This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/645D04C0DF4D11F08A0A0AECDAE4EC9C.roa File: 645D04C0DF4D11F08A0A0AECDAE4EC9C.roa (raw, json) Hash identifier: 2SN3fv9JeCXWyFzhXO7VpJYIclroh9UC6Nodaqyx1Pw= Subject key identifier: 4B:69:9E:FF:6B:73:99:38:FB:A6:89:52:D4:E3:31:AB:C4:16:3C:37 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AFF9 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/645D04C0DF4D11F08A0A0AECDAE4EC9C.roa Signing time: Mon 22 Dec 2025 15:46:35 +0000 ROA not before: Mon 22 Dec 2025 15:46:29 +0000 ROA not after: Thu 29 Jan 2026 15:46:29 +0000 asID: 135983 IP address blocks: 154.200.32.0/24 maxlen: 24 154.200.33.0/24 maxlen: 24 154.200.35.0/24 maxlen: 24 154.200.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 25 Dec 2025 00:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110585 (0x1aff9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 22 15:46:29 2025 GMT Not After : Jan 29 15:46:29 2026 GMT Subject: CN=694967da-eae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:76:57:e7:84:a9:4a:e3:5d:35:c5:6a:b0:f3: e3:69:0d:99:cd:2f:ff:e7:c8:20:a2:e7:7d:0e:aa: 4c:05:cc:37:13:3d:48:07:8d:ce:64:ee:40:fc:f3: 31:a3:3c:47:d1:a0:c8:e3:aa:7f:dc:ee:72:50:52: f4:64:88:77:37:fb:21:81:a1:16:fb:58:7e:82:3d: 9f:28:88:12:81:87:7a:ea:b9:a8:39:e9:07:df:cc: 75:4a:d2:79:36:5a:7d:ff:48:24:90:fb:ef:98:5e: b3:86:8b:ec:5c:0d:0d:b5:1c:7b:44:6b:28:c4:4b: e9:0e:36:e3:aa:1b:36:8f:79:64:22:a8:43:28:71: 42:7b:36:17:6a:c5:fe:83:4c:03:69:c6:fb:a1:e4: b4:3b:b8:cc:c6:74:a8:71:db:c9:b7:90:ca:18:50: 00:b1:86:73:1c:5c:b2:87:eb:10:df:3d:3a:8c:2b: d9:91:dd:6d:c1:14:9b:d8:09:4e:86:47:3b:56:52: 84:4d:4e:82:96:a8:8d:86:92:12:0c:1e:5a:05:04: e7:fc:9b:9b:df:58:17:a7:28:32:37:0a:aa:b8:9d: 29:b2:cd:e3:1f:aa:ba:72:66:8c:1c:83:53:e4:aa: 47:53:3c:9d:57:b9:89:da:7a:f8:6b:30:bd:e1:05: 97:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:69:9E:FF:6B:73:99:38:FB:A6:89:52:D4:E3:31:AB:C4:16:3C:37 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/645D04C0DF4D11F08A0A0AECDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.200.32.0/23 154.200.35.0-154.200.36.255 Signature Algorithm: sha256WithRSAEncryption d6:00:52:86:cb:48:9b:24:62:b3:23:55:72:a2:9d:68:07:12: 05:d9:9d:00:23:ff:e9:bc:b8:58:a2:96:c3:17:4b:b4:ab:11: 4b:2d:23:7e:55:4d:ef:a5:db:c7:19:ab:46:ea:16:b1:c2:81: 51:5b:be:70:64:1a:ba:e1:1c:38:21:5c:dc:b3:58:b1:b0:01: 77:f9:99:8b:fe:20:41:7e:16:c6:df:36:d1:d7:58:d3:c8:52: f5:71:ba:94:f9:21:3e:80:31:b1:32:7a:f0:2e:e9:52:e0:5b: 5e:45:30:11:96:51:8f:90:4f:4a:05:5f:b9:72:0b:bf:7e:75: 62:11:63:e9:e8:df:83:b1:b6:b4:b0:db:d9:e7:a9:c3:62:d5: 38:67:5f:ce:20:52:94:99:45:59:1c:d8:8a:fc:63:67:98:e9: bd:42:27:4a:c6:96:c3:2e:8d:7c:b6:98:4e:3b:a6:88:20:83: 2c:47:1d:bb:41:7f:e4:88:bb:16:c4:03:8a:16:8e:b9:67:1a: c6:3d:d4:97:ea:f5:09:a7:8c:d1:8b:c4:94:cc:ba:4c:9e:6f: c0:b1:b7:da:df:dd:b7:b8:d9:06:6b:b4:fa:1b:39:9d:aa:33: 86:2e:8f:2f:5c:fc:fd:46:82:f7:6f:73:0c:cf:00:65:9d:0d: a0:ad:7f:f1 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgIDAa/5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjIyMTU0NjI5WhcNMjYwMTI5MTU0NjI5WjAYMRYw FAYDVQQDEw02OTQ5NjdkYS1lYWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEApHZX54SpSuNdNcVqsPPjaQ2ZzS//58ggoud9DqpMBcw3Ez1IB43OZO5A /PMxozxH0aDI46p/3O5yUFL0ZIh3N/shgaEW+1h+gj2fKIgSgYd66rmoOekH38x1 StJ5Nlp9/0gkkPvvmF6zhovsXA0NtRx7RGsoxEvpDjbjqhs2j3lkIqhDKHFCezYX asX+g0wDacb7oeS0O7jMxnSocdvJt5DKGFAAsYZzHFyyh+sQ3z06jCvZkd1twRSb 2AlOhkc7VlKETU6ClqiNhpISDB5aBQTn/Jub31gXpygyNwqquJ0pss3jH6q6cmaM HINT5KpHUzydV7mJ2nr4azC94QWX2QIDAQABo4ICszCCAq8wHQYDVR0OBBYEFEtp nv9rc5k4+6aJUtTjMavEFjw3MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC82NDVEMDRDMERGNEQxMUYwOEEwQTBBRUNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBmsggMAwDBACayCMDBACa yCQwDQYJKoZIhvcNAQELBQADggEBANYAUobLSJskYrMjVXKinWgHEgXZnQAj/+m8 uFiilsMXS7SrEUstI35VTe+l28cZq0bqFrHCgVFbvnBkGrrhHDghXNyzWLGwAXf5 mYv+IEF+FsbfNtHXWNPIUvVxupT5IT6AMbEyevAu6VLgW15FMBGWUY+QT0oFX7ly C79+dWIRY+no34OxtrSw29nnqcNi1ThnX84gUpSZRVkc2Ir8Y2eY6b1CJ0rGlsMu jXy2mE47pogggyxHHbtBf+SIuxbEA4oWjrlnGsY91Jfq9QmnjNGLxJTMukyeb8Cx t9rf3be42QZrtPobOZ2qM4Yujy9c/P1GgvdvcwzPAGWdDaCtf/E= -----END CERTIFICATE-----Generated at Tue Dec 23 09:38:06 2025 by rpki-client