This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2047A20EC92711F0ADC79C7DDAE4EC9C.roa File: 2047A20EC92711F0ADC79C7DDAE4EC9C.roa (raw, json) Hash identifier: J+9RvMhRjX1FQgXcx1WwE07iwB0JW5BewsNhAEwnhxg= Subject key identifier: FA:A0:08:93:31:C8:C4:F5:25:3F:FE:79:19:1D:30:BD:C8:82:F8:7F Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AA5B Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2047A20EC92711F0ADC79C7DDAE4EC9C.roa Signing time: Mon 24 Nov 2025 11:17:13 +0000 ROA not before: Mon 24 Nov 2025 11:17:05 +0000 ROA not after: Tue 30 Dec 2025 11:17:05 +0000 asID: 9304 IP address blocks: 154.82.134.0/24 maxlen: 24 154.82.148.0/24 maxlen: 24 154.82.153.0/24 maxlen: 24 154.82.158.0/24 maxlen: 24 154.82.196.0/24 maxlen: 24 154.90.134.0/24 maxlen: 24 154.90.136.0/24 maxlen: 24 154.90.137.0/24 maxlen: 24 154.90.140.0/24 maxlen: 24 154.92.216.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109147 (0x1aa5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 24 11:17:05 2025 GMT Not After : Dec 30 11:17:05 2025 GMT Subject: CN=69243eb9-436a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e0:bc:e5:95:74:d5:d0:42:80:22:c2:14:f6: 9b:39:d1:37:4a:d1:a0:6d:92:47:a1:aa:69:25:88: bf:3b:94:05:92:7d:ea:26:47:d5:8f:84:d5:b6:79: 9f:0b:08:30:91:70:65:42:62:e9:6a:dc:e6:f5:e6: 15:e0:85:26:cb:54:c4:b7:e1:13:cf:83:f4:df:c2: 23:6d:17:53:b7:28:19:80:79:35:06:f7:ca:f3:7c: 6a:3e:0a:ef:5d:1b:af:b6:a5:72:79:9d:87:4b:d9: b6:c3:5d:fe:ad:a1:cd:75:f6:81:80:5e:c8:de:43: ec:cf:4f:c6:7e:84:34:27:d0:e2:ee:6c:9d:4e:f9: a8:99:c3:63:2e:32:ba:a5:d1:0a:59:43:75:d4:83: 20:2e:3e:fc:8e:1e:b8:31:da:8f:92:10:dd:79:dc: 36:f6:e6:87:b9:68:ea:31:84:bb:2c:87:e9:3a:38: 9c:9c:3c:98:e4:64:47:82:2c:ca:3b:2a:30:28:81: af:4d:48:0f:5c:49:02:d4:c2:a3:8f:a2:73:cc:9a: 94:3a:3f:b4:e0:59:48:93:37:a1:8b:0d:52:09:7d: 0e:cd:78:d3:10:2a:74:94:ec:f3:4b:63:56:63:b7: 77:ab:aa:18:9b:8b:a4:42:6f:f0:6d:99:32:0c:7d: a7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A0:08:93:31:C8:C4:F5:25:3F:FE:79:19:1D:30:BD:C8:82:F8:7F X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2047A20EC92711F0ADC79C7DDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.82.134.0/24 154.82.148.0/24 154.82.153.0/24 154.82.158.0/24 154.82.196.0/24 154.90.134.0/24 154.90.136.0/23 154.90.140.0/24 154.92.216.0/21 Signature Algorithm: sha256WithRSAEncryption 1d:09:0d:57:36:3f:37:f3:b0:60:e6:7b:04:57:41:3a:eb:0d: fe:57:08:e4:53:12:56:ba:95:c3:81:75:78:6c:49:59:7a:fb: fb:6b:73:8e:c4:16:cc:da:b3:44:ca:34:5f:f9:70:13:cf:b1: b0:8e:a2:c7:ba:6b:c4:79:ed:28:6f:e6:14:ac:48:6b:cf:b4: 3b:a3:e6:20:c8:cf:76:3b:eb:18:45:46:2c:38:f8:63:0b:04: 2c:22:c2:2a:ae:0e:d3:e4:dc:ff:59:50:cc:9b:8e:8b:27:50: 35:5a:39:d0:47:88:fe:0f:8c:10:90:05:f0:f9:30:cd:f8:4b: ba:41:9d:b2:f4:98:48:02:d9:fa:00:6e:4e:04:63:e0:8e:d8: 86:1d:94:c1:e1:7c:50:5c:84:24:ba:f0:30:33:d6:7c:64:4d: 70:51:bf:0d:a7:fa:d5:36:b1:a4:b6:26:7b:b4:ec:23:0e:d6: 28:ea:e5:1b:d3:69:c9:4e:23:8c:a8:1f:27:e7:7f:25:88:0a: c4:03:05:12:61:76:d5:12:be:c9:0a:31:69:df:13:82:83:31: b5:4f:64:e9:34:7e:b1:77:25:ab:dd:c9:14:bf:99:32:b3:7e: 35:2d:f6:bc:b9:5c:2c:eb:47:6a:09:82:0f:7d:76:bc:93:eb: 30:01:8d:b1 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIDAapbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTI0MTExNzA1WhcNMjUxMjMwMTExNzA1WjAYMRYw FAYDVQQDEw02OTI0M2ViOS00MzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAv+C85ZV01dBCgCLCFPabOdE3StGgbZJHoappJYi/O5QFkn3qJkfVj4TV tnmfCwgwkXBlQmLpatzm9eYV4IUmy1TEt+ETz4P038IjbRdTtygZgHk1BvfK83xq PgrvXRuvtqVyeZ2HS9m2w13+raHNdfaBgF7I3kPsz0/GfoQ0J9Di7mydTvmomcNj LjK6pdEKWUN11IMgLj78jh64MdqPkhDdedw29uaHuWjqMYS7LIfpOjicnDyY5GRH gizKOyowKIGvTUgPXEkC1MKjj6JzzJqUOj+04FlIkzehiw1SCX0OzXjTECp0lOzz S2NWY7d3q6oYm4ukQm/wbZkyDH2nXQIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFPqg CJMxyMT1JT/+eRkdML3Igvh/MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8yMDQ3QTIwRUM5MjcxMUYwQURDNzlDN0REQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAmlKGAwQAmlKUAwQAmlKZ AwQAmlKeAwQAmlLEAwQAmlqGAwQBmlqIAwQAmlqMAwQDmlzYMA0GCSqGSIb3DQEB CwUAA4IBAQAdCQ1XNj8387Bg5nsEV0E66w3+VwjkUxJWupXDgXV4bElZevv7a3OO xBbM2rNEyjRf+XATz7GwjqLHumvEee0ob+YUrEhrz7Q7o+YgyM92O+sYRUYsOPhj CwQsIsIqrg7T5Nz/WVDMm46LJ1A1WjnQR4j+D4wQkAXw+TDN+Eu6QZ2y9JhIAtn6 AG5OBGPgjtiGHZTB4XxQXIQkuvAwM9Z8ZE1wUb8Np/rVNrGktiZ7tOwjDtYo6uUb 02nJTiOMqB8n538liArEAwUSYXbVEr7JCjFp3xOCgzG1T2TpNH6xdyWr3ckUv5ky s341Lfa8uVws60dqCYIPfXa8k+swAY2x -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:16 2025 by rpki-client