This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BF636E2D01B11F08CF4BDADDAE4EC9C.roa File: 2BF636E2D01B11F08CF4BDADDAE4EC9C.roa (raw, json) Hash identifier: bJKDvFaxoQq2dS1my6mmzspQzYVn1n/4sTaYbxvrT5c= Subject key identifier: 81:12:5E:49:32:E3:24:E1:B7:7C:EE:84:77:7E:B9:B1:E8:7C:DC:F4 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC02 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BF636E2D01B11F08CF4BDADDAE4EC9C.roa Signing time: Wed 03 Dec 2025 07:39:20 +0000 ROA not before: Wed 03 Dec 2025 07:39:09 +0000 ROA not after: Thu 01 Jan 2026 07:39:09 +0000 asID: 44559 IP address blocks: 154.203.225.0/24 maxlen: 24 154.205.224.0/24 maxlen: 24 154.205.225.0/24 maxlen: 24 154.205.226.0/24 maxlen: 24 154.205.227.0/24 maxlen: 24 154.205.228.0/24 maxlen: 24 154.205.229.0/24 maxlen: 24 154.205.230.0/24 maxlen: 24 154.205.231.0/24 maxlen: 24 154.205.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109570 (0x1ac02) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 07:39:09 2025 GMT Not After : Jan 1 07:39:09 2026 GMT Subject: CN=692fe928-f7ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b2:7a:ce:1a:43:f3:37:e9:f5:af:1a:9c:21: 29:d0:d3:f5:0c:30:da:65:92:cc:02:30:37:45:0e: 71:38:24:59:45:6f:97:82:53:7f:2f:6b:43:b1:ea: ad:69:9f:f3:13:7b:90:8b:d9:93:a4:70:43:97:6d: 45:9f:f1:32:86:13:3c:3d:5f:9d:6e:a8:fa:e4:51: 70:4f:90:1b:6b:6c:31:d7:1e:b4:6e:80:e8:03:2d: 1e:92:a6:59:4c:7f:7e:f7:ed:c0:20:51:e8:cb:b9: 35:39:75:72:c3:ca:e3:fe:97:15:89:c9:e6:85:cd: f9:63:55:d8:85:98:7f:de:6e:42:f2:cc:16:21:77: cb:3c:2c:69:65:91:57:d3:83:7f:f9:e4:68:b7:74: 9a:52:e2:a8:7f:44:ad:21:63:94:46:f3:40:c7:c2: e7:16:11:aa:37:f4:ab:da:b7:de:c3:f7:f5:53:6c: 12:f7:c9:84:73:12:a7:5b:74:3f:0e:d4:2a:31:ba: 1f:c1:f0:4f:64:9a:ae:1c:c7:a3:03:da:7c:4b:38: 48:17:6e:63:7d:5a:d2:7a:1c:2b:58:96:6c:d1:17: f9:c3:b0:4c:bb:cc:d3:3e:58:d2:76:ad:01:f4:b3: 01:3c:3b:a5:0f:5c:39:1f:bb:b1:66:2a:85:d3:09: b6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:12:5E:49:32:E3:24:E1:B7:7C:EE:84:77:7E:B9:B1:E8:7C:DC:F4 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2BF636E2D01B11F08CF4BDADDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.203.225.0/24 154.205.224.0-154.205.232.255 Signature Algorithm: sha256WithRSAEncryption 38:49:f9:65:fb:09:fb:ec:ff:67:a2:6e:a2:a8:04:74:bb:18: e9:ac:c8:57:c0:c7:bd:0b:8e:dc:cb:9c:cc:ec:61:99:4c:0a: 6e:46:3f:e4:ed:60:9c:23:00:66:c9:b2:ee:12:2f:63:45:d3: 12:2a:43:38:9d:e8:48:01:ea:51:aa:52:69:5a:c0:d4:21:68: a3:20:14:69:a1:ff:22:46:94:70:f5:97:74:db:4b:4e:f9:88: b7:44:31:3e:44:18:7d:db:87:26:11:be:f7:2f:49:4a:20:b5: 09:d3:84:cb:22:3f:18:b5:30:eb:99:a0:22:43:cd:7c:1c:13: b2:66:25:70:e4:94:e0:6c:d3:43:78:d3:ae:6a:da:66:56:47: a3:e5:46:0b:5a:07:a8:5b:5e:e6:1a:28:bb:01:49:86:c7:0d: 56:6c:27:4c:05:50:b5:d6:97:c7:dc:0a:08:9d:7c:6a:b8:ad: bb:38:a3:6b:8c:a6:ad:d2:bd:32:95:2b:3e:06:7c:fe:95:2b: a2:0b:17:c2:64:2f:6f:9e:50:35:56:65:41:6a:75:f0:68:0b: cd:fa:db:b3:c1:1a:63:4a:72:a9:4b:5c:c1:0c:22:08:22:56: 53:63:76:a3:45:7a:2d:77:01:fa:0f:8d:b1:d4:0b:2e:39:26: fd:0a:20:5c -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgIDAawCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMDczOTA5WhcNMjYwMTAxMDczOTA5WjAYMRYw FAYDVQQDEw02OTJmZTkyOC1mN2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAubJ6zhpD8zfp9a8anCEp0NP1DDDaZZLMAjA3RQ5xOCRZRW+XglN/L2tD seqtaZ/zE3uQi9mTpHBDl21Fn/EyhhM8PV+dbqj65FFwT5Aba2wx1x60boDoAy0e kqZZTH9+9+3AIFHoy7k1OXVyw8rj/pcVicnmhc35Y1XYhZh/3m5C8swWIXfLPCxp ZZFX04N/+eRot3SaUuKof0StIWOURvNAx8LnFhGqN/Sr2rfew/f1U2wS98mEcxKn W3Q/DtQqMbofwfBPZJquHMejA9p8SzhIF25jfVrSehwrWJZs0Rf5w7BMu8zTPljS dq0B9LMBPDulD1w5H7uxZiqF0wm2fwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFIES Xkky4yTht3zuhHd+ubHofNz0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8yQkY2MzZFMkQwMUIxMUYwOENGNEJEQUREQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAmsvhMAwDBAWazeADBACa zegwDQYJKoZIhvcNAQELBQADggEBADhJ+WX7Cfvs/2eibqKoBHS7GOmsyFfAx70L jtzLnMzsYZlMCm5GP+TtYJwjAGbJsu4SL2NF0xIqQzid6EgB6lGqUmlawNQhaKMg FGmh/yJGlHD1l3TbS075iLdEMT5EGH3bhyYRvvcvSUogtQnThMsiPxi1MOuZoCJD zXwcE7JmJXDklOBs00N4065q2mZWR6PlRgtaB6hbXuYaKLsBSYbHDVZsJ0wFULXW l8fcCgidfGq4rbs4o2uMpq3SvTKVKz4GfP6VK6ILF8JkL2+eUDVWZUFqdfBoC836 27PBGmNKcqlLXMEMIggiVlNjdqNFei13AfoPjbHUCy45Jv0KIFw= -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:19 2025 by rpki-client