This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F6DD4B8C60B11F08BEA2EE7DAE4EC9C.roa File: 5F6DD4B8C60B11F08BEA2EE7DAE4EC9C.roa (raw, json) Hash identifier: C1Tt/D087zEcOKT+niU6QCsMWQLP7dYZ/8V7ZNeTPas= Subject key identifier: EF:76:F5:69:7A:3E:BB:32:DC:A7:53:F3:FD:23:06:F9:02:32:4D:D2 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AA00 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F6DD4B8C60B11F08BEA2EE7DAE4EC9C.roa Signing time: Thu 20 Nov 2025 12:21:00 +0000 ROA not before: Thu 20 Nov 2025 12:20:51 +0000 ROA not after: Tue 30 Dec 2025 12:20:51 +0000 asID: 395886 IP address blocks: 154.201.72.0/21 maxlen: 24 154.201.88.0/22 maxlen: 24 154.201.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109056 (0x1aa00) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 20 12:20:51 2025 GMT Not After : Dec 30 12:20:51 2025 GMT Subject: CN=691f07ac-0e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:03:be:da:ff:98:96:cc:82:a0:3e:32:be:19: 34:0f:9a:53:4b:0b:bd:9f:12:4f:1d:69:70:7e:b8: 53:0d:d3:8a:d1:99:b7:98:b3:6d:c7:d9:2e:78:d4: 0a:56:3c:78:ac:4b:14:6a:58:72:fe:8f:79:88:dc: b8:35:4a:5f:8d:3d:39:2b:89:91:a8:a7:63:2c:f1: 50:3a:1f:a8:a3:c9:d9:48:95:d5:fe:68:cb:29:15: 1a:93:cd:ea:c0:94:ab:0d:19:6d:59:7f:4b:30:06: 00:03:10:28:76:15:f4:86:08:96:d5:d6:52:a5:2a: a4:72:7b:9e:a9:81:df:b2:7c:c7:9c:7d:bf:e5:a0: f3:6e:68:28:8c:f9:0e:e0:d5:74:06:f4:af:5e:3c: 92:cd:6e:06:08:e6:9e:aa:a9:64:aa:25:64:26:4a: 26:1e:c1:bb:9d:f2:f3:c7:8f:a0:b1:a0:2c:3a:eb: fe:18:d0:71:c6:93:65:a2:0a:2f:8b:36:7d:20:b1: af:db:0f:ad:4b:1a:3a:3b:1e:e9:40:ca:e2:bf:3e: dc:35:5d:84:bf:82:2e:7a:56:2c:9c:b9:c8:60:ce: 31:ab:2d:79:5a:73:90:96:60:0c:d3:46:bc:ab:78: 06:a3:76:d5:cb:4c:55:0a:98:a0:44:d8:4d:e0:0c: 92:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:76:F5:69:7A:3E:BB:32:DC:A7:53:F3:FD:23:06:F9:02:32:4D:D2 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F6DD4B8C60B11F08BEA2EE7DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.201.72.0/21 154.201.88.0-154.201.93.255 Signature Algorithm: sha256WithRSAEncryption 8e:b7:a6:11:b6:21:b9:84:ab:98:58:01:94:c0:5a:e7:85:78: 89:33:12:e9:b0:96:2c:c1:43:d7:81:b5:8d:11:0d:3d:49:38: 2d:2e:7f:76:67:1a:a5:ad:44:92:32:8f:08:3b:b1:d9:10:3d: 84:cd:e4:d8:c4:52:4a:d2:7f:8b:12:00:eb:60:36:6c:1b:bf: 23:90:59:d8:33:d6:4f:2e:7c:50:dc:24:e7:9d:79:3e:bc:b7: fe:52:94:73:c1:14:34:e1:48:de:0d:cd:94:55:d0:ed:da:26: fc:33:aa:25:13:64:f3:7b:51:46:f2:04:d6:d6:84:b1:4d:72: cb:b7:ae:a0:ab:95:fe:dc:ac:cf:c4:75:a4:51:f8:ff:9d:1e: 76:d9:36:b0:7f:ef:d6:13:ad:66:92:f8:6f:e5:3f:cb:31:7c: 34:13:e6:e4:84:4c:ca:3f:f8:a0:d4:8b:4f:00:4e:80:ab:19: f5:cf:ba:4c:2f:6d:b7:41:98:53:b2:f3:38:a3:d9:32:26:bb: 11:c8:f1:e0:d7:ef:eb:27:ca:35:78:42:e2:7a:81:ac:6c:8f: ed:9e:ce:c1:45:df:2a:75:ff:50:61:d4:bf:02:f6:30:e9:be: 4e:af:81:dc:a6:9f:a3:0a:26:2f:36:47:4b:00:cf:cd:2f:a4: c1:36:f9:50 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgIDAaoAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTIwMTIyMDUxWhcNMjUxMjMwMTIyMDUxWjAYMRYw FAYDVQQDEw02OTFmMDdhYy0wZTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA4wO+2v+YlsyCoD4yvhk0D5pTSwu9nxJPHWlwfrhTDdOK0Zm3mLNtx9ku eNQKVjx4rEsUalhy/o95iNy4NUpfjT05K4mRqKdjLPFQOh+oo8nZSJXV/mjLKRUa k83qwJSrDRltWX9LMAYAAxAodhX0hgiW1dZSpSqkcnueqYHfsnzHnH2/5aDzbmgo jPkO4NV0BvSvXjySzW4GCOaeqqlkqiVkJkomHsG7nfLzx4+gsaAsOuv+GNBxxpNl ogovizZ9ILGv2w+tSxo6Ox7pQMrivz7cNV2Ev4IuelYsnLnIYM4xqy15WnOQlmAM 00a8q3gGo3bVy0xVCpigRNhN4AySgQIDAQABo4ICszCCAq8wHQYDVR0OBBYEFO92 9Wl6Prsy3KdT8/0jBvkCMk3SMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC81RjZERDRCOEM2MEIxMUYwOEJFQTJFRTdEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQDmslIMAwDBAOayVgDBAGa yVwwDQYJKoZIhvcNAQELBQADggEBAI63phG2IbmEq5hYAZTAWueFeIkzEumwlizB Q9eBtY0RDT1JOC0uf3ZnGqWtRJIyjwg7sdkQPYTN5NjEUkrSf4sSAOtgNmwbvyOQ Wdgz1k8ufFDcJOedeT68t/5SlHPBFDThSN4NzZRV0O3aJvwzqiUTZPN7UUbyBNbW hLFNcsu3rqCrlf7crM/EdaRR+P+dHnbZNrB/79YTrWaS+G/lP8sxfDQT5uSETMo/ +KDUi08AToCrGfXPukwvbbdBmFOy8zij2TImuxHI8eDX7+snyjV4QuJ6gaxsj+2e zsFF3yp1/1Bh1L8C9jDpvk6vgdymn6MKJi82R0sAz80vpME2+VA= -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:14 2025 by rpki-client