This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17597326CF5211F0AF5C74BCDAE4EC9C.roa File: 17597326CF5211F0AF5C74BCDAE4EC9C.roa (raw, json) Hash identifier: Is89eXXQULmfSFXuc1FCRbeyFO9MsWeGL6/SUfCyiD8= Subject key identifier: 17:ED:F1:5C:81:78:37:79:6F:DE:E8:CA:B9:80:03:11:05:BD:A0:00 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AB6B Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17597326CF5211F0AF5C74BCDAE4EC9C.roa Signing time: Tue 02 Dec 2025 07:39:54 +0000 ROA not before: Tue 02 Dec 2025 07:39:46 +0000 ROA not after: Wed 31 Dec 2025 07:39:46 +0000 asID: 62240 IP address blocks: 154.194.33.0/24 maxlen: 24 154.194.119.0/24 maxlen: 24 154.194.120.0/24 maxlen: 24 154.194.121.0/24 maxlen: 24 154.194.122.0/24 maxlen: 24 154.194.123.0/24 maxlen: 24 154.194.124.0/24 maxlen: 24 154.194.125.0/24 maxlen: 24 154.194.126.0/24 maxlen: 24 154.194.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109419 (0x1ab6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 07:39:46 2025 GMT Not After : Dec 31 07:39:46 2025 GMT Subject: CN=692e97ca-1435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1f:b4:ed:57:c1:14:f7:7f:bb:93:85:6e:1f: dd:22:12:43:2d:8c:7a:f7:8b:c8:fb:10:ac:c3:cc: f5:5f:1b:62:57:51:8a:fd:6f:44:26:b9:37:5b:b4: 92:f3:9d:21:05:65:6a:ef:46:26:a6:d0:4e:23:04: 48:c0:a1:fa:08:6c:d7:1a:de:a5:6f:34:ba:5c:d7: 58:22:fd:5a:26:aa:58:9e:66:8a:52:3b:ae:87:7b: e2:71:69:fc:1a:0d:fc:68:d6:4c:ab:35:1f:80:0c: 81:db:f1:88:e1:6f:9a:98:c7:41:36:0d:58:0d:01: 17:a5:70:23:0e:85:e3:c4:7f:96:b4:bb:f5:a5:27: 41:4f:d1:01:11:15:5a:17:ee:fc:a3:a9:f0:b5:1d: 63:85:61:79:71:e8:d0:fb:88:1e:fb:ad:4b:1b:1e: c1:17:b1:61:ab:23:73:51:08:25:96:82:da:09:d1: d5:3d:60:88:40:8c:53:18:dd:2d:76:27:ff:63:1b: d9:9c:e7:78:27:64:9a:2d:2f:64:b9:ed:d6:61:4e: fd:6b:fc:68:41:1c:e1:b7:b9:6e:c2:6a:3e:cc:ff: ef:56:33:20:3e:18:e5:5d:8e:23:67:97:71:2f:3e: 2f:74:72:c6:5a:56:3e:56:28:14:7a:4e:4b:3b:30: 5e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:ED:F1:5C:81:78:37:79:6F:DE:E8:CA:B9:80:03:11:05:BD:A0:00 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/17597326CF5211F0AF5C74BCDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.194.33.0/24 154.194.119.0-154.194.127.255 Signature Algorithm: sha256WithRSAEncryption bb:90:d6:c8:2e:c3:9f:e9:84:8e:7e:fa:8f:6b:7b:e1:96:da: 05:0f:03:98:1d:ee:d8:05:d3:21:ee:df:75:cd:0f:04:09:c0: 73:17:16:6d:04:4c:a0:bb:9b:07:09:28:95:b3:88:63:8c:cf: 86:b1:60:6b:bd:60:81:b7:61:fc:4f:b3:56:c1:63:e7:d8:a8: 4b:62:c7:03:38:bc:d3:63:45:28:ed:88:d2:21:29:c5:f3:0d: ee:89:03:3d:1a:cc:1d:f1:6f:fa:f9:5e:49:7d:be:14:75:a9: bc:ca:d0:2b:4d:24:87:7a:14:3a:4f:c7:63:df:44:36:1e:f0: 42:80:a1:e2:cb:fb:ea:bb:90:05:95:7e:22:58:78:e5:8d:72: a7:bd:b1:8a:a2:25:ac:4d:8a:4a:94:c5:9c:31:0e:f8:96:9e: 1b:d6:f1:29:9e:f5:b1:ac:c0:b9:56:f3:13:df:8d:36:49:76: 03:e8:8a:64:51:0b:2b:64:6e:b8:35:21:36:24:1f:f5:0d:ec: ec:e1:0e:43:15:e9:01:d0:ef:67:a0:3a:85:cc:49:8a:e7:c5: 40:8f:9f:d5:fb:58:fc:a1:4f:f6:7e:07:25:9b:6e:60:2d:dd: 7a:7a:f9:71:81:12:65:be:1b:26:84:10:40:fb:bc:67:b2:7c: 59:da:a9:05 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgIDAatrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMDczOTQ2WhcNMjUxMjMxMDczOTQ2WjAYMRYw FAYDVQQDEw02OTJlOTdjYS0xNDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAuR+07VfBFPd/u5OFbh/dIhJDLYx694vI+xCsw8z1XxtiV1GK/W9EJrk3 W7SS850hBWVq70YmptBOIwRIwKH6CGzXGt6lbzS6XNdYIv1aJqpYnmaKUjuuh3vi cWn8Gg38aNZMqzUfgAyB2/GI4W+amMdBNg1YDQEXpXAjDoXjxH+WtLv1pSdBT9EB ERVaF+78o6nwtR1jhWF5cejQ+4ge+61LGx7BF7FhqyNzUQglloLaCdHVPWCIQIxT GN0tdif/YxvZnOd4J2SaLS9kue3WYU79a/xoQRzht7luwmo+zP/vVjMgPhjlXY4j Z5dxLz4vdHLGWlY+VigUek5LOzBe3QIDAQABo4ICszCCAq8wHQYDVR0OBBYEFBft 8VyBeDd5b97oyrmAAxEFvaAAMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8xNzU5NzMyNkNGNTIxMUYwQUY1Qzc0QkNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAmsIhMAwDBACawncDBAea wgAwDQYJKoZIhvcNAQELBQADggEBALuQ1sguw5/phI5++o9re+GW2gUPA5gd7tgF 0yHu33XNDwQJwHMXFm0ETKC7mwcJKJWziGOMz4axYGu9YIG3YfxPs1bBY+fYqEti xwM4vNNjRSjtiNIhKcXzDe6JAz0azB3xb/r5Xkl9vhR1qbzK0CtNJId6FDpPx2Pf RDYe8EKAoeLL++q7kAWVfiJYeOWNcqe9sYqiJaxNikqUxZwxDviWnhvW8Sme9bGs wLlW8xPfjTZJdgPoimRRCytkbrg1ITYkH/UN7OzhDkMV6QHQ72egOoXMSYrnxUCP n9X7WPyhT/Z+ByWbbmAt3Xp6+XGBEmW+GyaEEED7vGeyfFnaqQU= -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:01 2025 by rpki-client