This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D2418B4C6D111F0AA0316CADAE4EC9C.roa File: 4D2418B4C6D111F0AA0316CADAE4EC9C.roa (raw, json) Hash identifier: PrvPaQXv4WQYnPN7DJnSXEdazEo7bE3ehug9jIyOIu4= Subject key identifier: D2:9C:3D:EB:33:65:C2:0E:64:EE:35:83:FF:71:4B:19:99:92:CF:13 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AA1C Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D2418B4C6D111F0AA0316CADAE4EC9C.roa Signing time: Fri 21 Nov 2025 11:57:50 +0000 ROA not before: Fri 21 Nov 2025 11:57:45 +0000 ROA not after: Thu 04 Dec 2025 11:57:45 +0000 asID: 54801 IP address blocks: 154.81.136.0/24 maxlen: 24 154.81.140.0/24 maxlen: 24 154.81.164.0/24 maxlen: 24 154.81.166.0/24 maxlen: 24 154.81.178.0/24 maxlen: 24 154.81.181.0/24 maxlen: 24 154.81.191.0/24 maxlen: 24 154.82.18.0/24 maxlen: 24 154.82.20.0/24 maxlen: 24 154.83.128.0/24 maxlen: 24 154.83.135.0/24 maxlen: 24 154.83.137.0/24 maxlen: 24 154.83.141.0/24 maxlen: 24 154.83.158.0/24 maxlen: 24 154.83.187.0/24 maxlen: 24 154.83.190.0/24 maxlen: 24 154.83.191.0/24 maxlen: 24 154.83.209.0/24 maxlen: 24 154.83.211.0/24 maxlen: 24 154.83.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 04 Dec 2025 11:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109084 (0x1aa1c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 21 11:57:45 2025 GMT Not After : Dec 4 11:57:45 2025 GMT Subject: CN=692053be-3ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:38:d1:b6:3c:47:76:41:63:e8:b1:46:c8:50: 9b:a3:e6:fb:ef:49:c3:50:7a:75:8d:0c:b6:1e:83: f8:d7:84:49:e0:88:18:75:e2:a3:20:9b:e6:9a:f7: 8d:25:61:aa:8f:27:f7:69:f5:44:ec:be:f8:66:4e: 58:13:b9:65:cb:9d:d0:dc:84:76:23:84:e5:a8:4c: 55:c7:82:e7:76:40:30:98:7c:87:1d:2e:43:6f:fb: 43:45:3c:48:79:cc:5a:65:fe:79:4a:ad:a3:4b:07: 1f:56:08:02:03:c1:eb:00:6e:c5:96:b3:ed:f4:82: f8:50:16:4d:74:7c:65:a4:73:45:e6:bc:f0:a5:e8: 39:ec:8e:9a:57:fb:46:0e:d1:72:97:f9:c7:33:1a: a3:96:31:73:fd:7a:f6:6d:ef:f0:f8:29:bf:45:e2: 40:25:e2:43:3d:c9:ce:3b:29:c9:e6:f2:a3:bf:c3: c8:d9:83:8d:a8:18:d6:d3:b9:da:46:d2:3d:5d:ae: c6:ec:d4:0e:7b:0e:a4:f4:19:c4:2e:78:b5:bb:dc: cf:5b:cb:e2:b1:30:62:b0:13:76:16:f8:e3:43:8a: dd:65:21:61:e7:00:27:f3:86:21:e3:db:88:56:e6: a7:cb:e5:e2:d8:34:a2:1c:7e:e7:63:7e:46:79:dd: eb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9C:3D:EB:33:65:C2:0E:64:EE:35:83:FF:71:4B:19:99:92:CF:13 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D2418B4C6D111F0AA0316CADAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.81.136.0/24 154.81.140.0/24 154.81.164.0/24 154.81.166.0/24 154.81.178.0/24 154.81.181.0/24 154.81.191.0/24 154.82.18.0/24 154.82.20.0/24 154.83.128.0/24 154.83.135.0/24 154.83.137.0/24 154.83.141.0/24 154.83.158.0/24 154.83.187.0/24 154.83.190.0/23 154.83.209.0/24 154.83.211.0/24 154.83.247.0/24 Signature Algorithm: sha256WithRSAEncryption 55:0f:c0:d0:1c:41:1f:01:f0:fb:30:32:39:6b:2e:03:a9:68: d1:e8:ee:bd:13:c8:db:3d:30:12:fb:4f:7b:3d:d7:42:75:1a: 2d:bb:0d:55:70:4b:08:6b:92:07:b7:62:76:2d:b3:fa:15:a9: 81:32:b7:6d:5b:1a:2f:e3:d2:a4:ec:aa:40:bb:92:56:d3:ce: 41:97:81:b3:c5:75:5b:a1:dc:23:79:e0:4b:f0:be:e3:64:1f: e3:fa:40:2d:33:92:4e:2b:e4:75:37:8d:57:f8:14:e6:6e:06: 2e:88:04:67:44:f6:83:51:d1:49:79:4d:35:0c:14:99:5e:f3: 53:68:d7:77:b2:dc:fa:79:0a:bd:80:9b:08:45:9c:eb:1e:bc: b8:87:b6:e2:db:57:ba:7c:41:bb:03:82:9a:78:64:bd:23:38: 40:43:83:17:09:ac:88:82:4b:de:f8:28:af:4a:3b:61:dd:54: 42:e4:11:90:ab:ee:c1:26:6f:e0:0b:a8:d2:2d:73:bb:37:2f: 4e:58:e0:a9:d7:38:16:64:f3:8f:a7:88:c8:09:19:aa:40:a3: 9a:03:91:6b:ff:17:99:be:77:56:33:57:0d:25:73:77:ef:44: 84:c4:e6:53:1e:d3:69:f0:e8:13:38:2b:fd:0a:7b:cc:3d:68: 80:a2:64:2e -----BEGIN CERTIFICATE----- MIIF8TCCBNmgAwIBAgIDAaocMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTIxMTE1NzQ1WhcNMjUxMjA0MTE1NzQ1WjAYMRYw FAYDVQQDEw02OTIwNTNiZS0zY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAmTjRtjxHdkFj6LFGyFCbo+b770nDUHp1jQy2HoP414RJ4IgYdeKjIJvm mveNJWGqjyf3afVE7L74Zk5YE7lly53Q3IR2I4TlqExVx4LndkAwmHyHHS5Db/tD RTxIecxaZf55Sq2jSwcfVggCA8HrAG7FlrPt9IL4UBZNdHxlpHNF5rzwpeg57I6a V/tGDtFyl/nHMxqjljFz/Xr2be/w+Cm/ReJAJeJDPcnOOynJ5vKjv8PI2YONqBjW 07naRtI9Xa7G7NQOew6k9BnELni1u9zPW8visTBisBN2FvjjQ4rdZSFh5wAn84Yh 49uIVuany+Xi2DSiHH7nY35Ged3rVwIDAQABo4IDEjCCAw4wHQYDVR0OBBYEFNKc PeszZcIOZO41g/9xSxmZks8TMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC80RDI0MThCNEM2RDExMUYwQUEwMzE2Q0FEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAJpRiAMEAJpRjAMEAJpR pAMEAJpRpgMEAJpRsgMEAJpRtQMEAJpRvwMEAJpSEgMEAJpSFAMEAJpTgAMEAJpT hwMEAJpTiQMEAJpTjQMEAJpTngMEAJpTuwMEAZpTvgMEAJpT0QMEAJpT0wMEAJpT 9zANBgkqhkiG9w0BAQsFAAOCAQEAVQ/A0BxBHwHw+zAyOWsuA6lo0ejuvRPI2z0w EvtPez3XQnUaLbsNVXBLCGuSB7didi2z+hWpgTK3bVsaL+PSpOyqQLuSVtPOQZeB s8V1W6HcI3ngS/C+42Qf4/pALTOSTivkdTeNV/gU5m4GLogEZ0T2g1HRSXlNNQwU mV7zU2jXd7Lc+nkKvYCbCEWc6x68uIe24ttXunxBuwOCmnhkvSM4QEODFwmsiIJL 3vgor0o7Yd1UQuQRkKvuwSZv4Auo0i1zuzcvTljgqdc4FmTzj6eIyAkZqkCjmgOR a/8Xmb53VjNXDSVzd+9EhMTmUx7TafDoEzgr/Qp7zD1ogKJkLg== -----END CERTIFICATE-----Generated at Wed Dec 3 11:07:14 2025 by rpki-client