This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A672A78BBC311F096769F8FDAE4EC9C.roa File: 2A672A78BBC311F096769F8FDAE4EC9C.roa (raw, json) Hash identifier: wKxDizh3vpU7RtGzsnBRfwXgo6ty7BFCmtcXKipVSE0= Subject key identifier: 15:18:8B:AB:71:95:B5:6F:8E:71:B6:7A:56:D8:FD:3D:90:18:EA:41 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A7E1 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A672A78BBC311F096769F8FDAE4EC9C.roa Signing time: Fri 07 Nov 2025 10:18:56 +0000 ROA not before: Fri 07 Nov 2025 10:18:51 +0000 ROA not after: Sat 27 Dec 2025 10:18:51 +0000 asID: 401701 IP address blocks: 154.219.96.0/19 maxlen: 24 154.222.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108513 (0x1a7e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 7 10:18:51 2025 GMT Not After : Dec 27 10:18:51 2025 GMT Subject: CN=690dc78f-ebce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b4:7c:9c:60:61:70:b6:a1:c5:38:fc:84:c5: 81:5d:48:80:bd:a3:ec:cf:7c:16:49:93:4b:ee:dd: 23:46:75:8b:13:7f:2f:58:8f:68:2a:b0:f5:7a:1a: 05:98:45:0c:f4:6b:5d:48:d5:f2:23:2d:41:34:63: 26:15:bd:dc:3f:7e:d0:60:ca:a8:42:42:79:6a:41: 31:f7:29:27:94:da:66:fa:63:66:3e:1f:14:97:37: d5:2c:30:ee:35:c0:c4:b6:ec:52:f4:64:0d:81:8e: 06:b1:d6:6a:aa:01:24:e4:3e:f1:c6:18:d1:b5:ca: 9c:f2:3c:b5:82:77:71:54:59:93:c0:1e:7f:ed:b0: 6f:1d:5e:08:75:71:96:6c:de:74:86:5e:d3:13:a5: e6:93:08:1f:02:35:09:8a:a3:f2:b3:00:69:a4:53: 2e:30:76:b1:00:da:c6:38:42:98:98:17:1f:ef:74: fd:31:1e:98:71:fe:9c:c1:60:47:3e:63:68:dd:7b: eb:b1:9b:eb:5f:2e:8d:5c:5c:74:c1:a3:5b:6f:9a: a5:57:c7:ff:e1:6e:11:ad:22:9e:b0:af:a5:9e:76: 87:66:d7:3a:3d:b7:df:f8:cf:40:07:85:33:04:22: 48:96:1d:11:48:85:97:e4:19:2a:7f:61:92:82:ba: aa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:18:8B:AB:71:95:B5:6F:8E:71:B6:7A:56:D8:FD:3D:90:18:EA:41 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A672A78BBC311F096769F8FDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.219.96.0/19 154.222.16.0/20 Signature Algorithm: sha256WithRSAEncryption 99:52:d9:d5:60:e2:c3:7d:24:40:2f:bf:fe:41:f6:df:ad:90: 33:2e:9f:ea:dc:e8:2b:64:de:94:c8:cc:e3:41:06:d5:45:f2: 19:8d:c9:a1:ba:d8:88:5c:37:54:7c:4c:98:2c:e4:5d:c7:64: 02:cd:78:b8:e3:6a:a0:e3:79:2c:d4:32:66:cf:4e:87:08:91: ca:dd:6b:6b:89:af:f0:14:ad:59:6a:7a:ef:62:27:7e:1c:27: e3:e9:11:ea:04:70:8a:77:b6:61:a9:6c:cb:80:79:35:a2:4d: 50:c1:b2:f1:e9:d9:54:64:fe:98:50:a1:7a:f7:76:50:a0:9f: 1e:71:12:77:48:6e:7c:f7:ad:a1:ea:a0:26:46:34:e2:b1:15: d7:81:40:a2:48:7f:cc:cd:ed:7d:6b:72:e4:56:24:8b:90:32: d1:6c:d7:ca:44:40:1b:ac:af:58:e3:09:9e:44:2a:10:b9:db: 70:ac:d3:99:aa:1b:8f:86:30:0b:6c:df:01:37:4e:08:e4:89: 37:27:82:03:6c:ea:97:c9:72:6d:c8:e0:b6:b5:0f:a6:0f:3a: 2f:78:8e:ec:a3:80:52:b0:50:ef:5a:e8:10:8e:85:2d:31:f7: 6e:6f:6c:28:69:3d:eb:ef:c7:db:1b:b5:87:84:4b:4f:86:ae: 67:91:97:97 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAafhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTA3MTAxODUxWhcNMjUxMjI3MTAxODUxWjAYMRYw FAYDVQQDEw02OTBkYzc4Zi1lYmNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAr7R8nGBhcLahxTj8hMWBXUiAvaPsz3wWSZNL7t0jRnWLE38vWI9oKrD1 ehoFmEUM9GtdSNXyIy1BNGMmFb3cP37QYMqoQkJ5akEx9yknlNpm+mNmPh8UlzfV LDDuNcDEtuxS9GQNgY4GsdZqqgEk5D7xxhjRtcqc8jy1gndxVFmTwB5/7bBvHV4I dXGWbN50hl7TE6XmkwgfAjUJiqPyswBppFMuMHaxANrGOEKYmBcf73T9MR6Ycf6c wWBHPmNo3XvrsZvrXy6NXFx0waNbb5qlV8f/4W4RrSKesK+lnnaHZtc6Pbff+M9A B4UzBCJIlh0RSIWX5Bkqf2GSgrqqZwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFBUY i6txlbVvjnG2elbY/T2QGOpBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8yQTY3MkE3OEJCQzMxMUYwOTY3NjlGOEZEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFmttgAwQEmt4QMA0GCSqG SIb3DQEBCwUAA4IBAQCZUtnVYOLDfSRAL7/+QfbfrZAzLp/q3OgrZN6UyMzjQQbV RfIZjcmhutiIXDdUfEyYLORdx2QCzXi442qg43ks1DJmz06HCJHK3Wtria/wFK1Z anrvYid+HCfj6RHqBHCKd7ZhqWzLgHk1ok1QwbLx6dlUZP6YUKF693ZQoJ8ecRJ3 SG58962h6qAmRjTisRXXgUCiSH/Mze19a3LkViSLkDLRbNfKREAbrK9Y4wmeRCoQ udtwrNOZqhuPhjALbN8BN04I5Ik3J4IDbOqXyXJtyOC2tQ+mDzoveI7so4BSsFDv WugQjoUtMfdub2woaT3r78fbG7WHhEtPhq5nkZeX -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:08 2025 by rpki-client