This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/636D5FA4E0D511F0A84E1391DAE4EC9C.roa File: 636D5FA4E0D511F0A84E1391DAE4EC9C.roa (raw, json) Hash identifier: yn1j09xSSA+KIHn2ZKWxBwlJMdAG1/T/Z/TYhYTSDKw= Subject key identifier: 35:17:62:1C:65:5E:C3:4B:D3:0B:67:38:F6:C3:B3:BA:BE:3C:62:01 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B0E5 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/636D5FA4E0D511F0A84E1391DAE4EC9C.roa Signing time: Wed 24 Dec 2025 14:32:35 +0000 ROA not before: Wed 24 Dec 2025 14:32:30 +0000 ROA not after: Sat 31 Jan 2026 14:32:30 +0000 asID: 62240 IP address blocks: 154.194.59.0/24 maxlen: 24 154.194.67.0/24 maxlen: 24 154.194.109.0/24 maxlen: 24 154.194.110.0/24 maxlen: 24 154.194.111.0/24 maxlen: 24 154.194.117.0/24 maxlen: 24 154.194.207.0/24 maxlen: 24 154.195.113.0/24 maxlen: 24 154.198.63.0/24 maxlen: 24 154.198.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 29 Dec 2025 00:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110821 (0x1b0e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 24 14:32:30 2025 GMT Not After : Jan 31 14:32:30 2026 GMT Subject: CN=694bf983-f0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3b:11:f5:4c:bd:62:25:cf:1f:3b:f6:b4:e6: 13:b8:d9:57:e3:e9:e4:e9:fa:1e:1b:8d:75:33:0e: 41:cf:c7:9e:86:e5:0e:53:36:db:34:af:0e:5b:cc: 84:2d:62:a0:72:b1:59:8e:38:65:02:21:60:6c:13: 2e:93:d5:36:f3:5d:58:0d:d7:a9:9d:01:cf:4b:a9: 34:5e:e6:7d:1d:59:cb:2c:7b:b8:34:41:3e:dc:93: 34:78:f9:f9:d7:40:67:d6:f0:1a:17:4e:53:be:3c: 6a:c7:b7:8f:23:f7:82:29:66:75:14:0f:e3:d6:cc: bd:84:8b:e1:61:f1:5a:4a:0a:ed:76:1b:d6:bc:ef: 17:6a:5b:4f:2e:eb:b0:20:c5:a6:e3:d7:4e:94:25: fa:8b:3e:36:55:69:bd:2a:25:ef:ee:1a:0b:0d:3a: d2:ae:0e:e1:73:bf:00:11:e5:df:a4:a7:ae:3e:6b: ee:e2:09:46:34:06:33:9e:6f:14:59:0e:15:2c:1d: f7:f1:7a:ec:70:a9:16:d6:5a:9b:70:29:3f:89:4e: a8:f2:66:2e:cc:7f:1f:ac:c9:4e:d0:e3:ff:24:52: ca:7b:4c:13:21:ea:b9:8e:3d:d3:fb:64:c4:9f:f9: da:68:82:75:80:7f:07:31:f5:d1:4d:12:f3:65:04: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:17:62:1C:65:5E:C3:4B:D3:0B:67:38:F6:C3:B3:BA:BE:3C:62:01 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/636D5FA4E0D511F0A84E1391DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.194.59.0/24 154.194.67.0/24 154.194.109.0-154.194.111.255 154.194.117.0/24 154.194.207.0/24 154.195.113.0/24 154.198.63.0/24 154.198.191.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:d1:b7:bc:93:1b:58:77:d3:b2:70:1f:3c:06:27:89:05:b1: 4a:9b:23:95:d7:f8:b8:27:fc:23:88:b2:8e:9e:df:4f:32:a2: e1:ab:4d:d0:37:94:ab:d0:22:99:e2:97:e5:f4:b6:48:fc:a0: 01:af:15:33:ad:d4:85:d4:9d:85:d9:d3:70:36:16:90:10:b5: db:29:72:f8:a6:54:23:e0:96:e0:59:3a:6a:ee:16:e1:f6:f1: 3d:c2:16:2b:58:0b:24:6c:d4:3c:60:ba:4c:90:55:04:ea:2e: ca:ac:6e:ed:8c:06:42:89:16:33:eb:27:15:27:44:85:c9:2b: e4:c7:da:2c:f2:69:90:33:59:e7:35:a9:59:d8:ec:e9:4a:a5: b2:0d:03:97:f8:35:5c:34:d7:dd:10:d3:24:00:01:d6:b8:fb: 76:d4:3a:6e:97:a9:9a:d1:57:03:6d:8b:d7:5f:02:0e:8b:68: 90:ba:d0:0f:66:e1:58:5a:c6:21:39:61:ca:51:4c:83:e9:d2: a3:05:8f:9c:90:dc:8d:47:dc:db:65:b4:9c:98:bd:fc:69:22: 4a:4f:b6:18:7d:b7:28:ba:5c:03:2a:08:ce:0c:83:bf:4e:03: 88:f7:f1:6b:6e:ef:ea:fb:3b:cb:0b:e7:50:2c:c3:8d:6c:e1: 7b:cf:84:07 -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIDAbDlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjI0MTQzMjMwWhcNMjYwMTMxMTQzMjMwWjAYMRYw FAYDVQQDEw02OTRiZjk4My1mMGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA3zsR9Uy9YiXPHzv2tOYTuNlX4+nk6foeG411Mw5Bz8eehuUOUzbbNK8O W8yELWKgcrFZjjhlAiFgbBMuk9U2811YDdepnQHPS6k0XuZ9HVnLLHu4NEE+3JM0 ePn510Bn1vAaF05Tvjxqx7ePI/eCKWZ1FA/j1sy9hIvhYfFaSgrtdhvWvO8XaltP LuuwIMWm49dOlCX6iz42VWm9KiXv7hoLDTrSrg7hc78AEeXfpKeuPmvu4glGNAYz nm8UWQ4VLB338XrscKkW1lqbcCk/iU6o8mYuzH8frMlO0OP/JFLKe0wTIeq5jj3T +2TEn/naaIJ1gH8HMfXRTRLzZQS0dwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFDUX YhxlXsNL0wtnOPbDs7q+PGIBMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC82MzZENUZBNEUwRDUxMUYwQTg0RTEzOTFEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAmsI7AwQAmsJDMAwDBACa wm0DBASawmADBACawnUDBACaws8DBACaw3EDBACaxj8DBACaxr8wDQYJKoZIhvcN AQELBQADggEBAIrRt7yTG1h307JwHzwGJ4kFsUqbI5XX+Lgn/COIso6e308youGr TdA3lKvQIpnil+X0tkj8oAGvFTOt1IXUnYXZ03A2FpAQtdspcvimVCPgluBZOmru FuH28T3CFitYCyRs1DxgukyQVQTqLsqsbu2MBkKJFjPrJxUnRIXJK+TH2izyaZAz Wec1qVnY7OlKpbINA5f4NVw0190Q0yQAAda4+3bUOm6XqZrRVwNti9dfAg6LaJC6 0A9m4VhaxiE5YcpRTIPp0qMFj5yQ3I1H3NtltJyYvfxpIkpPthh9tyi6XAMqCM4M g79OA4j38Wtu7+r7O8sL51Asw41s4XvPhAc= -----END CERTIFICATE-----Generated at Sat Dec 27 16:49:09 2025 by rpki-client