This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4758732ACFBF11F0910B45DBDAE4EC9C.roa File: 4758732ACFBF11F0910B45DBDAE4EC9C.roa (raw, json) Hash identifier: rs6OwxGpKaU904mJTcdKO94gC20tQoVGpVtRJ57k9YE= Subject key identifier: 4E:EB:AC:75:BD:11:B5:E3:70:49:DE:84:3B:2E:57:C4:C2:6C:D9:1B Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ABC5 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4758732ACFBF11F0910B45DBDAE4EC9C.roa Signing time: Tue 02 Dec 2025 20:41:29 +0000 ROA not before: Tue 02 Dec 2025 20:41:24 +0000 ROA not after: Fri 25 Aug 2028 20:41:24 +0000 asID: 17561 IP address blocks: 154.196.1.0/24 maxlen: 24 154.196.175.0/24 maxlen: 24 154.196.176.0/24 maxlen: 24 154.196.177.0/24 maxlen: 24 154.196.178.0/24 maxlen: 24 154.196.187.0/24 maxlen: 24 154.196.244.0/24 maxlen: 24 154.197.26.0/24 maxlen: 24 154.197.27.0/24 maxlen: 24 154.197.48.0/24 maxlen: 24 154.197.49.0/24 maxlen: 24 154.197.50.0/24 maxlen: 24 154.197.66.0/24 maxlen: 24 154.197.97.0/24 maxlen: 24 154.197.99.0/24 maxlen: 24 154.197.108.0/24 maxlen: 24 154.204.32.0/24 maxlen: 24 154.204.33.0/24 maxlen: 24 154.204.34.0/24 maxlen: 24 154.209.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109509 (0x1abc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 20:41:24 2025 GMT Not After : Aug 25 20:41:24 2028 GMT Subject: CN=692f4ef9-0c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:38:af:ef:04:85:13:f2:33:1f:20:7e:ee:1d: 2a:96:82:18:48:7f:7f:8a:10:ee:4b:dd:18:b0:06: 67:29:67:98:e6:73:b2:5f:2d:25:0d:22:84:16:e7: 85:19:ea:7e:74:e1:6c:28:d9:99:46:42:28:1e:95: b5:52:34:70:48:71:33:dc:aa:74:a5:21:8f:c1:a7: 34:78:4e:0b:84:20:01:e3:f1:66:ad:67:ca:7b:54: d5:ed:3d:4b:85:8e:e2:f9:3f:6f:07:32:58:5b:e2: 66:40:c3:85:2e:97:c5:d9:2f:37:19:85:f3:b8:77: 90:1d:a7:10:90:11:e0:dc:61:78:de:8f:49:c2:31: 53:af:e6:d3:bf:81:4a:24:78:84:42:e6:a1:14:64: 9c:59:d0:e1:4c:35:3d:7e:6a:a2:31:9c:60:6c:68: c8:75:cb:95:18:97:05:71:1a:b1:b9:a4:82:4d:8c: db:e6:81:f2:2b:7b:b1:56:1d:db:da:85:e3:46:73: 07:bb:f2:b8:9b:bb:6a:7d:d7:db:46:4b:cd:e4:20: 66:90:5a:7e:55:eb:ee:a7:f8:7f:55:2c:65:79:e3: ed:a6:2e:78:cd:ba:0e:c2:e2:9f:a7:8a:68:81:b4: c5:29:f6:c5:e6:1f:cf:f8:0d:8a:26:de:d2:da:99: ab:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EB:AC:75:BD:11:B5:E3:70:49:DE:84:3B:2E:57:C4:C2:6C:D9:1B X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4758732ACFBF11F0910B45DBDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.196.1.0/24 154.196.175.0-154.196.178.255 154.196.187.0/24 154.196.244.0/24 154.197.26.0/23 154.197.48.0-154.197.50.255 154.197.66.0/24 154.197.97.0/24 154.197.99.0/24 154.197.108.0/24 154.204.32.0-154.204.34.255 154.209.148.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:03:92:49:2d:75:a1:46:e7:6b:7f:3b:8a:77:be:64:5c:8b: 0f:38:17:63:3a:c7:0f:5e:0e:6e:0b:8e:8c:5a:b3:41:06:a0: 40:56:46:21:68:c8:20:05:06:67:7c:10:72:15:b6:9d:de:ec: 7a:27:11:cb:2e:5c:21:0d:94:15:7b:1d:80:38:9d:14:5e:1f: 4e:c8:a7:56:e3:46:ea:c2:24:33:62:61:3c:0d:dc:b7:15:3a: 52:4f:a7:09:5f:b4:d8:06:1e:0b:23:6b:af:cb:a9:83:c9:86: 2c:4b:87:14:1c:00:47:52:fa:95:11:71:88:f4:ce:39:10:25: b8:d1:ee:6b:87:bf:1c:b8:8c:a8:b9:35:ac:63:a2:85:04:1a: f8:6b:0a:f8:f5:cc:f0:72:d5:58:47:b6:71:41:db:d7:cb:90: 93:d9:d0:fe:07:3b:e8:00:81:81:49:b0:a4:ad:99:1b:e0:2e: d6:a8:12:93:3d:58:3c:b3:25:ae:10:2e:f1:88:dc:12:ad:69: 25:d3:3f:3a:7e:f2:16:30:d3:b2:8b:8b:78:07:d4:98:4c:9d: 77:ed:e8:bc:85:88:67:0f:86:34:6b:a4:cf:64:5e:20:cf:b3: d9:3f:7f:34:8d:83:2d:e7:ad:22:24:5a:30:29:24:25:39:c3: 99:2d:2e:7b -----BEGIN CERTIFICATE----- MIIF3jCCBMagAwIBAgIDAavFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMjA0MTI0WhcNMjgwODI1MjA0MTI0WjAYMRYw FAYDVQQDEw02OTJmNGVmOS0wYzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA2Div7wSFE/IzHyB+7h0qloIYSH9/ihDuS90YsAZnKWeY5nOyXy0lDSKE FueFGep+dOFsKNmZRkIoHpW1UjRwSHEz3Kp0pSGPwac0eE4LhCAB4/FmrWfKe1TV 7T1LhY7i+T9vBzJYW+JmQMOFLpfF2S83GYXzuHeQHacQkBHg3GF43o9JwjFTr+bT v4FKJHiEQuahFGScWdDhTDU9fmqiMZxgbGjIdcuVGJcFcRqxuaSCTYzb5oHyK3ux Vh3b2oXjRnMHu/K4m7tqfdfbRkvN5CBmkFp+Vevup/h/VSxleePtpi54zboOwuKf p4pogbTFKfbF5h/P+A2KJt7S2pmrQwIDAQABo4IC/zCCAvswHQYDVR0OBBYEFE7r rHW9EbXjcEnehDsuV8TCbNkbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC80NzU4NzMyQUNGQkYxMUYwOTEwQjQ1REJEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAmsQBMAwDBACaxK8DBACa xLIDBACaxLsDBACaxPQDBAGaxRowDAMEBJrFMAMEAJrFMgMEAJrFQgMEAJrFYQME AJrFYwMEAJrFbDAMAwQFmswgAwQAmswiAwQAmtGUMA0GCSqGSIb3DQEBCwUAA4IB AQB8A5JJLXWhRudrfzuKd75kXIsPOBdjOscPXg5uC46MWrNBBqBAVkYhaMggBQZn fBByFbad3ux6JxHLLlwhDZQVex2AOJ0UXh9OyKdW40bqwiQzYmE8Ddy3FTpST6cJ X7TYBh4LI2uvy6mDyYYsS4cUHABHUvqVEXGI9M45ECW40e5rh78cuIyouTWsY6KF BBr4awr49czwctVYR7ZxQdvXy5CT2dD+BzvoAIGBSbCkrZkb4C7WqBKTPVg8syWu EC7xiNwSrWkl0z86fvIWMNOyi4t4B9SYTJ137ei8hYhnD4Y0a6TPZF4gz7PZP380 jYMt560iJFowKSQlOcOZLS57 -----END CERTIFICATE-----Generated at Wed Dec 3 11:06:30 2025 by rpki-client