This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A3E5704C3A311F0A2EBDBC7DAE4EC9C.roa File: 3A3E5704C3A311F0A2EBDBC7DAE4EC9C.roa (raw, json) Hash identifier: 5aODUtHdV/RUFYZbDPVR8HXvsh22kxwhlnMcv7f+qv4= Subject key identifier: C7:2E:1A:EE:D8:91:29:79:CF:B5:52:83:79:B4:99:0A:B4:CD:F9:F6 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A953 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A3E5704C3A311F0A2EBDBC7DAE4EC9C.roa Signing time: Mon 17 Nov 2025 10:50:28 +0000 ROA not before: Mon 17 Nov 2025 10:50:22 +0000 ROA not after: Sun 21 Dec 2025 10:50:22 +0000 asID: 209242 IP address blocks: 154.198.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108883 (0x1a953) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 17 10:50:22 2025 GMT Not After : Dec 21 10:50:22 2025 GMT Subject: CN=691afdf3-08a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:72:4f:d6:d9:ae:f9:51:50:d7:35:64:75: 4e:7d:88:87:9f:c7:ec:53:24:b5:da:f5:a1:a7:a0: 4c:23:d3:e3:75:85:98:92:96:e8:0f:5d:b2:27:87: fb:55:cf:34:08:17:74:27:af:4c:b5:e2:2c:28:75: a4:2f:d0:83:63:db:3a:49:13:87:e4:db:3c:6e:90: ae:8f:e6:5c:83:cb:b0:02:50:5d:a6:d1:0b:c6:a8: d6:89:d0:a6:fd:d8:28:aa:d4:f2:a7:97:32:81:f0: cf:df:7b:7b:33:1d:73:17:c5:4c:6b:43:27:6e:bd: fa:3d:e9:08:85:35:21:c2:61:3b:4c:bd:77:cd:23: 37:3e:4e:21:77:b8:8b:4d:78:dc:cc:98:e4:f5:2d: d4:cc:27:d5:50:35:5d:30:06:05:0a:76:d6:bd:66: 4b:78:e3:6a:e6:88:de:70:fa:64:0d:e2:b9:58:64: 11:37:5a:f6:e3:b0:41:28:32:f0:aa:51:1a:57:55: 64:23:f7:fa:06:25:e5:e8:f8:5f:34:72:18:34:97: f4:6e:44:8a:1b:1d:85:d4:a8:fa:c6:fa:7a:a3:40: 13:22:fa:7a:74:ad:d6:63:9c:15:9a:f3:67:af:68: d1:a3:de:92:c0:95:29:bf:cf:b6:eb:fe:dd:98:ad: 7b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:2E:1A:EE:D8:91:29:79:CF:B5:52:83:79:B4:99:0A:B4:CD:F9:F6 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A3E5704C3A311F0A2EBDBC7DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.198.173.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:99:da:6e:ce:92:6d:e6:86:0f:9c:03:28:e5:09:40:aa:85: ea:76:a6:2e:e2:65:fc:ad:30:be:7b:53:75:b5:66:0a:4b:0e: 41:1a:61:41:bb:03:0d:af:79:91:a1:fd:d3:a6:23:45:35:39: ed:68:55:31:8a:dd:ca:d1:3f:f1:08:6c:64:b9:cd:f5:28:b0: fa:31:5d:ed:0f:39:05:5e:d5:ac:49:4d:12:f3:25:82:57:b6: 16:71:ca:ff:d5:b0:e4:5a:79:c2:1a:d1:45:25:3b:cb:4a:70: 44:c1:c0:21:be:c0:48:cf:39:2f:ed:bf:b6:60:e9:d9:04:74: 23:8a:75:d1:b6:53:d3:ea:5f:95:1e:22:ed:83:60:f4:fb:e2: 90:7b:53:0b:2d:21:82:3f:14:f3:49:c9:66:a8:5f:1b:24:e5: bf:ca:47:3f:65:bb:d9:f7:0e:cf:75:17:21:08:38:03:9c:31: 0c:a5:54:ee:1f:0b:a1:62:e4:26:28:3f:5e:92:e2:1c:ad:00: ad:09:78:06:b3:67:27:5d:4f:34:fb:3a:a0:d9:51:ce:e6:77: 4d:77:bc:14:f8:50:42:b6:8f:11:d2:c7:da:ac:0b:10:79:e6: c0:60:ef:c0:72:a1:35:81:f5:b1:78:15:b8:88:22:37:10:b7: e6:18:54:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAalTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTE3MTA1MDIyWhcNMjUxMjIxMTA1MDIyWjAYMRYw FAYDVQQDEw02OTFhZmRmMy0wOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAwgRyT9bZrvlRUNc1ZHVOfYiHn8fsUyS12vWhp6BMI9PjdYWYkpboD12y J4f7Vc80CBd0J69MteIsKHWkL9CDY9s6SROH5Ns8bpCuj+Zcg8uwAlBdptELxqjW idCm/dgoqtTyp5cygfDP33t7Mx1zF8VMa0Mnbr36PekIhTUhwmE7TL13zSM3Pk4h d7iLTXjczJjk9S3UzCfVUDVdMAYFCnbWvWZLeONq5ojecPpkDeK5WGQRN1r247BB KDLwqlEaV1VkI/f6BiXl6PhfNHIYNJf0bkSKGx2F1Kj6xvp6o0ATIvp6dK3WY5wV mvNnr2jRo96SwJUpv8+26/7dmK17yQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMcu Gu7YkSl5z7VSg3m0mQq0zfn2MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8zQTNFNTcwNEMzQTMxMUYwQTJFQkRCQzdEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsatMA0GCSqGSIb3DQEB CwUAA4IBAQAumdpuzpJt5oYPnAMo5QlAqoXqdqYu4mX8rTC+e1N1tWYKSw5BGmFB uwMNr3mRof3TpiNFNTntaFUxit3K0T/xCGxkuc31KLD6MV3tDzkFXtWsSU0S8yWC V7YWccr/1bDkWnnCGtFFJTvLSnBEwcAhvsBIzzkv7b+2YOnZBHQjinXRtlPT6l+V HiLtg2D0++KQe1MLLSGCPxTzSclmqF8bJOW/ykc/ZbvZ9w7PdRchCDgDnDEMpVTu HwuhYuQmKD9ekuIcrQCtCXgGs2cnXU80+zqg2VHO5ndNd7wU+FBCto8R0sfarAsQ eebAYO/AcqE1gfWxeBW4iCI3ELfmGFRI -----END CERTIFICATE-----Generated at Wed Dec 3 11:06:34 2025 by rpki-client