This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A7FC4A6CF6611F0836402B7DAE4EC9C.roa File: 1A7FC4A6CF6611F0836402B7DAE4EC9C.roa (raw, json) Hash identifier: hQh+HQQyQQV1nduZE4G80X7ih9NlytprLwkuad3vV48= Subject key identifier: E4:33:45:C2:1F:F8:71:D9:25:22:E1:5A:11:44:54:BA:00:3F:2C:95 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AB7B Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A7FC4A6CF6611F0836402B7DAE4EC9C.roa Signing time: Tue 02 Dec 2025 10:03:09 +0000 ROA not before: Tue 02 Dec 2025 10:03:01 +0000 ROA not after: Thu 01 Jan 2026 10:03:01 +0000 asID: 49505 IP address blocks: 154.205.244.0/24 maxlen: 24 154.205.245.0/24 maxlen: 24 154.205.246.0/24 maxlen: 24 154.205.247.0/24 maxlen: 24 154.223.198.0/24 maxlen: 24 154.223.199.0/24 maxlen: 24 154.223.200.0/24 maxlen: 24 154.223.201.0/24 maxlen: 24 154.223.202.0/24 maxlen: 24 154.223.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109435 (0x1ab7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 10:03:01 2025 GMT Not After : Jan 1 10:03:01 2026 GMT Subject: CN=692eb95d-b903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:df:93:6d:af:72:0d:6f:61:6b:93:a2:67:b1: ae:ef:29:37:db:d4:08:22:9a:47:57:59:66:76:8b: fb:e1:35:4f:8c:08:42:33:30:e2:c8:ff:e7:40:f6: ef:76:52:20:85:5e:5f:c4:eb:3d:71:f4:2f:c2:06: 92:01:c5:7a:cd:62:c8:9f:7e:cc:10:d9:ed:dc:14: d1:1a:5b:fe:0a:60:2d:2a:e7:a6:8f:b0:72:d1:a0: f4:ad:c1:c2:ea:60:7d:c0:da:72:f0:24:7f:2a:16: 5a:56:35:cd:b2:d6:95:b0:bf:a5:62:58:5c:5a:2d: 5f:ff:fa:89:46:46:66:1b:a9:db:8f:a3:26:94:b8: 42:96:63:38:25:f2:12:55:c7:83:7b:b8:02:00:e8: 2b:53:52:e9:70:f3:d6:be:6b:c2:8f:ed:b2:f9:fc: 5c:69:6e:5c:ba:cd:2c:f8:2d:12:62:5a:d4:4e:9a: f8:3e:3c:e6:b6:cd:7f:b8:05:52:07:69:c8:46:69: 8c:46:13:8c:e3:59:2f:64:72:24:99:f9:78:4a:50: 57:29:82:53:1c:9f:1f:b1:e8:19:ae:50:3e:43:1d: 83:68:0e:fa:b7:ca:c3:2c:ec:69:69:d7:de:51:c4: 8e:9a:5a:5b:50:c0:ce:c3:ee:ba:39:fd:99:c2:4d: 86:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:33:45:C2:1F:F8:71:D9:25:22:E1:5A:11:44:54:BA:00:3F:2C:95 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1A7FC4A6CF6611F0836402B7DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.205.244.0/22 154.223.198.0-154.223.203.255 Signature Algorithm: sha256WithRSAEncryption b4:73:47:d7:5c:83:12:10:ab:97:29:6c:9c:a5:5f:79:65:9d: 54:c0:e6:15:ad:9b:f5:6b:15:eb:cf:90:49:02:ad:cb:63:3e: 9d:a7:7f:9a:8b:fb:5c:0f:d8:16:a3:a0:0f:a6:14:0c:80:2c: e7:26:25:aa:76:03:e4:86:6b:86:0a:bc:4c:5c:54:a7:cf:75: 4e:6e:e9:7a:4b:17:9e:89:55:b3:13:e6:07:4c:fa:86:f8:6e: 74:eb:8b:79:7e:9a:6a:11:ea:78:de:60:0c:34:be:25:22:b2: 52:53:4a:01:3e:af:0c:b4:7d:d7:51:b0:05:f4:f4:38:ea:f4: 9d:97:80:f0:c9:24:b9:e1:d6:90:1a:05:33:e2:86:67:42:14: 02:90:3d:bd:d5:d5:e0:63:e9:87:d0:5c:82:f7:8f:94:0d:db: 57:e6:c5:29:85:f4:d9:fd:96:0d:94:2b:6f:ca:c2:12:cd:44: e8:be:40:1b:be:23:ce:d2:f3:84:2c:49:4f:a6:2b:2c:98:42: 0f:73:f5:8f:78:5a:d5:13:e1:c0:7f:5c:fe:00:ae:91:20:77: a0:d0:38:71:86:b1:e7:1a:89:37:c4:9a:bc:d4:c6:20:58:26: ff:5a:32:69:18:60:e4:86:17:e0:85:10:77:9f:13:80:60:24: 9c:b7:46:11 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgIDAat7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMTAwMzAxWhcNMjYwMTAxMTAwMzAxWjAYMRYw FAYDVQQDEw02OTJlYjk1ZC1iOTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA1N+Tba9yDW9ha5OiZ7Gu7yk329QIIppHV1lmdov74TVPjAhCMzDiyP/n QPbvdlIghV5fxOs9cfQvwgaSAcV6zWLIn37MENnt3BTRGlv+CmAtKuemj7By0aD0 rcHC6mB9wNpy8CR/KhZaVjXNstaVsL+lYlhcWi1f//qJRkZmG6nbj6MmlLhClmM4 JfISVceDe7gCAOgrU1LpcPPWvmvCj+2y+fxcaW5cus0s+C0SYlrUTpr4Pjzmts1/ uAVSB2nIRmmMRhOM41kvZHIkmfl4SlBXKYJTHJ8fsegZrlA+Qx2DaA76t8rDLOxp adfeUcSOmlpbUMDOw+66Of2Zwk2GGQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFOQz RcIf+HHZJSLhWhFEVLoAPyyVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8xQTdGQzRBNkNGNjYxMUYwODM2NDAyQjdEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCms30MAwDBAGa38YDBAKa 38gwDQYJKoZIhvcNAQELBQADggEBALRzR9dcgxIQq5cpbJylX3llnVTA5hWtm/Vr FevPkEkCrctjPp2nf5qL+1wP2BajoA+mFAyALOcmJap2A+SGa4YKvExcVKfPdU5u 6XpLF56JVbMT5gdM+ob4bnTri3l+mmoR6njeYAw0viUislJTSgE+rwy0fddRsAX0 9Djq9J2XgPDJJLnh1pAaBTPihmdCFAKQPb3V1eBj6YfQXIL3j5QN21fmxSmF9Nn9 lg2UK2/KwhLNROi+QBu+I87S84QsSU+mKyyYQg9z9Y94WtUT4cB/XP4ArpEgd6DQ OHGGsecaiTfEmrzUxiBYJv9aMmkYYOSGF+CFEHefE4BgJJy3RhE= -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:06 2025 by rpki-client