This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52C4BA1ACFC011F0AE5D0FE3DAE4EC9C.roa File: 52C4BA1ACFC011F0AE5D0FE3DAE4EC9C.roa (raw, json) Hash identifier: PxeS7nnWZn1B+WtUMZosLAgTbqo/jvb2TWQYUiqDPpM= Subject key identifier: 55:A6:45:E8:41:73:B2:39:C6:30:F5:FC:7B:4C:F6:50:93:1E:DA:BE Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ABC7 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52C4BA1ACFC011F0AE5D0FE3DAE4EC9C.roa Signing time: Tue 02 Dec 2025 20:48:58 +0000 ROA not before: Tue 02 Dec 2025 20:48:53 +0000 ROA not after: Mon 04 Sep 2028 20:48:53 +0000 asID: 17561 IP address blocks: 154.196.132.0/24 maxlen: 24 154.197.12.0/24 maxlen: 24 154.197.13.0/24 maxlen: 24 154.204.35.0/24 maxlen: 24 154.204.41.0/24 maxlen: 24 154.204.43.0/24 maxlen: 24 154.204.44.0/24 maxlen: 24 154.204.45.0/24 maxlen: 24 154.204.46.0/24 maxlen: 24 154.204.49.0/24 maxlen: 24 154.204.52.0/24 maxlen: 24 154.204.55.0/24 maxlen: 24 154.204.56.0/24 maxlen: 24 154.204.57.0/24 maxlen: 24 154.204.58.0/24 maxlen: 24 154.204.59.0/24 maxlen: 24 154.204.60.0/24 maxlen: 24 154.204.61.0/24 maxlen: 24 154.204.63.0/24 maxlen: 24 154.219.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109511 (0x1abc7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 20:48:53 2025 GMT Not After : Sep 4 20:48:53 2028 GMT Subject: CN=692f50ba-a75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c0:b1:7b:7e:4b:48:01:c0:7b:e7:37:07:6c: 27:27:a2:88:14:2e:7b:50:bd:86:6b:49:6a:29:04: c2:97:c3:e3:d7:fe:02:04:de:d1:bd:a5:b4:a6:c5: 81:72:68:47:43:2f:ab:4a:41:50:1b:17:3c:48:a4: 43:67:00:98:97:2c:06:95:5d:83:ff:97:51:f0:6d: 29:68:0d:18:1b:0f:1b:51:1b:71:23:55:8a:a6:56: a7:63:ab:95:2f:b8:f0:32:e8:02:f1:fe:97:af:f7: aa:3b:0d:3d:24:62:3c:06:f4:dd:a8:51:1e:36:99: 14:0d:e9:c3:08:e9:5d:a9:f1:83:d5:4f:bb:b6:71: f5:8e:ac:af:8d:31:7d:0e:0f:35:2e:cf:8e:58:c5: 7b:dc:e0:46:79:7d:e7:46:a2:d8:fc:35:d0:96:5d: 11:bd:7a:40:ab:8f:71:f3:ab:12:c0:86:9a:4d:b9: d2:8a:b2:ac:58:0f:f4:09:45:5e:28:fb:bc:ba:98: 41:0b:81:ec:16:3a:c6:b8:9a:e2:5c:06:c6:46:1d: 15:d3:4f:d1:e3:c9:fc:5f:1c:e6:47:5b:3b:9e:64: ff:2b:6b:04:d0:2f:df:ac:8f:dc:ee:66:df:77:f0: 53:05:70:47:8e:7b:ad:dd:36:69:b3:5b:b9:0e:b0: cf:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A6:45:E8:41:73:B2:39:C6:30:F5:FC:7B:4C:F6:50:93:1E:DA:BE X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52C4BA1ACFC011F0AE5D0FE3DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.196.132.0/24 154.197.12.0/23 154.204.35.0/24 154.204.41.0/24 154.204.43.0-154.204.46.255 154.204.49.0/24 154.204.52.0/24 154.204.55.0-154.204.61.255 154.204.63.0/24 154.219.3.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:f9:77:db:f8:aa:a1:0c:93:3c:50:7e:51:12:18:57:52:ca: 4f:cf:d0:54:86:45:f6:ab:b6:b8:6f:da:fb:b4:34:7f:26:31: 7e:95:90:41:d5:ab:67:09:f4:ff:61:d3:7e:e4:00:e3:47:6b: fd:4f:88:8d:19:fa:09:3a:95:a5:94:e9:48:14:8d:b3:80:06: 2a:34:12:76:40:6d:d3:2d:98:e9:cc:86:d4:b8:44:52:ab:25: 93:a3:19:80:85:33:08:56:c7:ac:af:c6:b9:80:cb:81:1e:a1: fc:55:e9:8d:b8:b9:76:ca:48:32:e5:53:1c:00:85:71:8b:d7: 2e:d9:c1:5b:ab:9c:41:24:9a:5e:1c:92:27:71:61:e2:53:9c: f1:5c:e2:00:4f:ac:c0:d0:5d:46:01:c4:c0:b6:20:91:fe:27: dc:95:76:5f:71:1f:d2:4c:4f:a3:ca:73:62:53:a7:3d:cc:df: 27:18:32:d2:e3:09:ff:26:fb:cd:55:5b:f2:06:49:55:98:c5: dd:60:c9:2e:26:96:31:b1:48:58:a3:e2:80:4e:8e:5b:50:ba: 71:fb:c9:06:fe:ff:77:7d:e9:ea:90:05:33:ad:ba:8b:d6:a7: c9:f5:79:be:00:88:13:dc:91:1e:60:0c:bd:38:da:c2:27:1e: bf:80:fb:d0 -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgIDAavHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMjA0ODUzWhcNMjgwOTA0MjA0ODUzWjAYMRYw FAYDVQQDEw02OTJmNTBiYS1hNzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEApcCxe35LSAHAe+c3B2wnJ6KIFC57UL2Ga0lqKQTCl8Pj1/4CBN7RvaW0 psWBcmhHQy+rSkFQGxc8SKRDZwCYlywGlV2D/5dR8G0paA0YGw8bURtxI1WKplan Y6uVL7jwMugC8f6Xr/eqOw09JGI8BvTdqFEeNpkUDenDCOldqfGD1U+7tnH1jqyv jTF9Dg81Ls+OWMV73OBGeX3nRqLY/DXQll0RvXpAq49x86sSwIaaTbnSirKsWA/0 CUVeKPu8uphBC4HsFjrGuJriXAbGRh0V00/R48n8XxzmR1s7nmT/K2sE0C/frI/c 7mbfd/BTBXBHjnut3TZps1u5DrDPIwIDAQABo4IC6zCCAucwHQYDVR0OBBYEFFWm RehBc7I5xjD1/HtM9lCTHtq+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC81MkM0QkExQUNGQzAxMUYwQUU1RDBGRTNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMAwQAmsSEAwQBmsUMAwQAmswj AwQAmswpMAwDBACazCsDBACazC4DBACazDEDBACazDQwDAMEAJrMNwMEAZrMPAME AJrMPwMEAJrbAzANBgkqhkiG9w0BAQsFAAOCAQEALPl32/iqoQyTPFB+URIYV1LK T8/QVIZF9qu2uG/a+7Q0fyYxfpWQQdWrZwn0/2HTfuQA40dr/U+IjRn6CTqVpZTp SBSNs4AGKjQSdkBt0y2Y6cyG1LhEUqslk6MZgIUzCFbHrK/GuYDLgR6h/FXpjbi5 dspIMuVTHACFcYvXLtnBW6ucQSSaXhySJ3Fh4lOc8VziAE+swNBdRgHEwLYgkf4n 3JV2X3Ef0kxPo8pzYlOnPczfJxgy0uMJ/yb7zVVb8gZJVZjF3WDJLiaWMbFIWKPi gE6OW1C6cfvJBv7/d33p6pAFM626i9anyfV5vgCIE9yRHmAMvTjawicev4D70A== -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:17 2025 by rpki-client