This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3349D2CACFCE11F0AA7A36B8DAE4EC9C.roa File: 3349D2CACFCE11F0AA7A36B8DAE4EC9C.roa (raw, json) Hash identifier: sPLT4Ugz1xOER3WLKAcEnEW59n05Z1fjr2Wfm7mGNUg= Subject key identifier: C4:7D:0B:06:C6:2E:42:D9:B3:B3:D0:27:97:B0:EA:56:AE:A3:C4:75 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ABE1 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3349D2CACFCE11F0AA7A36B8DAE4EC9C.roa Signing time: Tue 02 Dec 2025 22:28:18 +0000 ROA not before: Tue 02 Dec 2025 22:28:13 +0000 ROA not after: Sat 18 Nov 2028 22:28:13 +0000 asID: 17561 IP address blocks: 154.205.252.0/24 maxlen: 24 154.206.8.0/24 maxlen: 24 154.206.9.0/24 maxlen: 24 154.206.53.0/24 maxlen: 24 154.206.54.0/24 maxlen: 24 154.208.80.0/24 maxlen: 24 154.208.81.0/24 maxlen: 24 154.208.82.0/24 maxlen: 24 154.208.83.0/24 maxlen: 24 154.208.92.0/24 maxlen: 24 154.208.93.0/24 maxlen: 24 154.208.94.0/24 maxlen: 24 154.208.95.0/24 maxlen: 24 154.208.120.0/24 maxlen: 24 154.208.121.0/24 maxlen: 24 154.208.122.0/24 maxlen: 24 154.208.123.0/24 maxlen: 24 154.208.124.0/24 maxlen: 24 154.208.125.0/24 maxlen: 24 154.208.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109537 (0x1abe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 22:28:13 2025 GMT Not After : Nov 18 22:28:13 2028 GMT Subject: CN=692f6802-be3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:74:0f:b2:4c:cc:2e:07:ad:c3:71:d7:55:f7: 67:b5:8e:65:6b:af:9d:5a:a5:7c:ff:31:fe:83:ef: 32:6d:76:13:92:9f:6c:69:f8:2e:3c:04:41:84:76: 8c:b2:84:e9:7c:4d:68:d6:75:12:33:c5:e5:0a:d7: 5c:f2:eb:29:6d:fb:4d:7a:a7:df:a6:52:69:0e:e2: 98:d6:7a:5d:3b:30:8d:35:22:19:be:8b:e7:96:c4: d2:77:2b:70:da:fa:24:41:0a:47:95:e7:81:c6:4f: 49:3d:dc:3e:a9:53:66:55:ff:40:37:f6:de:b4:e9: e5:58:b2:b7:95:f9:5d:c0:8d:7c:17:3a:3b:ee:69: 51:79:06:f6:cf:51:45:eb:f4:87:f4:99:ea:6c:f7: 40:a4:46:2a:1f:22:a9:c8:77:9f:80:23:60:d8:a3: d5:1c:e0:30:34:08:d5:a9:b0:61:c2:37:8c:76:b1: c0:d3:8c:71:a1:51:92:1b:7e:5a:ca:98:d7:ec:37: 96:11:39:89:8b:18:62:a8:73:32:77:86:3e:eb:76: 9e:46:c4:c6:d8:06:68:84:b9:a0:6f:34:e8:d2:75: 5e:28:38:fe:42:7d:2a:27:92:d3:aa:71:41:e1:2b: 37:cc:dc:fa:ed:18:2f:19:a0:28:3a:97:ba:ba:57: 13:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7D:0B:06:C6:2E:42:D9:B3:B3:D0:27:97:B0:EA:56:AE:A3:C4:75 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3349D2CACFCE11F0AA7A36B8DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.205.252.0/24 154.206.8.0/23 154.206.53.0-154.206.54.255 154.208.80.0/22 154.208.92.0/22 154.208.120.0-154.208.126.255 Signature Algorithm: sha256WithRSAEncryption 07:4e:69:fa:d1:1d:0b:79:12:54:73:0e:de:61:d2:83:6a:e9: 05:92:71:d5:b8:0a:13:6f:7b:0d:46:ff:22:35:49:10:30:e2: 69:12:8c:08:d7:72:8a:2b:15:6e:0a:fd:d7:47:ac:f6:65:00: 6b:19:37:26:32:55:61:cb:85:ec:f9:83:c7:7a:a5:63:0e:8f: c5:5e:1f:23:a0:61:e9:a5:c2:90:2d:60:4b:7c:20:70:61:25: 09:0d:de:9a:ad:22:a6:bf:8e:9b:a6:19:ad:19:b0:c9:b4:a8: cf:dd:1f:03:5c:43:88:44:86:04:35:1c:8a:40:f8:14:78:ac: 03:da:c0:ca:2d:21:46:dd:92:3e:fc:64:85:1b:9e:75:e6:8e: 57:65:6c:04:e8:5d:79:72:25:b4:2c:68:43:89:28:cd:e9:bd: 13:3e:3c:f7:3b:b2:80:e9:ca:03:79:f9:fc:50:d4:b5:1e:d4: 06:21:be:97:76:79:4e:0c:6c:6a:c0:de:41:96:9a:55:11:7d: 9a:70:13:2e:88:47:ec:50:8f:35:43:05:da:6b:d5:4c:80:09: f9:0e:9d:0b:7c:ba:ec:ce:fc:f5:4a:9c:ec:86:2a:1e:f2:1b: e1:a0:cf:2a:64:6f:21:6e:a9:e0:5d:b9:d7:0d:0f:df:74:03: d4:8a:ab:63 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIDAavhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMjIyODEzWhcNMjgxMTE4MjIyODEzWjAYMRYw FAYDVQQDEw02OTJmNjgwMi1iZTNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAxHQPskzMLgetw3HXVfdntY5la6+dWqV8/zH+g+8ybXYTkp9safguPARB hHaMsoTpfE1o1nUSM8XlCtdc8uspbftNeqffplJpDuKY1npdOzCNNSIZvovnlsTS dytw2vokQQpHleeBxk9JPdw+qVNmVf9AN/betOnlWLK3lfldwI18Fzo77mlReQb2 z1FF6/SH9JnqbPdApEYqHyKpyHefgCNg2KPVHOAwNAjVqbBhwjeMdrHA04xxoVGS G35aypjX7DeWETmJixhiqHMyd4Y+63aeRsTG2AZohLmgbzTo0nVeKDj+Qn0qJ5LT qnFB4Ss3zNz67RgvGaAoOpe6ulcTcQIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFMR9 CwbGLkLZs7PQJ5ew6lauo8R1MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8zMzQ5RDJDQUNGQ0UxMUYwQUE3QTM2QjhEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0AwQAms38AwQBms4IMAwDBACa zjUDBACazjYDBAKa0FADBAKa0FwwDAMEA5rQeAMEAJrQfjANBgkqhkiG9w0BAQsF AAOCAQEAB05p+tEdC3kSVHMO3mHSg2rpBZJx1bgKE297DUb/IjVJEDDiaRKMCNdy iisVbgr910es9mUAaxk3JjJVYcuF7PmDx3qlYw6PxV4fI6Bh6aXCkC1gS3wgcGEl CQ3emq0ipr+Om6YZrRmwybSoz90fA1xDiESGBDUcikD4FHisA9rAyi0hRt2SPvxk hRuedeaOV2VsBOhdeXIltCxoQ4kozem9Ez489zuygOnKA3n5/FDUtR7UBiG+l3Z5 TgxsasDeQZaaVRF9mnATLohH7FCPNUMF2mvVTIAJ+Q6dC3y67M789Uqc7IYqHvIb 4aDPKmRvIW6p4F251w0P33QD1IqrYw== -----END CERTIFICATE-----Generated at Wed Dec 3 11:45:33 2025 by rpki-client