This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DD6D74EC3CA11F084DEAAB7DAE4EC9C.roa File: 2DD6D74EC3CA11F084DEAAB7DAE4EC9C.roa (raw, json) Hash identifier: VqVFEhU2E2GxemJJrmx+eHvrgk2dCwI7uh64+H7SZj0= Subject key identifier: 79:C7:7E:6F:41:93:46:76:06:F5:75:1E:9E:B7:C0:C8:5B:51:22:70 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A977 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DD6D74EC3CA11F084DEAAB7DAE4EC9C.roa Signing time: Mon 17 Nov 2025 15:29:17 +0000 ROA not before: Mon 17 Nov 2025 15:29:12 +0000 ROA not after: Thu 25 Dec 2025 15:29:12 +0000 asID: 401615 IP address blocks: 154.85.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108919 (0x1a977) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 17 15:29:12 2025 GMT Not After : Dec 25 15:29:12 2025 GMT Subject: CN=691b3f4d-8321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:af:f9:6d:cd:c6:00:df:08:81:c8:4e:65:48: 35:f8:e1:98:6a:9d:40:3a:ee:23:bc:1c:8c:af:cc: 18:f7:1a:e9:4f:55:57:17:cb:fa:05:05:8e:a4:fb: 57:ea:42:71:38:9f:fa:8f:c7:ef:d5:db:be:ef:0a: 33:82:96:09:69:2b:75:79:92:b2:38:09:5c:d9:79: cf:d8:dd:62:4d:cc:66:0a:3d:d7:59:e4:d0:af:61: 73:ee:12:f9:ae:64:4d:4a:f9:05:3a:68:b7:ba:6b: 31:9b:73:c1:33:e5:28:53:33:20:12:d8:9a:08:01: 19:00:08:8f:1f:59:20:fb:d4:be:83:60:c9:2d:96: 50:57:07:f4:01:6d:69:91:5a:32:0d:1d:aa:a6:af: b7:05:c7:ec:60:11:8a:a6:37:29:6e:f6:96:ce:08: 3f:5e:10:b8:2c:6a:b2:ed:21:83:6c:71:ca:ff:a6: da:22:dc:1a:63:58:77:c0:b4:fb:a3:44:9b:2f:ac: 42:d7:42:31:18:77:ed:30:45:a2:de:27:6e:c7:91: bc:d8:2d:27:b1:a1:73:28:ac:4f:df:56:79:bb:bc: d9:c2:ba:be:14:f5:73:93:22:c9:00:9e:22:3f:1e: cc:46:20:10:22:6e:aa:15:d3:1f:df:39:8f:df:79: 85:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:C7:7E:6F:41:93:46:76:06:F5:75:1E:9E:B7:C0:C8:5B:51:22:70 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2DD6D74EC3CA11F084DEAAB7DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.85.20.0/24 Signature Algorithm: sha256WithRSAEncryption 27:e8:73:8b:09:0e:d0:55:6e:78:3d:63:a7:4c:ec:b4:08:a0: 9f:f8:b3:40:ac:08:ec:0a:c1:d1:d8:9f:44:45:98:c5:ed:e2: 06:6b:99:f5:50:d8:c0:86:8a:54:23:53:e4:74:3e:4c:30:34: a6:8d:2f:7a:35:08:eb:08:79:94:6c:68:10:4a:f8:0b:48:8d: 5f:1b:93:4c:ea:80:64:f2:fb:3b:7a:9b:75:ec:a1:ec:00:ce: 92:6a:b2:a8:06:d5:ef:e5:e3:5b:a8:7f:fd:29:42:5d:fb:95: a6:42:d1:49:df:93:81:0b:d4:f6:3a:7a:b4:a1:1f:d4:d4:f6: ef:74:13:03:9d:f2:0e:47:35:22:df:68:2d:d8:19:aa:19:c6: f6:0e:61:64:0e:63:f2:18:12:34:87:28:7a:61:3c:0a:b5:16: b2:1b:91:3e:01:0e:9a:d3:23:4e:e5:c7:93:81:c9:df:7a:98: 40:8b:82:ee:38:16:a5:23:9f:e2:8e:6e:80:e0:f4:2e:df:30: 6c:a2:98:a6:90:be:ab:09:ae:75:d4:80:57:73:fd:7c:a4:48: 69:db:7c:de:c7:eb:d2:ef:12:f2:f5:82:e0:70:95:33:29:e8: b5:f3:16:5d:20:64:d0:3d:77:fe:e0:21:19:3b:dd:d3:1e:a7: 9a:82:3b:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAal3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTE3MTUyOTEyWhcNMjUxMjI1MTUyOTEyWjAYMRYw FAYDVQQDEw02OTFiM2Y0ZC04MzIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEArq/5bc3GAN8IgchOZUg1+OGYap1AOu4jvByMr8wY9xrpT1VXF8v6BQWO pPtX6kJxOJ/6j8fv1du+7wozgpYJaSt1eZKyOAlc2XnP2N1iTcxmCj3XWeTQr2Fz 7hL5rmRNSvkFOmi3umsxm3PBM+UoUzMgEtiaCAEZAAiPH1kg+9S+g2DJLZZQVwf0 AW1pkVoyDR2qpq+3BcfsYBGKpjcpbvaWzgg/XhC4LGqy7SGDbHHK/6baItwaY1h3 wLT7o0SbL6xC10IxGHftMEWi3idux5G82C0nsaFzKKxP31Z5u7zZwrq+FPVzkyLJ AJ4iPx7MRiAQIm6qFdMf3zmP33mFewIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHnH fm9Bk0Z2BvV1Hp63wMhbUSJwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8yREQ2RDc0RUMzQ0ExMUYwODRERUFBQjdEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlUUMA0GCSqGSIb3DQEB CwUAA4IBAQAn6HOLCQ7QVW54PWOnTOy0CKCf+LNArAjsCsHR2J9ERZjF7eIGa5n1 UNjAhopUI1PkdD5MMDSmjS96NQjrCHmUbGgQSvgLSI1fG5NM6oBk8vs7ept17KHs AM6SarKoBtXv5eNbqH/9KUJd+5WmQtFJ35OBC9T2Onq0oR/U1PbvdBMDnfIORzUi 32gt2BmqGcb2DmFkDmPyGBI0hyh6YTwKtRayG5E+AQ6a0yNO5ceTgcnfephAi4Lu OBalI5/ijm6A4PQu3zBsopimkL6rCa511IBXc/18pEhp23zex+vS7xLy9YLgcJUz Kei18xZdIGTQPXf+4CEZO93THqeagjs9 -----END CERTIFICATE-----Generated at Wed Dec 3 11:06:37 2025 by rpki-client