This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52C6AB9ED02011F0BB62C2CBDAE4EC9C.roa File: 52C6AB9ED02011F0BB62C2CBDAE4EC9C.roa (raw, json) Hash identifier: /Nfli5DuHt6TSG/TxdG5LqyYFlBQL9ZSoKojStBgjhw= Subject key identifier: EA:ED:A8:62:7B:91:16:C7:C2:B7:F1:E3:6D:1A:6D:01:19:4A:34:85 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC11 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52C6AB9ED02011F0BB62C2CBDAE4EC9C.roa Signing time: Wed 03 Dec 2025 08:16:10 +0000 ROA not before: Wed 03 Dec 2025 08:16:05 +0000 ROA not after: Fri 06 Nov 2026 08:16:05 +0000 asID: 328608 IP address blocks: 154.200.188.0/24 maxlen: 24 154.200.205.0/24 maxlen: 24 154.200.206.0/24 maxlen: 24 154.200.207.0/24 maxlen: 24 154.200.208.0/24 maxlen: 24 154.200.209.0/24 maxlen: 24 154.200.210.0/24 maxlen: 24 154.200.211.0/24 maxlen: 24 154.200.212.0/24 maxlen: 24 154.200.213.0/24 maxlen: 24 154.200.220.0/24 maxlen: 24 154.200.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109585 (0x1ac11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 08:16:05 2025 GMT Not After : Nov 6 08:16:05 2026 GMT Subject: CN=692ff1ca-c5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ed:91:ff:6b:9c:af:7b:9d:4d:4f:89:18:ff: 92:df:b2:aa:6b:a9:a7:7d:f0:71:70:29:60:33:3b: 8c:92:1f:75:f1:ac:33:7d:80:b0:10:a4:f0:2e:20: 52:ad:9c:83:48:71:ea:f5:e9:a0:ad:9d:dc:dc:8e: d0:ba:8f:25:fe:9a:4b:3e:7a:c2:2d:66:02:96:d5: 04:89:f9:8a:4b:a8:d4:e6:7e:d6:ce:c1:1f:15:5e: 68:4e:ce:a7:6e:b2:0f:b0:28:1a:19:d1:13:63:25: 9e:76:04:f9:3b:af:5d:63:ab:e3:9e:2b:0f:ab:c3: 00:ef:39:41:66:c8:e9:c7:c7:6a:57:03:c5:61:6a: a3:ed:19:34:8b:b6:dd:98:2b:9c:2a:6a:09:4e:c5: f5:32:ef:c0:00:00:81:d4:98:0f:6c:0b:3d:eb:55: 88:64:85:d3:8f:14:27:22:6b:a9:50:a3:f7:8f:d7: e1:c2:9f:59:cd:83:54:8d:60:37:6d:d2:f5:56:e7: fd:71:c2:35:6e:b4:d5:02:53:e2:56:bc:ec:bf:b9: 72:93:15:3f:83:82:00:b4:ac:e3:b6:64:54:76:55: 2a:25:c5:5c:2e:93:fe:f8:b1:7d:01:8f:84:fe:3c: 72:f2:ac:39:ca:f8:9d:75:4a:0b:47:4b:6a:e6:5b: 6c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:ED:A8:62:7B:91:16:C7:C2:B7:F1:E3:6D:1A:6D:01:19:4A:34:85 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52C6AB9ED02011F0BB62C2CBDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.200.188.0/24 154.200.205.0-154.200.213.255 154.200.220.0/24 154.200.245.0/24 Signature Algorithm: sha256WithRSAEncryption 15:96:4a:37:e3:2d:54:1c:84:05:57:34:d1:13:45:5b:91:ad: 5f:a0:99:7a:c7:c6:21:03:cb:a2:59:e4:c3:95:75:48:da:81: b2:54:db:30:25:2b:e0:4a:4f:21:ba:a0:fb:2d:b0:26:0b:3a: d8:d3:2d:5c:a3:53:10:ac:b6:fd:60:04:4c:f8:a8:c0:33:b9: 4d:08:95:b6:35:d0:77:ed:b8:2f:d0:b5:16:0f:e1:42:c9:e0: d3:ef:f2:44:58:1a:df:5e:01:e0:82:f6:a9:a7:8b:00:39:d9: 4e:b2:aa:dc:d5:80:a3:dc:3e:ed:01:30:42:68:47:58:7c:95: af:e3:d5:91:63:bb:97:33:96:72:9a:45:17:47:38:c8:a3:36: 34:25:d7:20:52:3d:23:d8:71:4d:17:f0:df:0b:e4:25:58:e3: 4b:21:e5:51:44:41:88:43:01:d5:76:2a:a4:79:ce:02:29:b6: b0:a6:ac:86:7f:df:c9:77:3f:df:da:63:35:cd:2e:a0:cf:1a: f3:62:f4:fc:f5:56:e9:d2:26:34:88:a6:96:58:34:e3:c1:01: a9:33:45:1a:ca:77:b2:9e:42:31:aa:34:66:4c:f9:27:bb:c8: 10:0f:99:41:6d:80:b3:3b:c8:72:73:f4:13:b4:06:65:e9:80: a9:55:ab:df -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIDAawRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMDgxNjA1WhcNMjYxMTA2MDgxNjA1WjAYMRYw FAYDVQQDEw02OTJmZjFjYS1jNWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA0O2R/2ucr3udTU+JGP+S37Kqa6mnffBxcClgMzuMkh918awzfYCwEKTw LiBSrZyDSHHq9emgrZ3c3I7Quo8l/ppLPnrCLWYCltUEifmKS6jU5n7WzsEfFV5o Ts6nbrIPsCgaGdETYyWedgT5O69dY6vjnisPq8MA7zlBZsjpx8dqVwPFYWqj7Rk0 i7bdmCucKmoJTsX1Mu/AAACB1JgPbAs961WIZIXTjxQnImupUKP3j9fhwp9ZzYNU jWA3bdL1Vuf9ccI1brTVAlPiVrzsv7lykxU/g4IAtKzjtmRUdlUqJcVcLpP++LF9 AY+E/jxy8qw5yviddUoLR0tq5ltsQwIDAQABo4ICvzCCArswHQYDVR0OBBYEFOrt qGJ7kRbHwrfx420abQEZSjSFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC81MkM2QUI5RUQwMjAxMUYwQkI2MkMyQ0JEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAmsi8MAwDBACayM0DBAGa yNQDBACayNwDBACayPUwDQYJKoZIhvcNAQELBQADggEBABWWSjfjLVQchAVXNNET RVuRrV+gmXrHxiEDy6JZ5MOVdUjagbJU2zAlK+BKTyG6oPstsCYLOtjTLVyjUxCs tv1gBEz4qMAzuU0IlbY10HftuC/QtRYP4ULJ4NPv8kRYGt9eAeCC9qmniwA52U6y qtzVgKPcPu0BMEJoR1h8la/j1ZFju5czlnKaRRdHOMijNjQl1yBSPSPYcU0X8N8L 5CVY40sh5VFEQYhDAdV2KqR5zgIptrCmrIZ/38l3P9/aYzXNLqDPGvNi9Pz1VunS JjSIppZYNOPBAakzRRrKd7KeQjGqNGZM+Se7yBAPmUFtgLM7yHJz9BO0BmXpgKlV q98= -----END CERTIFICATE-----Generated at Wed Dec 3 10:24:49 2025 by rpki-client