This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C2FE012D01F11F0AE4F06C7DAE4EC9C.roa File: 4C2FE012D01F11F0AE4F06C7DAE4EC9C.roa (raw, json) Hash identifier: bMMzxvCWReIk4jJrxHlrC9rYZuPgMfOQWPUfIx5cq1o= Subject key identifier: 32:67:52:C3:73:7F:2A:B7:63:72:A3:95:FD:5B:74:47:82:5D:2C:F2 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC0C Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C2FE012D01F11F0AE4F06C7DAE4EC9C.roa Signing time: Wed 03 Dec 2025 08:08:49 +0000 ROA not before: Wed 03 Dec 2025 08:08:43 +0000 ROA not after: Thu 20 Aug 2026 08:08:43 +0000 asID: 328608 IP address blocks: 154.200.128.0/24 maxlen: 24 154.200.132.0/24 maxlen: 24 154.200.133.0/24 maxlen: 24 154.200.143.0/24 maxlen: 24 154.200.144.0/24 maxlen: 24 154.200.145.0/24 maxlen: 24 154.200.146.0/24 maxlen: 24 154.200.147.0/24 maxlen: 24 154.200.149.0/24 maxlen: 24 154.200.150.0/24 maxlen: 24 154.200.153.0/24 maxlen: 24 154.200.164.0/24 maxlen: 24 154.200.165.0/24 maxlen: 24 154.200.166.0/24 maxlen: 24 154.200.167.0/24 maxlen: 24 154.200.189.0/24 maxlen: 24 154.200.190.0/24 maxlen: 24 154.200.192.0/24 maxlen: 24 154.200.203.0/24 maxlen: 24 154.200.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109580 (0x1ac0c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 08:08:43 2025 GMT Not After : Aug 20 08:08:43 2026 GMT Subject: CN=692ff011-f13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:de:73:4b:bd:4d:5c:5b:5a:3d:a2:32:3d:d4: ba:14:e2:52:f7:fd:d9:2f:5a:02:b9:9c:96:89:22: 06:be:4a:41:52:35:84:e2:3a:61:cb:5b:c9:14:7d: af:89:ce:48:1b:3d:82:dc:ea:86:60:6b:37:a1:ce: 69:b2:84:75:9d:04:a8:ae:2d:38:3f:2e:07:f0:ef: 82:53:58:45:a0:3c:17:f9:c7:61:22:3b:4a:74:19: f9:3d:43:63:ea:d3:8f:58:01:01:a7:de:e7:7d:4a: df:4b:63:cb:06:dd:8b:f2:62:e5:b4:0c:00:88:9e: 4e:8e:e6:fd:1c:cf:46:b5:40:96:8e:81:3b:17:01: f2:b2:33:ea:83:25:13:5a:2b:8e:d5:95:54:12:60: 22:16:11:7f:a0:90:b7:79:e9:a4:39:1e:d6:64:19: e2:e1:0d:51:6a:11:1e:16:7f:d6:3c:18:64:99:16: c3:06:a7:e3:1e:1e:7f:24:64:0b:1e:01:fc:66:84: 38:bb:51:c6:7e:7c:34:1b:58:82:16:15:d1:56:f7: 6e:4e:47:5a:72:c6:7c:61:53:58:fb:79:13:55:8e: 9b:ce:85:1d:14:e6:99:a7:86:dd:ae:81:3e:34:ab: ce:f5:c6:36:97:9b:b4:ad:de:f8:dc:6d:c1:a9:8b: dd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:67:52:C3:73:7F:2A:B7:63:72:A3:95:FD:5B:74:47:82:5D:2C:F2 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C2FE012D01F11F0AE4F06C7DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.200.128.0/24 154.200.132.0/23 154.200.143.0-154.200.147.255 154.200.149.0-154.200.150.255 154.200.153.0/24 154.200.164.0/22 154.200.189.0-154.200.190.255 154.200.192.0/24 154.200.203.0-154.200.204.255 Signature Algorithm: sha256WithRSAEncryption 70:b3:3b:b7:0e:1d:b4:a9:47:6c:7d:a0:c7:68:dd:54:d0:0b: 0b:f3:2e:ec:fc:b3:6b:85:0f:8c:20:99:e5:d9:00:10:a5:16: 60:63:90:5c:94:3d:9c:5f:46:9e:03:ee:fd:d1:0c:e1:96:40: 7f:9e:2c:1d:99:49:bd:bc:cf:76:83:ae:e4:56:c9:7c:69:1a: 16:2d:d7:ee:3f:a7:70:25:94:c8:90:02:1d:20:49:bd:1a:2f: 1a:83:13:c7:da:f3:5d:32:6c:10:b4:60:0e:66:2b:8c:0b:da: 43:59:96:92:cb:d6:87:e1:73:e9:52:c3:87:29:85:a9:d6:15: f1:fc:b0:3a:3a:04:62:4e:76:e7:de:a8:a4:99:75:3b:1f:ab: 0a:f6:de:a2:ad:1a:c3:7e:eb:0b:c1:dc:6f:89:71:dc:55:5a: 6c:23:f3:ca:f8:5b:e5:d7:4f:09:4b:eb:e7:b7:00:c5:65:63: 19:fe:c8:39:15:32:56:f4:b1:16:ed:c8:c7:62:e1:3f:4f:29: 35:b3:82:6e:ae:86:87:9a:4a:03:0c:30:fa:6e:14:3a:66:1c: 62:dc:c7:72:79:f0:02:09:bf:13:ef:5a:85:ae:db:1c:37:ea: a5:d3:3e:6b:d9:e8:9a:be:84:70:7c:ac:c4:11:98:41:9c:ac: 95:3a:ef:13 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIDAawMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMDgwODQzWhcNMjYwODIwMDgwODQzWjAYMRYw FAYDVQQDEw02OTJmZjAxMS1mMTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA495zS71NXFtaPaIyPdS6FOJS9/3ZL1oCuZyWiSIGvkpBUjWE4jphy1vJ FH2vic5IGz2C3OqGYGs3oc5psoR1nQSori04Py4H8O+CU1hFoDwX+cdhIjtKdBn5 PUNj6tOPWAEBp97nfUrfS2PLBt2L8mLltAwAiJ5Ojub9HM9GtUCWjoE7FwHysjPq gyUTWiuO1ZVUEmAiFhF/oJC3eemkOR7WZBni4Q1RahEeFn/WPBhkmRbDBqfjHh5/ JGQLHgH8ZoQ4u1HGfnw0G1iCFhXRVvduTkdacsZ8YVNY+3kTVY6bzoUdFOaZp4bd roE+NKvO9cY2l5u0rd743G3BqYvdQwIDAQABo4IC9TCCAvEwHQYDVR0OBBYEFDJn UsNzfyq3Y3Kjlf1bdEeCXSzyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC80QzJGRTAxMkQwMUYxMUYwQUU0RjA2QzdEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAmsiAAwQBmsiEMAwDBACa yI8DBAKayJAwDAMEAJrIlQMEAJrIlgMEAJrImQMEAprIpDAMAwQAmsi9AwQAmsi+ AwQAmsjAMAwDBACayMsDBACayMwwDQYJKoZIhvcNAQELBQADggEBAHCzO7cOHbSp R2x9oMdo3VTQCwvzLuz8s2uFD4wgmeXZABClFmBjkFyUPZxfRp4D7v3RDOGWQH+e LB2ZSb28z3aDruRWyXxpGhYt1+4/p3AllMiQAh0gSb0aLxqDE8fa810ybBC0YA5m K4wL2kNZlpLL1ofhc+lSw4cphanWFfH8sDo6BGJOdufeqKSZdTsfqwr23qKtGsN+ 6wvB3G+JcdxVWmwj88r4W+XXTwlL6+e3AMVlYxn+yDkVMlb0sRbtyMdi4T9PKTWz gm6uhoeaSgMMMPpuFDpmHGLcx3J58AIJvxPvWoWu2xw36qXTPmvZ6Jq+hHB8rMQR mEGcrJU67xM= -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:17 2025 by rpki-client