIBUCBVkwMtx0+54doYqeGQ8yCwX3 z/Knki3mwE5QYJc8MrROaJRu6qLHIszVqWumiWhDxMD8mPjLvm6kyQ6p7kL1PVn0 AndUvH9NdyztnXAL+kVCdBJdRfXuLAmcx1jddv0ge6HaoCwi0GEct/X8lBpX4jUI H9X+MkkfeYMwijNHDCzJSte49o4NOwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFESK Imx4bG/HnH7mpOSjb6gD9NVmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8wRTVDOTc1RUM5MUIxMUYwODQ3MTk3QjJEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsgBMA0GCSqGSIb3DQEB CwUAA4IBAQCbxz5EinyXqIplC39IgYCW5Cdi1q0Vv84fQPJajVvbVzmoIIJx+J/z hKYQvLd8uIW5vN+CwZ/eiG65VnYlOLKCqie2gpckdfZQvrFDZpQYaywa33HpL+33 45WluiO0MFUtKgbH6a71sh5zcVyKyGYGMdqVpZ2xr5JCdSBDRu6Hug7A2PTB3FXv KBpTOGTsNOtuFzXeAiWOTHuPpNvBLO/qCDOeyAMn035i6YzD+38Y+1yppO2GB6iy RLfNRMg7E0wWYUwPkFcX9EveL/K9NNxYdUVfqWH+DQXdjV02v5SHJfxsfOMj3DYP 76pugjOUirQvdqX8XIkhycRXDzyUb+s1 -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:11 2025 by rpki-client