This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25440F0AE0CD11F0A6C838DDDAE4EC9C.roa File: 25440F0AE0CD11F0A6C838DDDAE4EC9C.roa (raw, json) Hash identifier: WOZ7kOC5xPJ70OktbyxdQvOZq9IEdV5/AZWPO8JU4O0= Subject key identifier: 1A:21:9F:E2:C5:5E:98:74:F7:96:10:FF:8E:28:C1:F7:6F:41:13:A8 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B0D3 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25440F0AE0CD11F0A6C838DDDAE4EC9C.roa Signing time: Wed 24 Dec 2025 13:33:35 +0000 ROA not before: Wed 24 Dec 2025 13:33:30 +0000 ROA not after: Sat 31 Jan 2026 13:33:30 +0000 asID: 62240 IP address blocks: 154.194.4.0/24 maxlen: 24 154.194.81.0/24 maxlen: 24 154.194.83.0/24 maxlen: 24 154.194.84.0/24 maxlen: 24 154.194.85.0/24 maxlen: 24 154.194.118.0/24 maxlen: 24 154.195.121.0/24 maxlen: 24 154.195.122.0/24 maxlen: 24 154.195.123.0/24 maxlen: 24 154.195.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 29 Dec 2025 00:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110803 (0x1b0d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 24 13:33:30 2025 GMT Not After : Jan 31 13:33:30 2026 GMT Subject: CN=694bebaf-fd03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6b:e8:2d:df:e9:e0:5a:6e:9d:47:a7:80:43: 5f:63:9d:15:89:0c:5c:dd:e9:96:c0:6f:82:89:fb: d0:ea:31:03:c5:53:dd:eb:33:7d:b9:e5:52:1a:a3: fa:a3:06:11:49:31:5c:12:08:40:a6:f7:d1:f2:48: bc:d1:1a:3d:a3:db:41:48:66:86:27:7a:74:27:b8: 19:ee:14:cf:c6:34:b0:4d:70:8d:e0:12:ba:68:66: c0:5c:92:c9:eb:0b:20:24:9a:c3:b3:70:dc:90:41: e3:67:81:e4:d2:c5:67:8f:23:46:a6:c1:f9:51:cf: 11:39:da:35:64:73:47:a2:ce:27:22:6a:09:1f:4b: 7c:1e:4a:ba:1e:98:09:c7:b3:e6:f5:78:94:4c:37: 99:f0:5c:68:04:4a:be:77:00:80:6f:e2:d5:48:1a: c6:bf:e3:62:51:96:10:e1:78:60:35:ad:94:18:88: 7e:d8:06:7c:f8:17:fe:51:05:d1:2a:d6:7f:73:db: 78:45:9c:57:99:99:2e:92:7f:76:c9:ba:8c:2e:ad: f7:d6:62:ec:97:d3:ed:11:10:1d:33:6d:55:9e:ee: d9:9b:c3:cf:48:e5:9d:40:e9:c5:c0:6f:4f:6f:75: 1a:91:8f:08:d5:b3:2a:04:ba:95:c7:82:f6:de:95: aa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:21:9F:E2:C5:5E:98:74:F7:96:10:FF:8E:28:C1:F7:6F:41:13:A8 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/25440F0AE0CD11F0A6C838DDDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.194.4.0/24 154.194.81.0/24 154.194.83.0-154.194.85.255 154.194.118.0/24 154.195.121.0-154.195.123.255 154.195.125.0/24 Signature Algorithm: sha256WithRSAEncryption 61:0a:49:d9:18:0e:7b:cc:f1:3e:4f:44:aa:94:61:95:5c:3d: 6a:b0:30:44:69:a3:ed:9b:9e:68:02:62:a9:0c:dd:e0:a9:32: 29:42:f8:95:2d:f5:58:eb:28:8f:31:92:4b:ca:48:1f:40:f6: d7:0b:99:29:af:73:92:98:d6:7a:7b:f9:9f:cd:8c:b7:66:ed: 2a:d5:63:9e:ef:4a:f3:fb:c3:76:27:8c:ff:42:85:d7:82:1a: 32:ca:98:e7:03:c4:d8:60:9a:03:61:f4:98:89:b6:d9:56:ea: 30:e7:4d:93:49:1e:c0:87:97:be:90:69:02:25:5a:2a:7d:f4: cc:a7:ee:da:94:82:d1:4a:40:b6:4c:a2:ba:45:a0:a0:b5:d5: c6:6e:b3:d2:43:72:57:a4:eb:44:25:68:ad:ce:23:4e:4c:94: b8:00:7a:9b:fc:4a:2b:9f:1f:4d:93:cd:9c:1e:70:6e:02:79: 42:3d:8d:bb:c8:74:1e:0d:f3:b9:ce:c6:7c:a4:b2:6c:07:99: 32:f8:21:64:13:b5:d7:4b:2f:28:de:cd:80:a4:7b:da:45:fb: e2:08:ff:f6:19:cc:ac:78:30:b0:7a:9e:65:ba:c1:d2:cd:45: 53:b3:13:b5:3e:98:d5:cc:fa:6d:be:7b:0c:e1:64:03:35:8d: a3:d3:9c:da -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIDAbDTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjI0MTMzMzMwWhcNMjYwMTMxMTMzMzMwWjAYMRYw FAYDVQQDEw02OTRiZWJhZi1mZDAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA1WvoLd/p4FpunUengENfY50ViQxc3emWwG+CifvQ6jEDxVPd6zN9ueVS GqP6owYRSTFcEghApvfR8ki80Ro9o9tBSGaGJ3p0J7gZ7hTPxjSwTXCN4BK6aGbA XJLJ6wsgJJrDs3DckEHjZ4Hk0sVnjyNGpsH5Uc8ROdo1ZHNHos4nImoJH0t8Hkq6 HpgJx7Pm9XiUTDeZ8FxoBEq+dwCAb+LVSBrGv+NiUZYQ4XhgNa2UGIh+2AZ8+Bf+ UQXRKtZ/c9t4RZxXmZkukn92ybqMLq331mLsl9PtERAdM21Vnu7Zm8PPSOWdQOnF wG9Pb3UakY8I1bMqBLqVx4L23pWq5QIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFBoh n+LFXph095YQ/44owfdvQROoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8yNTQ0MEYwQUUwQ0QxMUYwQTZDODM4REREQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQAmsIEAwQAmsJRMAwDBACa wlMDBAGawlQDBACawnYwDAMEAJrDeQMEAprDeAMEAJrDfTANBgkqhkiG9w0BAQsF AAOCAQEAYQpJ2RgOe8zxPk9EqpRhlVw9arAwRGmj7ZueaAJiqQzd4KkyKUL4lS31 WOsojzGSS8pIH0D21wuZKa9zkpjWenv5n82Mt2btKtVjnu9K8/vDdieM/0KF14Ia MsqY5wPE2GCaA2H0mIm22VbqMOdNk0kewIeXvpBpAiVaKn30zKfu2pSC0UpAtkyi ukWgoLXVxm6z0kNyV6TrRCVorc4jTkyUuAB6m/xKK58fTZPNnB5wbgJ5Qj2Nu8h0 Hg3zuc7GfKSybAeZMvghZBO110svKN7NgKR72kX74gj/9hnMrHgwsHqeZbrB0s1F U7MTtT6Y1cz6bb57DOFkAzWNo9Oc2g== -----END CERTIFICATE-----Generated at Sat Dec 27 16:47:00 2025 by rpki-client