This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EFF9ED0C91E11F0AEE9D1C7DAE4EC9C.roa File: 3EFF9ED0C91E11F0AEE9D1C7DAE4EC9C.roa (raw, json) Hash identifier: GSNla2aOAO6lZ/fZBKKGtzWQPPFbje/vi9XUZYlsvlo= Subject key identifier: BB:40:B8:A3:FA:E3:00:29:71:CF:F0:CA:3F:E1:61:79:E4:8C:24:8B Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AA55 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EFF9ED0C91E11F0AEE9D1C7DAE4EC9C.roa Signing time: Mon 24 Nov 2025 10:13:39 +0000 ROA not before: Mon 24 Nov 2025 10:13:35 +0000 ROA not after: Mon 29 Dec 2025 10:13:35 +0000 asID: 134365 IP address blocks: 154.194.248.0/21 maxlen: 24 154.194.248.0/24 maxlen: 24 154.194.249.0/24 maxlen: 24 154.194.250.0/24 maxlen: 24 154.194.251.0/24 maxlen: 24 154.194.252.0/24 maxlen: 24 154.194.253.0/24 maxlen: 24 154.194.254.0/24 maxlen: 24 154.194.255.0/24 maxlen: 24 154.198.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109141 (0x1aa55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 24 10:13:35 2025 GMT Not After : Dec 29 10:13:35 2025 GMT Subject: CN=69242fd3-41fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:db:bc:2e:ff:ea:cf:6d:75:25:e2:27:33:6a: a4:bb:51:c0:06:e7:34:77:95:49:66:10:73:03:76: d8:07:a7:7e:9f:c2:41:d6:31:42:bb:ef:77:c9:70: b7:fe:94:06:80:99:77:03:94:4a:b6:f1:63:e5:c6: 7b:e3:54:76:f8:90:f6:e6:58:07:f8:3e:5d:02:60: 1b:76:91:91:51:a6:68:de:2a:26:7d:4c:84:db:2e: 1b:23:b0:13:b8:36:60:4f:65:72:9e:19:b6:c7:82: fc:29:86:c5:4f:00:f5:83:87:06:31:f4:1d:38:ac: e5:90:f8:21:53:fd:1f:15:2e:9c:06:dd:b1:77:51: 2d:e1:36:86:50:33:30:c9:5d:f8:4a:12:0e:74:33: 1d:3f:8f:70:09:bb:5c:be:d0:05:de:a0:1b:11:8f: 37:45:a1:79:02:f4:28:ff:6a:9f:79:fb:91:da:06: 0e:21:6f:5c:fc:a6:80:29:25:b5:65:7f:ff:f8:7e: 03:aa:19:2d:c6:c0:24:23:fc:50:6a:3b:6f:78:c4: a4:ea:99:e8:b8:a4:ab:64:9c:ce:b4:18:bf:29:ed: 0e:48:c9:c0:62:91:8e:b9:cc:c6:f1:96:06:1e:e6: 19:8a:00:06:5e:b9:1e:80:bc:b3:19:08:72:0c:42: 7b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:40:B8:A3:FA:E3:00:29:71:CF:F0:CA:3F:E1:61:79:E4:8C:24:8B X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EFF9ED0C91E11F0AEE9D1C7DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.194.248.0/21 154.198.40.0/22 Signature Algorithm: sha256WithRSAEncryption 88:80:69:d4:89:d7:ed:6b:75:79:42:13:21:dd:9b:e5:04:2c: 64:2d:47:3d:67:8e:40:f2:df:0e:77:2f:c0:c7:ae:c9:d8:72: 3d:e4:8e:22:94:28:df:bd:c4:b3:21:f6:c8:21:1e:e8:88:06: 6c:3e:1b:80:a3:3e:1e:b6:3c:33:0d:84:ea:2b:0e:aa:21:1e: 68:31:07:1e:9e:97:fb:3c:4a:4b:b3:15:15:41:5d:4d:cb:5a: db:ab:a9:68:c3:90:88:f7:86:c0:e4:78:71:64:c6:1d:58:a4: 42:5b:91:db:d5:89:22:ea:84:dd:c3:1d:0f:95:d8:99:25:ec: 36:72:07:24:f1:99:41:fa:7d:b5:02:2b:93:c4:f9:d0:70:76: e8:79:20:0d:2d:95:94:46:da:e5:b9:44:90:29:f2:03:85:3c: bd:f0:85:a1:ba:68:e2:8b:97:6f:4c:64:45:c7:07:98:a0:01: cb:32:15:04:68:60:b9:4f:17:19:e1:74:0a:e3:fe:05:6e:23: 7e:e2:5d:3f:f0:3e:3d:3c:6e:9c:c7:02:f9:57:f5:d5:11:d1: 56:2f:57:23:89:48:99:eb:3a:f2:6d:f9:5e:64:e3:29:7c:5a: cb:0a:61:cb:ab:05:46:ed:66:73:40:16:74:31:ed:32:52:c0: 9b:19:f4:49 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAapVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTI0MTAxMzM1WhcNMjUxMjI5MTAxMzM1WjAYMRYw FAYDVQQDEw02OTI0MmZkMy00MWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAztu8Lv/qz211JeInM2qku1HABuc0d5VJZhBzA3bYB6d+n8JB1jFCu+93 yXC3/pQGgJl3A5RKtvFj5cZ741R2+JD25lgH+D5dAmAbdpGRUaZo3iomfUyE2y4b I7ATuDZgT2Vynhm2x4L8KYbFTwD1g4cGMfQdOKzlkPghU/0fFS6cBt2xd1Et4TaG UDMwyV34ShIOdDMdP49wCbtcvtAF3qAbEY83RaF5AvQo/2qfefuR2gYOIW9c/KaA KSW1ZX//+H4DqhktxsAkI/xQajtveMSk6pnouKSrZJzOtBi/Ke0OSMnAYpGOuczG 8ZYGHuYZigAGXrkegLyzGQhyDEJ7VQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFLtA uKP64wApcc/wyj/hYXnkjCSLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8zRUZGOUVEMEM5MUUxMUYwQUVFOUQxQzdEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDmsL4AwQCmsYoMA0GCSqG SIb3DQEBCwUAA4IBAQCIgGnUidfta3V5QhMh3ZvlBCxkLUc9Z45A8t8Ody/Ax67J 2HI95I4ilCjfvcSzIfbIIR7oiAZsPhuAoz4etjwzDYTqKw6qIR5oMQcenpf7PEpL sxUVQV1Ny1rbq6low5CI94bA5HhxZMYdWKRCW5Hb1Yki6oTdwx0PldiZJew2cgck 8ZlB+n21AiuTxPnQcHboeSANLZWURtrluUSQKfIDhTy98IWhumjii5dvTGRFxweY oAHLMhUEaGC5TxcZ4XQK4/4FbiN+4l0/8D49PG6cxwL5V/XVEdFWL1cjiUiZ6zry bfleZOMpfFrLCmHLqwVG7WZzQBZ0Me0yUsCbGfRJ -----END CERTIFICATE-----Generated at Wed Dec 3 10:28:56 2025 by rpki-client