This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C21B960C00C11F0B85A2493DAE4EC9C.roa File: 4C21B960C00C11F0B85A2493DAE4EC9C.roa (raw, json) Hash identifier: BWhaVaH1m2Ls0SH4JNy/9/cDyABN2+qdBc1YJwVvfWY= Subject key identifier: 41:61:32:69:4E:E9:C0:53:67:92:4F:36:EE:B2:B6:71:CE:BA:62:B3 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A8BF Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C21B960C00C11F0B85A2493DAE4EC9C.roa Signing time: Wed 12 Nov 2025 21:12:30 +0000 ROA not before: Wed 12 Nov 2025 21:12:25 +0000 ROA not after: Mon 18 May 2026 21:12:25 +0000 asID: 55020 IP address blocks: 154.91.48.0/20 maxlen: 24 154.91.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108735 (0x1a8bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 12 21:12:25 2025 GMT Not After : May 18 21:12:25 2026 GMT Subject: CN=6914f83e-0027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ad:a4:8a:4d:cf:fc:c5:94:ca:d9:49:a5:3d: 30:b8:5d:97:af:02:ad:55:cc:93:bc:98:cc:83:b2: 3b:54:2d:25:0b:47:93:f1:aa:34:96:e1:9a:ec:d0: b4:3b:5f:1c:43:5b:7e:c9:dc:27:1f:02:3c:fa:cb: a6:21:86:5e:fe:c7:8f:aa:7e:1c:80:00:fd:24:45: ed:95:42:e5:2b:90:d5:97:de:46:09:52:d5:8c:d6: 2c:47:62:9b:fc:79:cc:d0:5a:61:ea:10:c3:6a:89: 1c:8d:8f:c8:71:7c:88:8f:c2:1a:20:d2:eb:69:18: 78:0f:91:83:a5:07:72:e3:a0:02:3f:6a:39:8f:52: d8:08:07:6f:65:5a:11:86:20:b2:d0:2a:e9:cb:2f: aa:6c:4e:bc:f0:2f:ab:17:a7:12:38:45:b6:d6:01: 14:0e:b8:61:4f:d6:4b:be:e4:bc:6e:8a:36:cf:35: fc:c0:52:6c:ef:20:50:18:85:55:e3:df:0c:51:53: ab:f2:41:5e:22:a7:8f:2d:e3:6c:c2:0b:a5:65:28: 36:57:28:c2:40:bf:58:27:3c:d5:63:1b:66:1f:0a: f5:3a:b8:9a:fb:23:98:90:f5:99:80:d3:53:bd:ef: f2:05:eb:ce:b4:23:a8:45:07:a7:2b:65:da:31:89: 06:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:61:32:69:4E:E9:C0:53:67:92:4F:36:EE:B2:B6:71:CE:BA:62:B3 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C21B960C00C11F0B85A2493DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.91.48.0/20 154.91.176.0/20 Signature Algorithm: sha256WithRSAEncryption 3f:0c:ea:f9:50:9a:68:65:78:14:da:6c:cd:82:af:93:25:08: 1e:d6:99:66:1f:53:4e:47:aa:95:c1:7e:77:e2:35:e9:4c:d9: 64:54:2f:e9:33:76:73:c9:3e:6b:65:0d:cf:e4:03:50:cf:3d: 18:65:cd:5a:30:9b:1b:63:38:0b:14:47:6e:44:c6:06:db:15: eb:b5:15:a8:df:6d:9b:72:20:9b:39:0c:3e:a3:54:30:39:90: eb:10:4a:45:cc:77:54:29:a1:b6:47:4d:11:27:37:b0:96:5f: 82:9c:31:c9:b0:96:ad:f2:76:6a:65:92:98:8c:aa:9b:fa:79: 4e:76:0e:02:29:62:34:7a:ea:cd:27:6d:fb:ba:23:07:d1:cb: cd:ee:0a:f4:f6:74:35:05:e3:98:63:7f:4d:98:ee:ed:08:40: 27:37:26:b2:7e:d5:46:01:14:5e:96:a3:bb:5d:61:e3:90:89: ad:62:3a:c9:ab:37:66:52:c5:0e:02:10:8b:9d:98:b4:44:28: 12:92:34:eb:a9:fb:6c:d5:f8:26:72:20:7a:85:41:c8:be:ea: 4b:92:6b:78:a2:d8:e7:13:19:ac:63:7b:34:5c:9e:fb:61:4c: 88:75:01:d8:a1:1d:ce:87:a1:4c:7d:67:93:4e:d7:06:5e:12: 5d:6a:cb:a0 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAai/MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTEyMjExMjI1WhcNMjYwNTE4MjExMjI1WjAYMRYw FAYDVQQDEw02OTE0ZjgzZS0wMDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAsq2kik3P/MWUytlJpT0wuF2XrwKtVcyTvJjMg7I7VC0lC0eT8ao0luGa 7NC0O18cQ1t+ydwnHwI8+sumIYZe/sePqn4cgAD9JEXtlULlK5DVl95GCVLVjNYs R2Kb/HnM0Fph6hDDaokcjY/IcXyIj8IaINLraRh4D5GDpQdy46ACP2o5j1LYCAdv ZVoRhiCy0Crpyy+qbE688C+rF6cSOEW21gEUDrhhT9ZLvuS8boo2zzX8wFJs7yBQ GIVV498MUVOr8kFeIqePLeNswgulZSg2VyjCQL9YJzzVYxtmHwr1Oria+yOYkPWZ gNNTve/yBevOtCOoRQenK2XaMYkGZwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFEFh MmlO6cBTZ5JPNu6ytnHOumKzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC80QzIxQjk2MEMwMEMxMUYwQjg1QTI0OTNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEmlswAwQEmluwMA0GCSqG SIb3DQEBCwUAA4IBAQA/DOr5UJpoZXgU2mzNgq+TJQge1plmH1NOR6qVwX534jXp TNlkVC/pM3ZzyT5rZQ3P5ANQzz0YZc1aMJsbYzgLFEduRMYG2xXrtRWo322bciCb OQw+o1QwOZDrEEpFzHdUKaG2R00RJzewll+CnDHJsJat8nZqZZKYjKqb+nlOdg4C KWI0eurNJ237uiMH0cvN7gr09nQ1BeOYY39NmO7tCEAnNyayftVGARRelqO7XWHj kImtYjrJqzdmUsUOAhCLnZi0RCgSkjTrqfts1fgmciB6hUHIvupLkmt4otjnExms Y3s0XJ77YUyIdQHYoR3Oh6FMfWeTTtcGXhJdasug -----END CERTIFICATE-----Generated at Wed Dec 3 10:28:58 2025 by rpki-client