This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C9079ACCB8911F082778C85DAE4EC9C.roa File: 5C9079ACCB8911F082778C85DAE4EC9C.roa (raw, json) Hash identifier: xWGZSiH8gGwbfIv0bGIGvGzkkksubuXPTc0x/Jktpd8= Subject key identifier: 02:1E:2D:0D:36:44:3B:08:62:13:B6:6D:C1:58:CD:0A:D5:79:0D:E7 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AAD7 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C9079ACCB8911F082778C85DAE4EC9C.roa Signing time: Thu 27 Nov 2025 12:05:28 +0000 ROA not before: Thu 27 Nov 2025 12:05:19 +0000 ROA not after: Thu 24 Dec 2026 12:05:19 +0000 asID: 149014 IP address blocks: 154.211.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109271 (0x1aad7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 27 12:05:19 2025 GMT Not After : Dec 24 12:05:19 2026 GMT Subject: CN=69283e87-5306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ef:c0:5b:c8:ba:c5:9d:35:ab:5c:fd:37:76: d7:0e:af:bb:b5:51:b3:fa:0c:5d:51:0f:b4:2b:9d: 9d:c7:e4:04:36:55:b4:8b:39:a9:fb:79:e7:05:93: 0d:a7:01:44:6b:82:35:5d:95:d8:01:16:c1:f4:3d: 02:d8:ec:15:dd:b0:c7:d1:f9:0b:d4:ab:4e:73:6b: 0c:2e:d7:08:f9:72:8e:86:5b:e7:71:89:a6:e2:1b: 09:2c:e3:53:9b:ef:5c:69:f6:3a:76:e2:0d:cb:8d: 5f:5a:b8:5c:0f:43:0a:af:18:2f:8c:67:d6:ba:14: 97:4a:be:97:8b:22:b7:e6:30:a3:fb:c8:12:59:64: 09:00:61:93:f9:c9:81:cc:b1:04:c2:54:26:2d:54: 17:d7:40:3a:04:17:5d:48:60:26:83:75:22:57:14: dc:1f:a6:97:23:87:14:d8:91:c9:a4:ce:e1:2c:62: b0:ee:e9:b3:05:33:5d:54:31:57:6e:07:ff:6c:df: 7f:58:3a:76:e8:8f:51:75:ce:6c:5a:7c:7b:25:02: ef:67:34:ba:9d:7d:9d:8b:0e:df:be:29:58:84:b9: 4c:52:ec:3f:08:c9:80:6f:1b:c3:17:8c:2e:1a:c1: 93:c9:e1:f5:12:2a:d1:8b:da:cc:3b:56:38:65:b3: 4b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:1E:2D:0D:36:44:3B:08:62:13:B6:6D:C1:58:CD:0A:D5:79:0D:E7 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C9079ACCB8911F082778C85DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.211.20.0/22 Signature Algorithm: sha256WithRSAEncryption 94:4f:2e:72:17:2d:37:8d:af:53:72:25:48:9b:0b:29:c8:d7: e9:6e:9e:5a:21:b6:bd:d3:07:49:41:a0:62:0c:59:68:51:18: 25:98:a9:a7:bd:32:38:17:c9:9b:c4:6a:b8:2a:a5:6f:b1:ae: 18:fa:72:34:b8:67:ad:05:86:ac:bd:e4:22:46:e1:53:d5:ca: 76:42:b4:bf:3a:7f:a4:ef:c0:14:64:ec:f1:2b:78:a6:25:5e: f4:ed:92:b2:90:0f:8b:2d:40:58:14:c9:c0:3f:0a:2c:72:6a: 6a:9d:c2:27:9c:70:c9:dc:a5:66:d4:82:ad:9e:ee:06:13:b8: d0:10:6f:77:61:56:ac:b4:4e:a8:f8:0b:cc:db:80:a2:a1:76: 4c:f6:38:79:c5:a1:f7:80:e0:92:0f:3b:2e:ca:b4:82:7a:ea: f7:26:c5:de:81:01:68:5f:f7:04:82:ef:d6:17:31:9f:00:71: 42:c6:0b:cb:22:85:5f:4b:8a:dd:f7:bd:f7:1f:e7:c9:98:4c: 6e:e0:dc:33:dc:73:ea:f1:0e:5d:b3:59:19:f5:0d:8a:0d:94: ba:b7:cd:10:b4:7e:79:c1:4a:e9:b8:1f:be:cf:6a:0c:ca:46: cc:75:0a:bb:65:b4:cb:d0:5c:7b:63:42:5c:8b:b2:38:32:11: f7:41:ed:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAarXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTI3MTIwNTE5WhcNMjYxMjI0MTIwNTE5WjAYMRYw FAYDVQQDEw02OTI4M2U4Ny01MzA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA2O/AW8i6xZ01q1z9N3bXDq+7tVGz+gxdUQ+0K52dx+QENlW0izmp+3nn BZMNpwFEa4I1XZXYARbB9D0C2OwV3bDH0fkL1KtOc2sMLtcI+XKOhlvncYmm4hsJ LONTm+9cafY6duINy41fWrhcD0MKrxgvjGfWuhSXSr6XiyK35jCj+8gSWWQJAGGT +cmBzLEEwlQmLVQX10A6BBddSGAmg3UiVxTcH6aXI4cU2JHJpM7hLGKw7umzBTNd VDFXbgf/bN9/WDp26I9Rdc5sWnx7JQLvZzS6nX2diw7fvilYhLlMUuw/CMmAbxvD F4wuGsGTyeH1EirRi9rMO1Y4ZbNLTQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAIe LQ02RDsIYhO2bcFYzQrVeQ3nMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC81QzkwNzlBQ0NCODkxMUYwODI3NzhDODVEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtMUMA0GCSqGSIb3DQEB CwUAA4IBAQCUTy5yFy03ja9TciVImwspyNfpbp5aIba90wdJQaBiDFloURglmKmn vTI4F8mbxGq4KqVvsa4Y+nI0uGetBYasveQiRuFT1cp2QrS/On+k78AUZOzxK3im JV707ZKykA+LLUBYFMnAPwoscmpqncInnHDJ3KVm1IKtnu4GE7jQEG93YVastE6o +AvM24CioXZM9jh5xaH3gOCSDzsuyrSCeur3JsXegQFoX/cEgu/WFzGfAHFCxgvL IoVfS4rd9733H+fJmExu4Nwz3HPq8Q5ds1kZ9Q2KDZS6t80QtH55wUrpuB++z2oM ykbMdQq7ZbTL0Fx7Y0Jci7I4MhH3Qe1V -----END CERTIFICATE-----Generated at Wed Dec 3 11:06:30 2025 by rpki-client