This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35B73E1CCE9D11F083A514CADAE4EC9C.roa File: 35B73E1CCE9D11F083A514CADAE4EC9C.roa (raw, json) Hash identifier: ZlgHnXLBa1CaQcQUgRqEAfOVyQtA/ELq+DyOmQnR3Ho= Subject key identifier: 08:3B:07:48:DF:EE:52:FB:E9:B9:75:3E:D6:47:EA:FC:4F:C1:3A:CE Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AB34 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35B73E1CCE9D11F083A514CADAE4EC9C.roa Signing time: Mon 01 Dec 2025 10:05:06 +0000 ROA not before: Mon 01 Dec 2025 10:04:57 +0000 ROA not after: Wed 31 Dec 2025 10:04:57 +0000 asID: 62240 IP address blocks: 154.195.29.0/24 maxlen: 24 154.195.30.0/24 maxlen: 24 154.195.31.0/24 maxlen: 24 154.195.96.0/24 maxlen: 24 154.195.188.0/24 maxlen: 24 154.195.189.0/24 maxlen: 24 154.195.190.0/24 maxlen: 24 154.195.191.0/24 maxlen: 24 154.196.82.0/24 maxlen: 24 154.196.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109364 (0x1ab34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 1 10:04:57 2025 GMT Not After : Dec 31 10:04:57 2025 GMT Subject: CN=692d6852-ca07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:dd:37:36:21:af:45:a8:e6:0a:1a:9a:11: d1:87:d5:14:3f:7c:98:46:aa:44:24:b5:f8:de:ff: a6:e8:83:a4:58:92:15:7d:ad:32:16:7e:05:7a:0e: 1a:4a:0c:83:ef:52:23:21:15:e4:a0:5c:93:cf:6d: 76:9c:cd:69:f1:34:01:1f:34:01:91:9d:d1:8d:8b: da:7c:1f:61:80:67:71:ea:69:76:58:d7:52:82:e9: f6:a1:77:2d:20:49:b1:4c:1e:2e:2d:b6:c1:ea:e8: df:ef:73:42:29:03:ad:e7:3e:29:2c:88:a0:23:2f: 8a:70:3b:26:8d:0e:4e:7b:dd:ca:8f:94:ff:60:87: d1:58:17:3c:d8:ee:a8:8e:1c:36:e8:26:ae:c3:a5: 08:f5:d4:6d:2a:35:73:dd:1f:2f:d2:63:cd:88:8d: 1d:1a:bc:56:a8:11:5a:4e:f5:57:e3:b9:5f:ac:98: f7:a7:6b:71:83:25:c6:37:6e:bf:6c:bd:b8:06:63: f6:5d:a7:01:e3:4b:a0:17:56:cc:60:43:0d:ad:59: 23:4d:e2:dd:78:a8:f5:22:ec:df:e1:c8:ee:e9:63: 36:20:2e:0d:cc:b3:75:a6:8c:71:b2:6a:59:30:1e: e8:1f:09:68:fa:dd:50:4e:82:ca:22:55:d5:29:2c: 1d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3B:07:48:DF:EE:52:FB:E9:B9:75:3E:D6:47:EA:FC:4F:C1:3A:CE X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35B73E1CCE9D11F083A514CADAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.195.29.0-154.195.31.255 154.195.96.0/24 154.195.188.0/22 154.196.82.0/24 154.196.86.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:71:23:68:5b:b0:f0:7b:12:35:18:02:59:0b:24:fd:2f:9e: 9e:8a:96:40:6a:04:8f:8e:bb:40:df:35:aa:a6:f2:4a:1c:6a: 3a:10:02:8f:06:92:fa:64:23:97:b2:ba:71:a3:59:59:63:74: c2:6d:62:23:47:0c:e6:eb:97:37:a7:18:25:37:91:f3:27:21: 2f:4c:f8:66:f0:cc:5c:79:e1:d7:5a:d6:71:18:cb:70:13:78: ed:8f:ee:a9:2f:d7:8a:54:77:c3:99:29:3d:02:0e:63:87:d7: 88:82:ad:05:4f:70:e2:ad:aa:5e:c0:94:51:1d:85:ef:30:92: 31:be:03:3f:33:82:67:1f:98:7b:a9:33:5f:d9:50:6c:c1:10: d6:08:4a:bd:ff:7c:d8:23:1e:2b:87:41:d9:d6:56:58:10:05: c6:93:c7:3a:6b:9e:98:cf:12:51:73:c0:13:78:e0:60:8a:b1: e8:b5:6d:c1:3b:d6:dd:07:e4:e5:87:39:f9:d9:1b:33:b9:36: 5a:34:89:f1:71:4b:df:27:61:ff:12:c1:09:3a:3c:66:0f:49: d6:a6:66:7d:a8:12:59:8b:c9:8d:31:50:a7:8f:ea:82:88:52: 13:c2:28:00:0d:bf:0e:c3:d4:29:be:8b:11:ad:89:fe:32:73: b4:72:0d:ea -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgIDAas0MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAxMTAwNDU3WhcNMjUxMjMxMTAwNDU3WjAYMRYw FAYDVQQDEw02OTJkNjg1Mi1jYTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAxfLdNzYhr0Wo5goamhHRh9UUP3yYRqpEJLX43v+m6IOkWJIVfa0yFn4F eg4aSgyD71IjIRXkoFyTz212nM1p8TQBHzQBkZ3RjYvafB9hgGdx6ml2WNdSgun2 oXctIEmxTB4uLbbB6ujf73NCKQOt5z4pLIigIy+KcDsmjQ5Oe93Kj5T/YIfRWBc8 2O6ojhw26Cauw6UI9dRtKjVz3R8v0mPNiI0dGrxWqBFaTvVX47lfrJj3p2txgyXG N26/bL24BmP2XacB40ugF1bMYEMNrVkjTeLdeKj1Iuzf4cju6WM2IC4NzLN1poxx smpZMB7oHwlo+t1QToLKIlXVKSwdiQIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFAg7 B0jf7lL76bl1PtZH6vxPwTrOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8zNUI3M0UxQ0NFOUQxMUYwODNBNTE0Q0FEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBACawx0DBAWawwADBACa w2ADBAKaw7wDBACaxFIDBACaxFYwDQYJKoZIhvcNAQELBQADggEBAI5xI2hbsPB7 EjUYAlkLJP0vnp6KlkBqBI+Ou0DfNaqm8kocajoQAo8GkvpkI5eyunGjWVljdMJt YiNHDObrlzenGCU3kfMnIS9M+GbwzFx54dda1nEYy3ATeO2P7qkv14pUd8OZKT0C DmOH14iCrQVPcOKtql7AlFEdhe8wkjG+Az8zgmcfmHupM1/ZUGzBENYISr3/fNgj HiuHQdnWVlgQBcaTxzprnpjPElFzwBN44GCKsei1bcE71t0H5OWHOfnZGzO5Nlo0 ifFxS98nYf8SwQk6PGYPSdamZn2oElmLyY0xUKeP6oKIUhPCKAANvw7D1Cm+ixGt if4yc7RyDeo= -----END CERTIFICATE-----Generated at Wed Dec 3 10:26:05 2025 by rpki-client