This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29DEAF74C46811F0A5E51BA6DAE4EC9C.roa File: 29DEAF74C46811F0A5E51BA6DAE4EC9C.roa (raw, json) Hash identifier: WSP5b7IuWCBC5sp15Kh6T0uwfl11ti21c9G6XEZTIcE= Subject key identifier: 42:97:0A:6D:F3:15:B4:5A:B5:28:A8:2A:73:FC:58:B3:80:86:1E:79 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A990 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29DEAF74C46811F0A5E51BA6DAE4EC9C.roa Signing time: Tue 18 Nov 2025 10:20:11 +0000 ROA not before: Tue 18 Nov 2025 10:20:06 +0000 ROA not after: Fri 19 Dec 2025 10:20:06 +0000 asID: 136501 IP address blocks: 154.92.192.0/24 maxlen: 24 154.92.193.0/24 maxlen: 24 154.92.194.0/24 maxlen: 24 154.92.195.0/24 maxlen: 24 154.92.196.0/24 maxlen: 24 154.92.197.0/24 maxlen: 24 154.92.198.0/24 maxlen: 24 154.92.199.0/24 maxlen: 24 154.92.206.0/24 maxlen: 24 154.92.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108944 (0x1a990) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 18 10:20:06 2025 GMT Not After : Dec 19 10:20:06 2025 GMT Subject: CN=691c485b-e66c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4d:e9:67:00:0e:7b:09:d3:3a:cd:93:17:74: 7c:a7:da:f7:94:85:a3:38:ca:ee:57:fb:24:f6:bb: fa:03:db:ab:f8:40:5f:d8:f6:fe:9c:14:ae:7e:4c: 2f:d0:e2:0f:13:63:2d:da:cd:a2:f2:ee:32:d4:a0: 1b:a4:15:23:17:c3:60:57:de:28:dd:eb:ec:b9:aa: 58:4c:93:79:c3:1d:25:1d:f9:61:f3:1f:53:13:75: 0e:61:ab:11:50:84:a7:4c:7a:57:65:93:e4:74:9e: 05:eb:da:de:03:43:69:cf:ce:44:4d:9a:04:b8:fc: bf:4f:e2:01:84:a9:17:b7:80:b5:60:78:88:cc:3f: 25:45:1e:5a:ef:b0:7b:c1:04:d5:10:a2:6f:9b:ee: 8a:8e:80:53:09:7e:c2:f9:17:b8:2e:dd:a5:dd:38: ac:ed:13:d9:aa:9d:3d:93:79:c6:dd:87:cf:0c:76: 0a:df:a5:0a:6d:54:70:5d:4a:3d:cb:d2:4f:78:89: 51:b3:ec:b2:c3:35:80:84:0e:d8:f5:21:75:07:61: 7a:8d:bb:33:7d:69:d5:14:93:54:c2:f8:19:c5:2a: 5e:36:aa:4b:8a:60:fc:d9:af:fe:56:75:46:d7:83: 00:e9:03:6e:54:23:df:a3:97:06:fa:bc:09:3f:45: c6:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:97:0A:6D:F3:15:B4:5A:B5:28:A8:2A:73:FC:58:B3:80:86:1E:79 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/29DEAF74C46811F0A5E51BA6DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.92.192.0/21 154.92.206.0/24 154.92.208.0/24 Signature Algorithm: sha256WithRSAEncryption 84:d9:f9:70:d0:62:69:c7:36:86:a1:ad:f6:96:20:00:7c:8b: 33:32:ce:7f:b3:c8:e4:23:31:49:62:cd:57:85:86:1e:26:a8: f0:80:95:f1:4a:51:ab:a8:86:df:d6:29:12:73:78:e0:c6:fc: 2b:db:7f:2f:17:d4:21:a5:fa:c8:c6:27:f0:64:52:07:39:e8: 6b:0d:a1:44:69:45:bb:0c:04:01:dd:4e:1c:1e:e2:51:96:54: 13:23:0f:ea:04:2b:9c:9b:a8:31:56:60:a9:69:ca:94:17:76: 8e:2d:e2:66:ee:cc:03:27:55:64:0f:7f:2e:eb:bd:ea:a8:df: 96:a8:34:a5:8f:41:65:30:ab:a3:8e:fd:2b:95:0a:4d:d8:62: 0e:0c:9e:4e:94:ac:d2:71:12:1c:09:3a:f9:06:52:6f:5a:46: 3e:e4:02:28:4c:b2:4a:40:78:a8:da:14:95:83:1a:7e:3f:3e: b3:c0:16:75:fe:a1:75:d1:4d:99:b6:c7:3b:54:a3:c4:35:3d: bd:25:fe:ea:b8:85:8b:04:7a:e9:ab:15:82:f9:1d:4e:11:a3: 49:99:8d:67:b9:32:a9:49:72:87:19:b4:b5:02:ae:69:8d:dc: c4:1d:43:e1:cd:d8:ce:3c:58:45:c4:71:9a:fb:3a:6a:67:02: 7e:f5:88:d9 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIDAamQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTE4MTAyMDA2WhcNMjUxMjE5MTAyMDA2WjAYMRYw FAYDVQQDEw02OTFjNDg1Yi1lNjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAy03pZwAOewnTOs2TF3R8p9r3lIWjOMruV/sk9rv6A9ur+EBf2Pb+nBSu fkwv0OIPE2Mt2s2i8u4y1KAbpBUjF8NgV94o3evsuapYTJN5wx0lHflh8x9TE3UO YasRUISnTHpXZZPkdJ4F69reA0Npz85ETZoEuPy/T+IBhKkXt4C1YHiIzD8lRR5a 77B7wQTVEKJvm+6KjoBTCX7C+Re4Lt2l3Tis7RPZqp09k3nG3YfPDHYK36UKbVRw XUo9y9JPeIlRs+yywzWAhA7Y9SF1B2F6jbszfWnVFJNUwvgZxSpeNqpLimD82a/+ VnVG14MA6QNuVCPfo5cG+rwJP0XGNwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFEKX Cm3zFbRatSioKnP8WLOAhh55MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8yOURFQUY3NEM0NjgxMUYwQTVFNTFCQTZEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDmlzAAwQAmlzOAwQAmlzQ MA0GCSqGSIb3DQEBCwUAA4IBAQCE2flw0GJpxzaGoa32liAAfIszMs5/s8jkIzFJ Ys1XhYYeJqjwgJXxSlGrqIbf1ikSc3jgxvwr238vF9QhpfrIxifwZFIHOehrDaFE aUW7DAQB3U4cHuJRllQTIw/qBCucm6gxVmCpacqUF3aOLeJm7swDJ1VkD38u673q qN+WqDSlj0FlMKujjv0rlQpN2GIODJ5OlKzScRIcCTr5BlJvWkY+5AIoTLJKQHio 2hSVgxp+Pz6zwBZ1/qF10U2Ztsc7VKPENT29Jf7quIWLBHrpqxWC+R1OEaNJmY1n uTKpSXKHGbS1Aq5pjdzEHUPhzdjOPFhFxHGa+zpqZwJ+9YjZ -----END CERTIFICATE-----Generated at Wed Dec 3 11:06:31 2025 by rpki-client