This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F589C12CFDA11F0BB412384DAE4EC9C.roa File: 2F589C12CFDA11F0BB412384DAE4EC9C.roa (raw, json) Hash identifier: itAdyrheOyKPWQGgtym7vFCgixzOmzZo+0i+zcUiLGs= Subject key identifier: 09:0C:46:23:4D:35:F5:EF:2B:5E:40:01:8A:A1:44:8B:C5:28:DB:3E Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ABF7 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F589C12CFDA11F0BB412384DAE4EC9C.roa Signing time: Tue 02 Dec 2025 23:54:06 +0000 ROA not before: Tue 02 Dec 2025 23:54:01 +0000 ROA not after: Sun 19 Nov 2028 23:54:01 +0000 asID: 17561 IP address blocks: 154.194.199.0/24 maxlen: 24 154.200.18.0/24 maxlen: 24 154.200.19.0/24 maxlen: 24 154.200.20.0/24 maxlen: 24 154.200.21.0/24 maxlen: 24 154.200.22.0/24 maxlen: 24 154.200.23.0/24 maxlen: 24 154.200.24.0/24 maxlen: 24 154.200.25.0/24 maxlen: 24 154.200.28.0/24 maxlen: 24 154.200.29.0/24 maxlen: 24 154.200.34.0/24 maxlen: 24 154.200.38.0/24 maxlen: 24 154.200.39.0/24 maxlen: 24 154.200.40.0/24 maxlen: 24 154.200.41.0/24 maxlen: 24 154.200.42.0/24 maxlen: 24 154.200.44.0/24 maxlen: 24 154.200.45.0/24 maxlen: 24 154.203.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109559 (0x1abf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 23:54:01 2025 GMT Not After : Nov 19 23:54:01 2028 GMT Subject: CN=692f7c1d-c005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bf:b8:e9:0b:28:6d:08:ac:e7:1d:93:e2:de: 87:ac:8f:c8:2a:52:88:7c:c9:4d:3a:f4:eb:f8:d0: 42:44:88:43:96:40:16:fb:d7:8a:29:df:92:70:03: bf:ac:3a:e7:2e:a2:63:f6:cd:f5:2f:5f:1c:40:80: 1a:2b:19:99:ee:14:b7:40:7b:00:9a:26:18:92:38: ea:b0:b3:6a:0d:35:d6:bb:9d:ed:69:19:35:5c:e7: c4:78:2a:20:fb:ce:98:c5:f6:a2:ff:5e:37:27:f9: b4:65:89:80:07:82:c6:a1:af:cf:88:37:b8:22:5b: 35:97:88:98:05:23:99:b1:85:8d:41:58:ee:9d:0b: 6a:85:90:6d:f7:3a:55:14:99:81:8d:e2:3a:75:17: 73:04:b8:5a:91:74:e9:c8:91:78:e6:7b:81:6e:02: 63:31:5d:ae:24:b8:2c:cd:16:57:de:01:12:d6:a8: 0e:63:28:9f:76:7f:74:f2:a3:ac:88:67:f1:73:61: 4e:ba:13:02:59:3b:97:42:65:18:a6:70:a2:d8:8f: 1a:ac:72:9f:95:56:6a:73:2f:80:88:55:47:81:6a: e8:ea:b2:61:76:d0:c6:ed:1a:f9:51:b6:0a:0b:d0: ae:8b:21:ab:93:f3:58:e2:4f:c5:5d:15:7f:cb:73: 40:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0C:46:23:4D:35:F5:EF:2B:5E:40:01:8A:A1:44:8B:C5:28:DB:3E X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F589C12CFDA11F0BB412384DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.194.199.0/24 154.200.18.0-154.200.25.255 154.200.28.0/23 154.200.34.0/24 154.200.38.0-154.200.42.255 154.200.44.0/23 154.203.44.0/24 Signature Algorithm: sha256WithRSAEncryption c9:77:c8:14:fc:33:73:32:d9:e9:aa:04:4a:8b:0b:f3:83:47: 3b:80:83:fd:84:37:fb:e6:46:24:c2:b5:d9:07:d8:9f:41:50: 22:31:c4:ed:35:06:27:39:77:ec:08:ca:d6:05:ed:38:8d:8e: d2:da:4c:0c:f2:bb:5d:ab:42:0c:84:b4:b6:ab:fe:32:47:d8: b6:6e:60:8e:25:f2:8d:7b:b8:67:b4:f4:74:01:da:e7:29:16: 5c:b2:23:4e:06:51:8f:90:53:7e:d4:a6:cf:49:6e:4b:95:98: 61:b8:4c:f5:16:1d:be:af:36:f2:75:60:51:4e:eb:7c:93:a2: 42:fe:33:f1:e9:04:69:ab:8c:89:fd:51:63:d7:6d:12:29:db: 6e:6e:40:75:f1:22:07:b5:06:d8:7d:fb:d1:c8:55:e0:4f:2c: 4e:0e:5b:b7:e4:38:bb:3d:2a:55:32:ae:71:8d:c9:e7:28:ea: 68:cb:29:fd:ad:6e:51:8b:5e:57:65:c2:2f:3f:b0:40:a5:67: 39:4d:35:07:7c:08:23:4f:56:58:ea:d2:81:c1:95:69:77:f8: 21:6c:b3:3c:de:74:f7:09:32:6a:a7:84:16:be:fa:ce:5f:52: 7e:d4:59:77:27:ef:d6:75:69:5c:d0:8f:96:38:63:45:52:bb: 64:ca:4f:94 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgIDAav3MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMjM1NDAxWhcNMjgxMTE5MjM1NDAxWjAYMRYw FAYDVQQDEw02OTJmN2MxZC1jMDA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA1L+46QsobQis5x2T4t6HrI/IKlKIfMlNOvTr+NBCRIhDlkAW+9eKKd+S cAO/rDrnLqJj9s31L18cQIAaKxmZ7hS3QHsAmiYYkjjqsLNqDTXWu53taRk1XOfE eCog+86Yxfai/143J/m0ZYmAB4LGoa/PiDe4Ils1l4iYBSOZsYWNQVjunQtqhZBt 9zpVFJmBjeI6dRdzBLhakXTpyJF45nuBbgJjMV2uJLgszRZX3gES1qgOYyifdn90 8qOsiGfxc2FOuhMCWTuXQmUYpnCi2I8arHKflVZqcy+AiFVHgWro6rJhdtDG7Rr5 UbYKC9CuiyGrk/NY4k/FXRV/y3NAzQIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFAkM RiNNNfXvK15AAYqhRIvFKNs+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8yRjU4OUMxMkNGREExMUYwQkI0MTIzODREQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQAmsLHMAwDBAGayBIDBAGa yBgDBAGayBwDBACayCIwDAMEAZrIJgMEAJrIKgMEAZrILAMEAJrLLDANBgkqhkiG 9w0BAQsFAAOCAQEAyXfIFPwzczLZ6aoESosL84NHO4CD/YQ3++ZGJMK12QfYn0FQ IjHE7TUGJzl37AjK1gXtOI2O0tpMDPK7XatCDIS0tqv+MkfYtm5gjiXyjXu4Z7T0 dAHa5ykWXLIjTgZRj5BTftSmz0luS5WYYbhM9RYdvq828nVgUU7rfJOiQv4z8ekE aauMif1RY9dtEinbbm5AdfEiB7UG2H370chV4E8sTg5bt+Q4uz0qVTKucY3J5yjq aMsp/a1uUYteV2XCLz+wQKVnOU01B3wII09WWOrSgcGVaXf4IWyzPN509wkyaqeE Fr76zl9SftRZdyfv1nVpXNCPljhjRVK7ZMpPlA== -----END CERTIFICATE-----Generated at Wed Dec 3 11:06:37 2025 by rpki-client