This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39BA40A0CFBE11F0AE677BD6DAE4EC9C.roa File: 39BA40A0CFBE11F0AE677BD6DAE4EC9C.roa (raw, json) Hash identifier: 4R0ZdS+q2RVZA3Hj0/Gg1sT1infBEaa2KmhhhaO/bbI= Subject key identifier: D9:E0:2E:8A:52:DA:09:F6:C1:78:5D:91:F5:B8:DE:18:EB:02:AD:38 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ABC3 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39BA40A0CFBE11F0AE677BD6DAE4EC9C.roa Signing time: Tue 02 Dec 2025 20:33:57 +0000 ROA not before: Tue 02 Dec 2025 20:33:52 +0000 ROA not after: Fri 25 Aug 2028 20:33:52 +0000 asID: 17561 IP address blocks: 154.196.135.0/24 maxlen: 24 154.196.136.0/24 maxlen: 24 154.196.137.0/24 maxlen: 24 154.196.139.0/24 maxlen: 24 154.196.162.0/24 maxlen: 24 154.196.165.0/24 maxlen: 24 154.196.173.0/24 maxlen: 24 154.196.174.0/24 maxlen: 24 154.196.191.0/24 maxlen: 24 154.196.213.0/24 maxlen: 24 154.201.3.0/24 maxlen: 24 154.212.26.0/24 maxlen: 24 154.212.27.0/24 maxlen: 24 154.212.129.0/24 maxlen: 24 154.212.140.0/24 maxlen: 24 154.212.141.0/24 maxlen: 24 154.218.13.0/24 maxlen: 24 154.219.9.0/24 maxlen: 24 154.219.10.0/24 maxlen: 24 154.219.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109507 (0x1abc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 20:33:52 2025 GMT Not After : Aug 25 20:33:52 2028 GMT Subject: CN=692f4d35-61fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:5d:6b:54:d4:a7:21:b6:1b:7e:83:82:d7: d9:4c:40:aa:14:9e:6e:cf:e8:f2:a4:e5:eb:e2:78: fd:16:f4:59:a3:ce:f3:5e:7e:a2:7b:5c:6b:65:ba: 79:7e:e9:e3:c6:3c:9a:cc:33:47:a4:99:99:99:f6: d2:0e:1b:d5:bd:d2:ba:d4:cc:41:ad:0f:f1:33:a3: 65:62:1e:5a:ea:39:a7:b8:29:44:13:23:59:b4:d3: 94:3e:b7:dd:3c:3e:55:1c:dd:d9:d8:dc:c8:94:a2: 05:b8:70:a3:74:48:dc:20:db:f5:c9:c8:cd:62:9e: 76:7a:8d:82:18:33:3b:bc:f7:f0:f5:a5:4c:4f:6a: 44:96:72:3c:1b:a5:10:7c:34:2b:31:8e:e8:23:9f: 51:b5:55:8a:88:c2:bf:1f:4e:fb:55:db:6c:15:a4: 71:17:6b:bd:dc:9d:4e:e2:33:6a:77:d9:39:56:ea: 3e:1d:d2:67:08:49:66:43:c8:fd:bd:48:0c:fb:b0: 11:30:50:d6:6c:88:04:1c:9e:7b:fd:7c:ab:c2:93: 08:1a:8d:bf:2f:0e:26:56:7f:6d:03:9a:18:e9:99: bd:1e:d9:b2:72:ab:94:0b:5e:bd:93:4d:bd:8c:f2: 3a:30:62:ae:db:c7:2e:7f:2a:e6:2f:87:9e:9e:bb: f3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E0:2E:8A:52:DA:09:F6:C1:78:5D:91:F5:B8:DE:18:EB:02:AD:38 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/39BA40A0CFBE11F0AE677BD6DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.196.135.0-154.196.137.255 154.196.139.0/24 154.196.162.0/24 154.196.165.0/24 154.196.173.0-154.196.174.255 154.196.191.0/24 154.196.213.0/24 154.201.3.0/24 154.212.26.0/23 154.212.129.0/24 154.212.140.0/23 154.218.13.0/24 154.219.9.0-154.219.11.255 Signature Algorithm: sha256WithRSAEncryption 18:49:ef:26:56:f4:6b:cc:06:2d:eb:90:d2:4b:ad:01:e7:e6: 0d:2e:c1:3b:57:74:6a:fc:74:24:5a:99:95:bf:83:5d:90:d7: c0:1d:e0:cb:c3:d6:d1:3e:6b:72:e4:9e:25:07:94:aa:15:62: 9d:17:f9:e1:6e:65:19:72:86:79:2e:68:47:ac:0c:a8:d0:b6: 3c:08:ac:cf:ea:a4:f6:5a:77:0a:9c:e3:5a:ae:5c:66:cc:96: 22:d8:37:97:c3:7c:5d:bd:44:6e:08:b7:f6:54:ee:0e:d8:7a: db:cd:7f:a4:89:1a:86:04:e8:8c:89:c0:89:e2:f1:8a:dc:8c: 15:09:02:4c:dd:1f:c3:27:92:af:62:2d:52:a7:5d:a4:55:70: c8:f0:2e:3c:09:21:13:7a:9c:52:91:ca:8d:96:34:fd:b8:e4: 71:ef:8f:8a:bc:60:1d:71:d1:df:ca:8f:01:a9:a1:48:97:8a: 7e:fb:ce:4d:4c:94:3e:2e:e3:04:5b:4a:44:bb:6f:22:d5:1a: f8:b6:37:94:7e:8b:57:6c:c3:13:d3:a3:a5:c2:e1:30:11:0b: 7f:32:59:77:8d:91:ef:be:85:4d:13:30:b8:ff:ca:01:a0:36: 5a:3e:ec:d6:e6:d4:7f:90:3c:92:0c:53:2f:07:34:0e:58:39: a8:f7:02:3d -----BEGIN CERTIFICATE----- MIIF5DCCBMygAwIBAgIDAavDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMjAzMzUyWhcNMjgwODI1MjAzMzUyWjAYMRYw FAYDVQQDEw02OTJmNGQzNS02MWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAwBpda1TUpyG2G36DgtfZTECqFJ5uz+jypOXr4nj9FvRZo87zXn6ie1xr Zbp5funjxjyazDNHpJmZmfbSDhvVvdK61MxBrQ/xM6NlYh5a6jmnuClEEyNZtNOU PrfdPD5VHN3Z2NzIlKIFuHCjdEjcINv1ycjNYp52eo2CGDM7vPfw9aVMT2pElnI8 G6UQfDQrMY7oI59RtVWKiMK/H077VdtsFaRxF2u93J1O4jNqd9k5Vuo+HdJnCElm Q8j9vUgM+7ARMFDWbIgEHJ57/XyrwpMIGo2/Lw4mVn9tA5oY6Zm9HtmycquUC169 k029jPI6MGKu28cufyrmL4eenrvzmQIDAQABo4IDBTCCAwEwHQYDVR0OBBYEFNng LopS2gn2wXhdkfW43hjrAq04MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8zOUJBNDBBMENGQkUxMUYwQUU2NzdCRDZEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmMAwDBACaxIcDBAGaxIgDBACa xIsDBACaxKIDBACaxKUwDAMEAJrErQMEAJrErgMEAJrEvwMEAJrE1QMEAJrJAwME AZrUGgMEAJrUgQMEAZrUjAMEAJraDTAMAwQAmtsJAwQCmtsIMA0GCSqGSIb3DQEB CwUAA4IBAQAYSe8mVvRrzAYt65DSS60B5+YNLsE7V3Rq/HQkWpmVv4NdkNfAHeDL w9bRPmty5J4lB5SqFWKdF/nhbmUZcoZ5LmhHrAyo0LY8CKzP6qT2WncKnONarlxm zJYi2DeXw3xdvURuCLf2VO4O2HrbzX+kiRqGBOiMicCJ4vGK3IwVCQJM3R/DJ5Kv Yi1Sp12kVXDI8C48CSETepxSkcqNljT9uORx74+KvGAdcdHfyo8BqaFIl4p++85N TJQ+LuMEW0pEu28i1Rr4tjeUfotXbMMT06OlwuEwEQt/Mll3jZHvvoVNEzC4/8oB oDZaPuzW5tR/kDySDFMvBzQOWDmo9wI9 -----END CERTIFICATE-----Generated at Wed Dec 3 10:24:56 2025 by rpki-client