This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D97BB1CDF0811F0845ADEC5DAE4EC9C.roa File: 4D97BB1CDF0811F0845ADEC5DAE4EC9C.roa (raw, json) Hash identifier: SUfrNoMg9TGY7Z/cstAr+ndagSgKhSHAnGr1LeiJqGQ= Subject key identifier: 5A:A8:D4:DA:7A:8C:6D:74:55:AC:C6:98:A1:54:EB:F3:F4:2A:8E:A3 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AFBB Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D97BB1CDF0811F0845ADEC5DAE4EC9C.roa Signing time: Mon 22 Dec 2025 07:32:01 +0000 ROA not before: Mon 22 Dec 2025 07:31:55 +0000 ROA not after: Mon 26 Jan 2026 07:31:55 +0000 asID: 6079 IP address blocks: 154.90.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 25 Dec 2025 08:09:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110523 (0x1afbb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 22 07:31:55 2025 GMT Not After : Jan 26 07:31:55 2026 GMT Subject: CN=6948f3f0-1eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:38:8c:1f:53:af:6b:95:73:fb:c1:5b:e5:28: 51:6c:e6:5c:57:3f:fa:3b:9e:40:91:e6:8f:fc:fd: 46:61:f0:b1:7b:c3:b6:fb:cf:7a:80:43:9c:86:b9: 19:54:f9:95:1c:00:38:3c:08:09:5c:2c:f3:c0:6e: eb:37:0c:8c:07:4b:66:42:4b:3e:0e:92:7b:03:e8: fb:7f:b2:19:ec:e4:c4:ad:a8:d5:a2:67:d7:6f:9a: 74:81:b4:c1:d7:36:48:1a:d4:a5:b0:45:8e:73:7e: 82:f4:07:32:6e:92:79:30:f0:2e:fa:cd:cb:da:86: 05:d6:4f:3b:ad:7d:4c:a8:2c:1c:d8:b7:0e:bd:44: cc:2f:b0:d9:d1:7e:b8:48:7e:49:9a:b3:9e:68:a3: 0e:0f:d2:f0:08:15:2d:b6:c3:86:5a:a0:86:62:72: 3e:34:8a:6d:7b:46:ca:d8:1a:59:45:3b:b7:01:f3: b5:46:8c:93:b3:88:14:f6:8d:c6:b2:c0:2f:47:f5: 85:80:cc:5c:05:20:20:e0:32:56:4a:f1:4c:5b:79: 47:73:d7:db:66:a7:2a:4b:28:fa:16:70:70:14:b6: ca:06:82:37:19:f2:80:92:0f:04:18:ad:74:49:9b: 13:2b:c1:eb:9b:a5:1a:58:ef:9c:dd:83:fb:7c:49: 21:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A8:D4:DA:7A:8C:6D:74:55:AC:C6:98:A1:54:EB:F3:F4:2A:8E:A3 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D97BB1CDF0811F0845ADEC5DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.90.191.0/24 Signature Algorithm: sha256WithRSAEncryption 95:6f:e2:ae:f5:2c:74:30:f4:b0:58:1a:61:99:93:dc:6e:5d: cb:1d:8a:e8:a0:5c:9e:2b:8d:a8:c1:82:e7:d9:22:f3:75:98: ee:05:59:84:0d:a3:1f:c9:53:81:95:80:e9:34:cf:bc:49:a6: b4:80:5f:b2:28:84:88:10:ea:13:a2:b3:aa:f3:58:e2:bf:63: 92:02:64:5c:45:fd:fd:78:34:0b:f3:b9:7b:dc:67:41:66:85: f8:9b:cb:c5:3b:0b:50:47:b0:e3:a5:76:b4:3d:1c:27:94:81: 4e:4b:25:9a:83:07:3b:d8:84:f9:21:bf:d1:b9:3a:8e:f8:f4: 7c:b4:1b:5a:65:1d:9e:35:01:3d:5c:d2:19:88:af:50:21:d5: 20:71:c7:b4:1e:ab:c6:50:17:78:5b:fc:fa:94:ff:38:bb:65: 40:fc:27:34:08:fc:29:23:66:6d:2d:99:16:d8:c6:c0:9a:1c: 31:d4:27:6d:98:12:6d:6c:2e:2b:83:0b:8a:6a:2f:7c:a6:c0: af:6c:81:eb:3d:56:fc:f1:36:30:2f:e4:98:c5:3e:66:40:0b: 25:14:2f:b8:de:bf:8e:ed:68:18:26:66:50:01:b0:24:f5:79: 09:65:16:fe:b5:0c:3a:82:8c:d2:f7:48:c4:ac:6e:9a:3d:3c: 87:49:80:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAa+7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjIyMDczMTU1WhcNMjYwMTI2MDczMTU1WjAYMRYw FAYDVQQDEw02OTQ4ZjNmMC0xZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA0TiMH1Ova5Vz+8Fb5ShRbOZcVz/6O55AkeaP/P1GYfCxe8O2+896gEOc hrkZVPmVHAA4PAgJXCzzwG7rNwyMB0tmQks+DpJ7A+j7f7IZ7OTErajVomfXb5p0 gbTB1zZIGtSlsEWOc36C9AcybpJ5MPAu+s3L2oYF1k87rX1MqCwc2LcOvUTML7DZ 0X64SH5JmrOeaKMOD9LwCBUttsOGWqCGYnI+NIpte0bK2BpZRTu3AfO1RoyTs4gU 9o3GssAvR/WFgMxcBSAg4DJWSvFMW3lHc9fbZqcqSyj6FnBwFLbKBoI3GfKAkg8E GK10SZsTK8Hrm6UaWO+c3YP7fEkhkwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFFqo 1Np6jG10VazGmKFU6/P0Ko6jMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC80RDk3QkIxQ0RGMDgxMUYwODQ1QURFQzVEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlq/MA0GCSqGSIb3DQEB CwUAA4IBAQCVb+Ku9Sx0MPSwWBphmZPcbl3LHYrooFyeK42owYLn2SLzdZjuBVmE DaMfyVOBlYDpNM+8Saa0gF+yKISIEOoTorOq81jiv2OSAmRcRf39eDQL87l73GdB ZoX4m8vFOwtQR7DjpXa0PRwnlIFOSyWagwc72IT5Ib/RuTqO+PR8tBtaZR2eNQE9 XNIZiK9QIdUgcce0HqvGUBd4W/z6lP84u2VA/Cc0CPwpI2ZtLZkW2MbAmhwx1Cdt mBJtbC4rgwuKai98psCvbIHrPVb88TYwL+SYxT5mQAslFC+43r+O7WgYJmZQAbAk 9XkJZRb+tQw6gozS90jErG6aPTyHSYDE -----END CERTIFICATE-----Generated at Tue Dec 23 09:38:07 2025 by rpki-client