This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E839F02D01E11F0975D02C1DAE4EC9C.roa File: 5E839F02D01E11F0975D02C1DAE4EC9C.roa (raw, json) Hash identifier: zgDPR+3ebFGM75V+R7bKy+v8bg41gh0qlctlcB8seto= Subject key identifier: 00:B5:AC:D8:77:45:3F:58:12:6C:AD:5D:46:0B:AE:D9:A7:CA:8B:4D Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC0A Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E839F02D01E11F0975D02C1DAE4EC9C.roa Signing time: Wed 03 Dec 2025 08:02:16 +0000 ROA not before: Wed 03 Dec 2025 08:02:02 +0000 ROA not after: Mon 05 Jan 2026 08:02:02 +0000 asID: 44559 IP address blocks: 154.209.193.0/24 maxlen: 24 154.209.194.0/24 maxlen: 24 154.218.27.0/24 maxlen: 24 154.219.193.0/24 maxlen: 24 154.219.194.0/24 maxlen: 24 154.219.197.0/24 maxlen: 24 154.219.200.0/24 maxlen: 24 154.219.204.0/24 maxlen: 24 154.219.205.0/24 maxlen: 24 154.219.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109578 (0x1ac0a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 08:02:02 2025 GMT Not After : Jan 5 08:02:02 2026 GMT Subject: CN=692fee88-4e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:1b:36:28:1c:d3:44:1a:74:be:1e:f0:ed:41: 4b:0d:e8:a8:fb:9e:a7:46:c7:0b:cc:a8:29:29:79: 4d:5a:9b:fb:d7:27:3c:59:11:63:97:18:03:4f:54: 4a:60:0c:6d:9c:d5:b3:00:a4:f7:26:2a:fa:8a:c2: 5f:66:d0:b7:71:22:39:a3:76:76:65:a1:a4:fa:97: 44:fc:84:87:85:c6:e5:3b:ec:1d:35:a4:b0:ab:c8: f6:1d:04:1d:04:7d:b4:d5:b1:74:fd:c6:46:29:37: eb:e1:ca:9d:90:89:21:9d:b1:a3:e8:a9:e4:fc:c6: be:68:32:21:eb:f4:6f:07:71:12:6c:cb:24:4a:60: 67:63:f9:2c:be:93:ae:e2:0f:62:f9:11:fc:c4:95: 1f:45:3e:80:79:1c:7b:6a:32:59:88:5d:7e:3f:fa: 93:cf:3a:53:02:82:f4:0f:18:fc:ea:12:a1:f9:22: 87:67:36:28:d8:0f:77:25:7b:b7:3a:d6:87:87:d4: a3:90:d5:46:cb:66:33:4f:32:89:8d:92:9c:9d:5b: b7:43:1b:01:ff:46:f3:e2:72:df:f9:28:e6:50:93: 5e:2c:b1:b5:df:65:88:d2:06:0e:e3:65:89:45:ba: 6e:3f:73:17:ee:cf:c5:5f:f1:1b:d6:11:c6:96:98: 82:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B5:AC:D8:77:45:3F:58:12:6C:AD:5D:46:0B:AE:D9:A7:CA:8B:4D X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E839F02D01E11F0975D02C1DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.209.193.0-154.209.194.255 154.218.27.0/24 154.219.193.0-154.219.194.255 154.219.197.0/24 154.219.200.0/24 154.219.204.0-154.219.206.255 Signature Algorithm: sha256WithRSAEncryption 21:a0:d8:b0:b5:bf:73:48:5e:f4:db:8e:96:da:19:79:2c:d7: 4d:76:39:e8:ce:6f:47:a2:97:08:c4:3c:be:1c:24:aa:68:6d: 6a:21:0c:8f:22:6f:bb:2b:e3:12:fd:56:ca:6a:79:4d:70:1e: 25:29:81:69:cb:12:79:fe:74:f8:21:ff:66:f3:94:8e:5c:a3: 54:04:e1:a0:7f:71:49:92:48:f1:09:da:3d:4f:16:d8:c2:06: ee:0c:ad:d8:50:3c:45:60:1f:82:44:8c:ac:38:85:2c:01:42: 45:66:46:1b:fb:c8:38:6b:f3:ad:16:7a:76:0a:78:b6:d2:f3: 63:ff:a3:f0:e1:7c:3c:d9:9c:95:e0:50:44:5c:f5:da:26:59: 95:7f:51:35:35:5a:59:f5:d2:39:76:49:96:7d:ae:7a:7c:fc: 3a:d4:31:a2:c0:6b:3d:2b:bd:c4:54:c0:37:20:de:79:06:3c: 39:c1:f3:b1:61:11:57:1c:c2:b1:d2:48:7e:d2:6f:fa:d3:2c: 1b:19:5f:03:35:9b:62:25:d1:75:96:ff:70:06:c9:31:61:39: 3a:f5:81:ad:68:2a:fb:47:d3:4f:a3:d3:8a:ec:b6:1e:d4:01: 21:d3:47:e5:14:3e:72:76:08:98:80:37:1f:fb:12:33:b0:04: fa:bf:0f:db -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIDAawKMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMDgwMjAyWhcNMjYwMTA1MDgwMjAyWjAYMRYw FAYDVQQDEw02OTJmZWU4OC00ZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA5hs2KBzTRBp0vh7w7UFLDeio+56nRscLzKgpKXlNWpv71yc8WRFjlxgD T1RKYAxtnNWzAKT3Jir6isJfZtC3cSI5o3Z2ZaGk+pdE/ISHhcblO+wdNaSwq8j2 HQQdBH201bF0/cZGKTfr4cqdkIkhnbGj6Knk/Ma+aDIh6/RvB3ESbMskSmBnY/ks vpOu4g9i+RH8xJUfRT6AeRx7ajJZiF1+P/qTzzpTAoL0Dxj86hKh+SKHZzYo2A93 JXu3OtaHh9SjkNVGy2YzTzKJjZKcnVu3QxsB/0bz4nLf+SjmUJNeLLG132WI0gYO 42WJRbpuP3MX7s/FX/Eb1hHGlpiCOQIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFAC1 rNh3RT9YEmytXUYLrtmnyotNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC81RTgzOUYwMkQwMUUxMUYwOTc1RDAyQzFEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8MAwDBACa0cEDBACa0cIDBACa 2hswDAMEAJrbwQMEAJrbwgMEAJrbxQMEAJrbyDAMAwQCmtvMAwQAmtvOMA0GCSqG SIb3DQEBCwUAA4IBAQAhoNiwtb9zSF70246W2hl5LNdNdjnozm9HopcIxDy+HCSq aG1qIQyPIm+7K+MS/VbKanlNcB4lKYFpyxJ5/nT4If9m85SOXKNUBOGgf3FJkkjx Cdo9TxbYwgbuDK3YUDxFYB+CRIysOIUsAUJFZkYb+8g4a/OtFnp2Cni20vNj/6Pw 4Xw82ZyV4FBEXPXaJlmVf1E1NVpZ9dI5dkmWfa56fPw61DGiwGs9K73EVMA3IN55 Bjw5wfOxYRFXHMKx0kh+0m/60ywbGV8DNZtiJdF1lv9wBskxYTk69YGtaCr7R9NP o9OK7LYe1AEh00flFD5ydgiYgDcf+xIzsAT6vw/b -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:10 2025 by rpki-client