This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D257AA0C3B211F0A09E46A4DAE4EC9C.roa File: 4D257AA0C3B211F0A09E46A4DAE4EC9C.roa (raw, json) Hash identifier: MjniTr3omPB2yBc41MNGq9MikJM5ve9flB/ZLHol/1g= Subject key identifier: 8A:F3:A3:16:5A:C4:3E:BE:49:2F:5D:5D:D6:23:D3:A9:64:B9:8E:A5 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A955 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D257AA0C3B211F0A09E46A4DAE4EC9C.roa Signing time: Mon 17 Nov 2025 12:38:22 +0000 ROA not before: Mon 17 Nov 2025 12:38:16 +0000 ROA not after: Fri 27 Nov 2026 12:38:16 +0000 asID: 152920 IP address blocks: 154.91.158.0/24 maxlen: 24 154.91.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108885 (0x1a955) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 17 12:38:16 2025 GMT Not After : Nov 27 12:38:16 2026 GMT Subject: CN=691b173e-d735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:dd:b1:bc:b7:c0:0c:62:b2:ab:70:c1:2c:ce: c0:7e:30:17:7b:4f:29:95:a2:c4:84:97:09:80:67: 93:74:7e:b2:83:c2:dc:12:fc:c5:ab:fa:ca:de:ed: a8:2d:0d:f9:8c:29:1c:53:39:b0:6a:eb:78:67:71: 2c:77:19:8a:54:19:54:5f:40:a7:32:c3:2f:3e:b1: 6e:d1:c8:95:e1:23:2b:2b:b1:e9:c9:2a:47:93:a8: 6a:24:30:64:24:94:f2:90:8a:e3:6c:df:c4:28:79: 87:f7:f3:42:6e:b9:af:d3:eb:72:56:2b:da:b6:7e: 68:aa:ae:0a:08:f8:0e:50:72:6a:3e:47:ab:d3:ec: 85:76:f3:25:f8:19:2f:d1:4e:ba:64:23:79:65:06: 60:b8:08:d9:42:20:ea:d4:41:d5:c1:74:fd:75:f0: 4a:75:3a:c9:17:ea:bd:40:66:8f:18:65:fd:7a:a1: 54:b5:79:23:7e:d1:a3:a6:cf:1b:de:28:9a:35:aa: 16:39:aa:9b:c7:ef:7a:f2:89:c9:47:46:bb:08:c5: 98:f9:bc:71:41:de:ba:ae:cb:92:da:87:91:4a:12: 28:9b:fd:36:a8:b2:20:38:ac:70:83:7b:cc:3e:e3: 1d:e1:34:c7:7a:a0:05:72:91:79:05:e7:70:7f:6d: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F3:A3:16:5A:C4:3E:BE:49:2F:5D:5D:D6:23:D3:A9:64:B9:8E:A5 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D257AA0C3B211F0A09E46A4DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.91.158.0/23 Signature Algorithm: sha256WithRSAEncryption a3:42:5c:78:72:0a:5a:07:72:aa:8e:00:8c:36:75:ce:23:d6: 7f:a2:92:44:cc:b1:da:c1:31:33:07:56:a6:93:da:70:97:e9: 82:d6:c5:b7:f8:46:d3:9c:8d:88:2f:75:23:92:aa:d3:9b:c2: 95:9c:bc:e4:32:57:a8:a1:ef:bd:d4:d2:32:bf:e1:3d:7b:0e: f4:7f:69:c6:af:54:a9:69:98:12:d2:14:85:6d:53:78:f5:9d: 17:35:6f:fd:13:65:f8:46:df:5b:37:82:38:51:8a:8d:6f:5b: ee:b9:fc:7c:0f:87:88:a7:04:3b:6f:9f:a1:14:1f:34:b6:11: 87:64:fa:d7:17:99:55:5f:9a:f3:d3:e1:c1:ab:75:f2:ed:9e: 8d:3d:8f:27:0e:ca:b5:c7:30:fd:46:7b:6f:b8:88:fc:f1:ab: 76:cd:d7:4e:6d:bf:71:b2:40:11:46:57:51:39:87:17:5c:49: 0f:e7:0d:c4:70:79:fd:a8:5e:90:6d:00:f6:03:bd:8c:32:7e: c1:14:25:4c:51:c2:cd:46:02:f7:3c:50:0c:7d:22:66:39:04: 3f:38:07:d3:c1:92:3f:8f:81:39:e0:5d:78:cf:f1:0e:8a:83: 8f:b7:4a:22:79:ca:ad:cb:0d:38:7b:4c:ac:34:4e:95:8b:73: 3a:c0:91:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAalVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTE3MTIzODE2WhcNMjYxMTI3MTIzODE2WjAYMRYw FAYDVQQDEw02OTFiMTczZS1kNzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA4d2xvLfADGKyq3DBLM7AfjAXe08plaLEhJcJgGeTdH6yg8LcEvzFq/rK 3u2oLQ35jCkcUzmwaut4Z3EsdxmKVBlUX0CnMsMvPrFu0ciV4SMrK7HpySpHk6hq JDBkJJTykIrjbN/EKHmH9/NCbrmv0+tyVivatn5oqq4KCPgOUHJqPker0+yFdvMl +Bkv0U66ZCN5ZQZguAjZQiDq1EHVwXT9dfBKdTrJF+q9QGaPGGX9eqFUtXkjftGj ps8b3iiaNaoWOaqbx+968onJR0a7CMWY+bxxQd66rsuS2oeRShIom/02qLIgOKxw g3vMPuMd4TTHeqAFcpF5Bedwf20h+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIrz oxZaxD6+SS9dXdYj06lkuY6lMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC80RDI1N0FBMEMzQjIxMUYwQTA5RTQ2QTREQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmlueMA0GCSqGSIb3DQEB CwUAA4IBAQCjQlx4cgpaB3KqjgCMNnXOI9Z/opJEzLHawTEzB1amk9pwl+mC1sW3 +EbTnI2IL3UjkqrTm8KVnLzkMleooe+91NIyv+E9ew70f2nGr1SpaZgS0hSFbVN4 9Z0XNW/9E2X4Rt9bN4I4UYqNb1vuufx8D4eIpwQ7b5+hFB80thGHZPrXF5lVX5rz 0+HBq3Xy7Z6NPY8nDsq1xzD9RntvuIj88at2zddObb9xskARRldROYcXXEkP5w3E cHn9qF6QbQD2A72MMn7BFCVMUcLNRgL3PFAMfSJmOQQ/OAfTwZI/j4E54F14z/EO ioOPt0oiecqtyw04e0ysNE6Vi3M6wJH4 -----END CERTIFICATE-----Generated at Wed Dec 3 10:26:03 2025 by rpki-client