This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C8EF86ECF8911F08284CE90DAE4EC9C.roa File: 3C8EF86ECF8911F08284CE90DAE4EC9C.roa (raw, json) Hash identifier: jxwOkoIS3/Nzf922BrD4K7UzX55Wk63t15ouKprHTrY= Subject key identifier: 72:83:EB:72:0B:B9:44:72:13:6E:D0:7D:5D:DB:49:A0:BB:36:E7:C1 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AB93 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C8EF86ECF8911F08284CE90DAE4EC9C.roa Signing time: Tue 02 Dec 2025 14:14:39 +0000 ROA not before: Tue 02 Dec 2025 14:14:27 +0000 ROA not after: Tue 06 Jan 2026 14:14:27 +0000 asID: 45194 IP address blocks: 154.84.192.0/24 maxlen: 24 154.84.194.0/24 maxlen: 24 154.84.195.0/24 maxlen: 24 154.84.196.0/24 maxlen: 24 154.84.197.0/24 maxlen: 24 154.84.198.0/24 maxlen: 24 154.84.199.0/24 maxlen: 24 154.84.223.0/24 maxlen: 24 154.84.244.0/24 maxlen: 24 154.84.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109459 (0x1ab93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 14:14:27 2025 GMT Not After : Jan 6 14:14:27 2026 GMT Subject: CN=692ef44e-960d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b8:42:1d:2e:22:6c:59:d9:b9:49:d7:a9:15: b2:0b:17:25:27:1a:4c:f9:43:f2:36:49:8a:16:2d: 4b:8f:3a:13:bf:f1:8f:8d:db:0a:bd:a9:8d:59:0f: 81:81:49:8f:7c:77:51:28:34:41:d9:8d:37:e3:3e: b8:31:e5:1f:be:89:98:ed:0a:69:3a:fc:3a:69:2f: 23:a4:1a:bf:72:07:70:72:5e:b1:4f:ba:28:b4:bf: ee:cb:ac:6f:78:57:79:95:b2:62:b8:5f:17:7f:cb: 38:f2:70:fe:5e:7c:21:e8:c7:b3:f6:af:4b:76:60: b4:ed:c3:8b:47:6f:c4:31:2c:cb:e0:5b:d3:57:df: 1e:1e:63:67:2a:f6:e6:3b:81:d7:10:de:18:36:e8: 7b:09:25:3e:ee:11:cc:a0:bf:9d:94:fa:de:25:c7: 4c:84:3a:82:3c:d9:57:ba:35:65:61:ab:74:65:7a: 1d:eb:0c:d9:6d:4b:22:09:6b:ed:fe:11:53:ac:74: 75:1f:c5:25:98:da:2b:5c:27:ae:9f:37:c3:58:56: 9b:84:e5:dd:86:18:38:ee:82:ac:83:61:87:1c:8c: 30:2b:dd:ed:58:0b:ec:93:24:2a:4b:45:e4:6b:68: a3:3d:43:24:c1:70:05:58:69:81:27:63:8f:58:40: bc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:83:EB:72:0B:B9:44:72:13:6E:D0:7D:5D:DB:49:A0:BB:36:E7:C1 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C8EF86ECF8911F08284CE90DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.84.192.0/24 154.84.194.0-154.84.199.255 154.84.223.0/24 154.84.244.0/23 Signature Algorithm: sha256WithRSAEncryption 23:a3:9c:19:b8:34:0b:35:e7:4e:a0:0c:3f:6a:53:0f:2a:8b: 9a:5b:6a:6f:79:51:2a:5d:cc:9f:28:80:2e:2a:7a:ab:7e:40: 76:7d:aa:53:e2:b6:7f:10:5b:0f:a9:cb:4d:8d:68:30:d8:b1: b1:a0:87:b1:d0:19:01:9f:1b:ea:3b:9f:c7:96:8e:69:c0:86: 93:20:41:45:67:b5:8f:94:66:49:0f:94:91:2e:d9:68:f9:d2: 2d:d0:80:e0:f1:93:c6:92:f1:41:91:6a:90:af:3a:40:26:b5: 31:d1:19:e3:d4:b6:cb:9b:0d:ef:18:2f:2b:00:39:d2:92:59: 69:54:10:d0:22:0b:91:2e:15:fc:4e:1c:c9:56:cf:96:5c:da: f0:a1:d1:43:29:62:85:45:f4:d1:fa:8e:fe:dd:ab:6c:26:f1: 7b:51:d2:fe:08:d2:74:e1:1c:e8:ba:bb:eb:85:8d:fe:21:38: 65:72:1b:1c:fb:50:fc:20:55:f5:a5:88:44:2c:ec:2c:5c:b2: e3:0f:d8:bc:0d:9c:25:58:32:0e:49:c8:81:8f:c6:da:5e:8d: 38:84:34:92:fd:3a:d5:3e:c0:5b:d4:e5:63:a2:1d:05:ca:fb: bf:35:ed:90:b2:bf:d4:23:10:7b:71:43:58:27:ab:de:0a:93: 51:da:84:c2 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIDAauTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMTQxNDI3WhcNMjYwMTA2MTQxNDI3WjAYMRYw FAYDVQQDEw02OTJlZjQ0ZS05NjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA4rhCHS4ibFnZuUnXqRWyCxclJxpM+UPyNkmKFi1LjzoTv/GPjdsKvamN WQ+BgUmPfHdRKDRB2Y034z64MeUfvomY7QppOvw6aS8jpBq/cgdwcl6xT7ootL/u y6xveFd5lbJiuF8Xf8s48nD+Xnwh6Mez9q9LdmC07cOLR2/EMSzL4FvTV98eHmNn KvbmO4HXEN4YNuh7CSU+7hHMoL+dlPreJcdMhDqCPNlXujVlYat0ZXod6wzZbUsi CWvt/hFTrHR1H8UlmNorXCeunzfDWFabhOXdhhg47oKsg2GHHIwwK93tWAvskyQq S0Xka2ijPUMkwXAFWGmBJ2OPWEC8LwIDAQABo4ICvzCCArswHQYDVR0OBBYEFHKD 63ILuURyE27QfV3bSaC7NufBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8zQzhFRjg2RUNGODkxMUYwODI4NENFOTBEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAmlTAMAwDBAGaVMIDBAOa VMADBACaVN8DBAGaVPQwDQYJKoZIhvcNAQELBQADggEBACOjnBm4NAs1506gDD9q Uw8qi5pbam95USpdzJ8ogC4qeqt+QHZ9qlPitn8QWw+py02NaDDYsbGgh7HQGQGf G+o7n8eWjmnAhpMgQUVntY+UZkkPlJEu2Wj50i3QgODxk8aS8UGRapCvOkAmtTHR GePUtsubDe8YLysAOdKSWWlUENAiC5EuFfxOHMlWz5Zc2vCh0UMpYoVF9NH6jv7d q2wm8XtR0v4I0nThHOi6u+uFjf4hOGVyGxz7UPwgVfWliEQs7CxcsuMP2LwNnCVY Mg5JyIGPxtpejTiENJL9OtU+wFvU5WOiHQXK+7817ZCyv9QjEHtxQ1gnq94Kk1Ha hMI= -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:20 2025 by rpki-client