This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/535C7814BF0811F0B29F70B3DAE4EC9C.roa File: 535C7814BF0811F0B29F70B3DAE4EC9C.roa (raw, json) Hash identifier: LDmqwx3X0krJEwDLZltEeg35a5mF7DW8Jzp0vly1PAk= Subject key identifier: DB:27:FC:DB:8E:F2:A0:A0:68:BF:56:B2:43:58:33:8B:A4:27:A0:18 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A85B Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/535C7814BF0811F0B29F70B3DAE4EC9C.roa Signing time: Tue 11 Nov 2025 14:11:33 +0000 ROA not before: Tue 11 Nov 2025 14:11:28 +0000 ROA not after: Thu 11 Dec 2025 14:11:28 +0000 asID: 214449 IP address blocks: 154.209.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108635 (0x1a85b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 11 14:11:28 2025 GMT Not After : Dec 11 14:11:28 2025 GMT Subject: CN=69134415-3e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:52:17:f3:08:99:e2:38:6c:d0:52:77:2f:0f: f9:41:91:24:19:60:38:d9:8b:69:49:93:5c:a1:a7: 19:e2:b9:c1:16:19:e2:6b:a8:b9:30:8e:4a:df:c2: 0f:7e:9c:ba:45:8b:ee:61:77:4f:2d:11:8b:85:2a: 12:14:b9:b2:b9:c8:da:07:a7:3c:3b:cb:be:27:be: 3b:a9:9d:8f:5b:a4:81:7c:d2:70:c2:98:f6:6d:7d: b0:49:09:0f:d2:23:a7:e6:de:88:dc:4b:2e:6a:d6: 1c:78:37:66:67:f1:05:7c:14:fa:a3:a5:3d:f9:bb: c0:09:02:d3:cf:a8:94:43:52:d4:f0:76:d7:d8:b9: 75:63:28:3f:26:bf:2d:2b:ac:b7:ff:e0:df:3b:82: 59:61:90:b7:7b:fe:73:fc:c3:b5:82:86:fd:5f:57: d1:12:e9:37:e4:f3:c2:10:c6:7a:3a:58:01:ec:b4: ef:72:e1:01:3d:41:b6:6c:f4:0c:ec:8d:e9:51:84: 56:c4:70:39:d7:89:b1:d6:f9:43:c7:e0:cb:3d:73: 4e:51:2b:e2:43:1b:0b:6d:b6:4a:83:a6:ad:3e:ab: d3:af:fb:fb:dc:f1:f6:8e:2e:04:3d:08:de:d6:f3: df:b5:85:c6:43:5f:43:49:2b:cc:2e:c7:40:e8:fb: 08:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:27:FC:DB:8E:F2:A0:A0:68:BF:56:B2:43:58:33:8B:A4:27:A0:18 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/535C7814BF0811F0B29F70B3DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.209.134.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:01:b9:07:66:3e:d3:9a:ad:1b:55:d9:b0:18:0c:22:8b:b8: d4:70:d6:be:5a:95:03:77:45:7e:16:b8:f0:60:46:54:53:e6: ac:ae:ff:ef:cf:f1:92:b2:50:98:68:e4:d9:fd:02:ee:e6:6e: cb:cc:46:b7:be:6e:2b:a6:8e:a4:b9:8f:0e:5a:14:a3:89:26: b9:c8:de:a1:38:94:eb:0d:ab:1b:75:45:18:71:96:cf:0a:fb: 95:a5:58:2b:e2:d4:bc:53:e7:98:68:7f:60:e5:be:d7:0f:40: ce:64:d9:4c:c8:10:6a:c7:29:95:fa:0a:db:d8:0c:b2:6f:2e: 73:81:26:51:5e:b4:64:ed:1d:60:11:3a:46:57:2d:28:33:fd: 2f:35:d5:8f:38:81:50:4a:5e:8e:90:eb:cc:71:18:ec:75:6a: 70:9a:71:d4:9e:c9:2b:32:09:12:31:44:c0:00:8e:7b:23:29: 7a:60:b2:d5:09:53:1f:8b:bd:9e:00:23:f0:14:11:f8:2d:a5: 29:62:49:8a:46:53:59:5d:25:06:eb:5b:8a:23:34:a9:47:df: 72:f1:93:85:55:89:19:f1:d6:8e:07:50:06:b7:ca:90:2c:86: 03:1b:09:74:9e:30:b0:9e:cc:23:1c:c0:2e:ea:ea:71:f6:f1: 95:ec:ab:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAahbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTExMTQxMTI4WhcNMjUxMjExMTQxMTI4WjAYMRYw FAYDVQQDEw02OTEzNDQxNS0zZTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAqlIX8wiZ4jhs0FJ3Lw/5QZEkGWA42YtpSZNcoacZ4rnBFhnia6i5MI5K 38IPfpy6RYvuYXdPLRGLhSoSFLmyucjaB6c8O8u+J747qZ2PW6SBfNJwwpj2bX2w SQkP0iOn5t6I3EsuatYceDdmZ/EFfBT6o6U9+bvACQLTz6iUQ1LU8HbX2Ll1Yyg/ Jr8tK6y3/+DfO4JZYZC3e/5z/MO1gob9X1fREuk35PPCEMZ6OlgB7LTvcuEBPUG2 bPQM7I3pUYRWxHA514mx1vlDx+DLPXNOUSviQxsLbbZKg6atPqvTr/v73PH2ji4E PQje1vPftYXGQ19DSSvMLsdA6PsIfQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNsn /NuO8qCgaL9WskNYM4ukJ6AYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC81MzVDNzgxNEJGMDgxMUYwQjI5RjcwQjNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmtGGMA0GCSqGSIb3DQEB CwUAA4IBAQA/AbkHZj7Tmq0bVdmwGAwii7jUcNa+WpUDd0V+FrjwYEZUU+asrv/v z/GSslCYaOTZ/QLu5m7LzEa3vm4rpo6kuY8OWhSjiSa5yN6hOJTrDasbdUUYcZbP CvuVpVgr4tS8U+eYaH9g5b7XD0DOZNlMyBBqxymV+grb2Ayyby5zgSZRXrRk7R1g ETpGVy0oM/0vNdWPOIFQSl6OkOvMcRjsdWpwmnHUnskrMgkSMUTAAI57Iyl6YLLV CVMfi72eACPwFBH4LaUpYkmKRlNZXSUG61uKIzSpR99y8ZOFVYkZ8daOB1AGt8qQ LIYDGwl0njCwnswjHMAu6upx9vGV7Kua -----END CERTIFICATE-----Generated at Wed Dec 3 10:26:08 2025 by rpki-client