This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21AF0F04BFE211F085B0DF8EDAE4EC9C.roa File: 21AF0F04BFE211F085B0DF8EDAE4EC9C.roa (raw, json) Hash identifier: 1Ex4vrjhCCMwDP3RTi+t1mqIpG6hnVQxUb4Wfpzmnms= Subject key identifier: 5F:FF:C7:D0:48:64:1D:49:FF:F5:98:B6:A6:44:74:6F:87:6B:F9:F3 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A8B4 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21AF0F04BFE211F085B0DF8EDAE4EC9C.roa Signing time: Wed 12 Nov 2025 16:10:40 +0000 ROA not before: Wed 12 Nov 2025 16:10:34 +0000 ROA not after: Sun 04 Jan 2026 16:10:34 +0000 asID: 20326 IP address blocks: 154.85.123.0/24 maxlen: 24 154.94.33.0/24 maxlen: 24 154.94.38.0/24 maxlen: 24 154.94.41.0/24 maxlen: 24 154.94.46.0/24 maxlen: 24 154.94.50.0/24 maxlen: 24 154.94.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108724 (0x1a8b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 12 16:10:34 2025 GMT Not After : Jan 4 16:10:34 2026 GMT Subject: CN=6914b180-0ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:69:48:e8:50:42:1e:c9:23:88:85:11:3e:70: f1:27:a8:57:bf:3e:4e:90:4b:f1:f7:ee:67:ce:21: 84:70:ed:3f:93:4b:3e:4c:da:0d:01:48:3b:0f:dc: 0d:87:d8:bc:8e:1e:30:17:1f:14:f2:fc:7f:5d:83: 96:bb:95:aa:1b:da:11:35:13:c1:71:7d:87:96:95: 28:53:f9:37:2e:ff:3b:71:b8:5a:9c:d5:1e:fe:86: 83:7a:2c:60:2e:a9:b2:2e:65:cc:ca:65:4b:fa:af: f0:22:21:d2:4d:8f:83:0a:39:e4:e5:82:e9:c4:a9: f6:a2:c9:fa:f7:76:70:f7:b6:04:9d:a2:0d:fb:61: 53:de:d7:de:1d:4e:78:ee:e6:60:67:73:5b:eb:52: dc:66:ae:4c:4d:e9:a3:11:fc:48:12:b7:4b:ef:1f: 4e:2d:06:f5:84:48:13:0e:b3:ee:2f:ed:a2:32:e2: 59:29:be:81:26:d0:85:3f:5e:d6:2d:52:7f:88:23: c1:0c:57:a3:7c:e8:fa:aa:03:72:be:5b:80:38:9b: 53:ad:c5:f9:49:e2:19:c9:54:2e:7f:69:4d:49:62: 4b:3d:ed:c5:65:3d:4e:e5:4c:5e:be:d3:9b:9d:80: 68:9d:2d:a3:70:50:0c:ee:ec:d5:44:5f:7a:9b:e8: 9c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FF:C7:D0:48:64:1D:49:FF:F5:98:B6:A6:44:74:6F:87:6B:F9:F3 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21AF0F04BFE211F085B0DF8EDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.85.123.0/24 154.94.33.0/24 154.94.38.0/24 154.94.41.0/24 154.94.46.0/24 154.94.50.0/24 154.94.60.0/24 Signature Algorithm: sha256WithRSAEncryption 23:4a:37:cf:91:ac:da:45:16:6c:1e:17:77:b9:77:15:a7:cb: 9e:fb:61:21:87:d7:98:6f:5d:17:16:ef:c7:01:a3:e7:bd:71: a5:bc:49:09:1b:04:47:37:fd:23:ad:76:44:a9:39:5e:22:bd: ec:9d:32:ad:d3:11:40:f4:36:c6:b4:c2:6d:1f:d6:2e:5c:e0: 45:87:d2:6a:1d:54:13:61:f7:92:36:ca:ff:dd:0d:83:6b:a8: ab:c1:74:07:90:94:f3:33:bb:64:71:a2:d7:24:e1:ab:e2:61: ab:65:80:ce:16:0d:4d:3d:9b:1f:a7:79:9d:69:21:2b:23:05: ee:c9:6e:c1:1f:80:9b:84:ea:a4:7e:03:2d:b8:d7:43:9a:5e: ab:01:95:ff:38:db:bf:7a:30:01:ee:9a:55:0b:78:e3:c0:48: 82:4d:9f:da:aa:22:42:50:f9:10:ff:e5:47:25:cd:81:a2:a8: 0e:3d:51:46:c7:ac:b1:cd:f6:b0:df:be:f8:47:c0:9e:2a:80: 6f:89:f5:d0:b8:76:a8:bd:80:46:99:ed:78:7f:48:b9:50:36: 26:9b:7a:de:36:bd:13:86:9f:fc:c9:e9:52:4a:7d:8d:7b:64: ca:8c:dd:a1:01:c3:de:d1:78:21:12:2d:57:c8:fd:7b:72:31: 2f:02:35:13 -----BEGIN CERTIFICATE----- MIIFqDCCBJCgAwIBAgIDAai0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTEyMTYxMDM0WhcNMjYwMTA0MTYxMDM0WjAYMRYw FAYDVQQDEw02OTE0YjE4MC0wYWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEArGlI6FBCHskjiIURPnDxJ6hXvz5OkEvx9+5nziGEcO0/k0s+TNoNAUg7 D9wNh9i8jh4wFx8U8vx/XYOWu5WqG9oRNRPBcX2HlpUoU/k3Lv87cbhanNUe/oaD eixgLqmyLmXMymVL+q/wIiHSTY+DCjnk5YLpxKn2osn693Zw97YEnaIN+2FT3tfe HU547uZgZ3Nb61LcZq5MTemjEfxIErdL7x9OLQb1hEgTDrPuL+2iMuJZKb6BJtCF P17WLVJ/iCPBDFejfOj6qgNyvluAOJtTrcX5SeIZyVQuf2lNSWJLPe3FZT1O5Uxe vtObnYBonS2jcFAM7uzVRF96m+icyQIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFF// x9BIZB1J//WYtqZEdG+Ha/nzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8yMUFGMEYwNEJGRTIxMUYwODVCMERGOEVEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAmlV7AwQAml4hAwQAml4m AwQAml4pAwQAml4uAwQAml4yAwQAml48MA0GCSqGSIb3DQEBCwUAA4IBAQAjSjfP kazaRRZsHhd3uXcVp8ue+2Ehh9eYb10XFu/HAaPnvXGlvEkJGwRHN/0jrXZEqTle Ir3snTKt0xFA9DbGtMJtH9YuXOBFh9JqHVQTYfeSNsr/3Q2Da6irwXQHkJTzM7tk caLXJOGr4mGrZYDOFg1NPZsfp3mdaSErIwXuyW7BH4CbhOqkfgMtuNdDml6rAZX/ ONu/ejAB7ppVC3jjwEiCTZ/aqiJCUPkQ/+VHJc2BoqgOPVFGx6yxzfaw3774R8Ce KoBvifXQuHaovYBGme14f0i5UDYmm3reNr0Thp/8yelSSn2Ne2TKjN2hAcPe0Xgh Ei1XyP17cjEvAjUT -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:17 2025 by rpki-client