This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/386063C8CF5111F09B2B2EB8DAE4EC9C.roa File: 386063C8CF5111F09B2B2EB8DAE4EC9C.roa (raw, json) Hash identifier: I8zWa9bFqArx4/TrmBCQd4zr5DqmYfE5Zn4QQrW/Tqo= Subject key identifier: 89:A2:A6:2E:EA:4F:FB:27:23:B3:6E:79:BC:EB:C4:F2:55:58:5D:DE Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AB69 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/386063C8CF5111F09B2B2EB8DAE4EC9C.roa Signing time: Tue 02 Dec 2025 07:33:40 +0000 ROA not before: Tue 02 Dec 2025 07:33:35 +0000 ROA not after: Wed 31 Dec 2025 07:33:35 +0000 asID: 62240 IP address blocks: 154.195.127.0/24 maxlen: 24 154.195.128.0/24 maxlen: 24 154.195.129.0/24 maxlen: 24 154.195.130.0/24 maxlen: 24 154.195.131.0/24 maxlen: 24 154.195.132.0/24 maxlen: 24 154.195.133.0/24 maxlen: 24 154.195.134.0/24 maxlen: 24 154.195.135.0/24 maxlen: 24 154.196.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109417 (0x1ab69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 07:33:35 2025 GMT Not After : Dec 31 07:33:35 2025 GMT Subject: CN=692e9654-0a63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e1:c5:8a:9f:80:25:8c:a5:39:12:9d:f5:35: 23:a1:71:f2:8a:97:09:af:fe:99:aa:3d:43:49:07: 69:49:11:b4:c6:75:09:67:90:ba:f5:d2:ed:0f:b2: 74:ee:7b:9f:24:69:12:ba:cd:6b:68:67:44:7b:fd: bd:d4:38:87:20:b7:16:69:1e:5c:a2:e8:9e:ac:48: b8:07:07:d9:18:58:02:04:71:ae:8b:1d:65:ec:5e: 7a:e5:ca:06:d1:fb:00:7b:5c:37:ca:80:1e:4b:c8: 62:f4:f3:55:dd:ae:6a:d5:f0:e5:7d:dc:5a:73:94: 93:ad:68:71:be:a8:ad:57:f8:81:4c:a4:f2:81:24: db:1f:ee:b6:92:74:af:84:9e:e6:15:23:10:c8:ed: 59:ce:67:d3:a8:00:e6:25:66:90:8b:5e:58:fc:f8: 0d:96:a4:04:b3:1d:15:d3:22:a5:ce:59:77:8b:ed: 53:40:22:52:c4:3a:4d:fd:ef:9a:5b:88:2f:8d:93: 68:de:d1:57:43:7a:b0:56:bc:b1:ea:76:c0:19:b5: 9f:94:06:b5:ac:31:2c:92:2f:6b:fb:73:62:24:80: 0e:70:59:5c:c5:e2:97:df:f6:a8:dd:02:77:9a:6c: d4:e1:60:c8:6b:c6:1e:da:e8:d0:bb:27:0b:b8:8d: d9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A2:A6:2E:EA:4F:FB:27:23:B3:6E:79:BC:EB:C4:F2:55:58:5D:DE X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/386063C8CF5111F09B2B2EB8DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.195.127.0-154.195.135.255 154.196.88.0/24 Signature Algorithm: sha256WithRSAEncryption 77:f6:e3:ba:13:a0:dd:69:98:f4:d7:ee:50:09:30:41:22:27: 20:b7:25:0a:7c:e7:f5:23:c2:dd:a8:2e:35:90:c8:41:32:2a: f4:71:38:39:0d:7b:b4:b4:13:63:6c:04:00:82:85:c8:32:21: a0:ff:c4:5c:2e:59:92:d7:a0:5f:45:62:39:67:65:cb:8d:8e: 36:d0:b6:03:bf:7b:73:d2:84:91:57:9b:09:db:b9:61:1c:83: 09:07:7f:19:89:f9:24:52:17:25:02:07:12:0a:fc:90:ae:f3: 81:b3:ec:0c:6b:c1:93:a8:13:a1:5a:7b:de:b4:8c:41:b3:5a: e6:c4:11:2b:3d:b7:d6:ea:68:07:d7:ce:fe:d4:c7:f3:ea:a7: 98:96:56:25:2a:89:d8:c1:3d:b4:2d:29:08:cc:97:b8:74:8f: 35:fa:cc:a5:d2:80:2d:2c:70:8e:f5:a4:3c:91:80:92:b2:ec: 9e:50:72:16:23:a9:af:59:0f:0e:5f:41:c1:f3:a7:e0:ab:d9: b2:66:2c:a0:1e:6c:dd:9d:ac:f1:4c:2c:47:45:f8:d1:94:79: 24:74:0f:00:4f:53:8e:1a:6f:9e:9b:ce:52:dd:a1:50:ff:b1: fd:fe:0d:0c:94:15:c5:6a:fa:27:40:50:5b:73:75:4d:cc:ec: 90:a5:49:22 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgIDAatpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMDczMzM1WhcNMjUxMjMxMDczMzM1WjAYMRYw FAYDVQQDEw02OTJlOTY1NC0wYTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA2eHFip+AJYylORKd9TUjoXHyipcJr/6Zqj1DSQdpSRG0xnUJZ5C69dLt D7J07nufJGkSus1raGdEe/291DiHILcWaR5couierEi4BwfZGFgCBHGuix1l7F56 5coG0fsAe1w3yoAeS8hi9PNV3a5q1fDlfdxac5STrWhxvqitV/iBTKTygSTbH+62 knSvhJ7mFSMQyO1ZzmfTqADmJWaQi15Y/PgNlqQEsx0V0yKlzll3i+1TQCJSxDpN /e+aW4gvjZNo3tFXQ3qwVryx6nbAGbWflAa1rDEski9r+3NiJIAOcFlcxeKX3/ao 3QJ3mmzU4WDIa8Ye2ujQuycLuI3ZiwIDAQABo4ICszCCAq8wHQYDVR0OBBYEFImi pi7qT/snI7NuebzrxPJVWF3eMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8zODYwNjNDOENGNTExMUYwOUIyQjJFQjhEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBACaw38DBAOaw4ADBACa xFgwDQYJKoZIhvcNAQELBQADggEBAHf247oToN1pmPTX7lAJMEEiJyC3JQp85/Uj wt2oLjWQyEEyKvRxODkNe7S0E2NsBACChcgyIaD/xFwuWZLXoF9FYjlnZcuNjjbQ tgO/e3PShJFXmwnbuWEcgwkHfxmJ+SRSFyUCBxIK/JCu84Gz7AxrwZOoE6Fae960 jEGzWubEESs9t9bqaAfXzv7Ux/Pqp5iWViUqidjBPbQtKQjMl7h0jzX6zKXSgC0s cI71pDyRgJKy7J5QchYjqa9ZDw5fQcHzp+Cr2bJmLKAebN2drPFMLEdF+NGUeSR0 DwBPU44ab56bzlLdoVD/sf3+DQyUFcVq+idAUFtzdU3M7JClSSI= -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:23 2025 by rpki-client