This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DDF96E4D0FF11F0945BB6C3DAE4EC9C.roa File: 7DDF96E4D0FF11F0945BB6C3DAE4EC9C.roa (raw, json) Hash identifier: OVMHYy08FVXCVYm7H8ywjPbCbOBAt71RcYkDiiot2Kw= Subject key identifier: C4:EC:C2:21:D2:51:27:5C:9B:3D:B1:5E:9F:05:0B:E8:88:9D:1F:EF Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ACD0 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DDF96E4D0FF11F0945BB6C3DAE4EC9C.roa Signing time: Thu 04 Dec 2025 10:53:40 +0000 ROA not before: Thu 04 Dec 2025 10:53:34 +0000 ROA not after: Mon 05 Jan 2026 10:53:34 +0000 asID: 44559 IP address blocks: 154.203.224.0/24 maxlen: 24 154.203.230.0/24 maxlen: 24 154.203.231.0/24 maxlen: 24 154.209.144.0/24 maxlen: 24 154.209.145.0/24 maxlen: 24 154.209.152.0/24 maxlen: 24 154.209.153.0/24 maxlen: 24 154.209.154.0/24 maxlen: 24 154.209.155.0/24 maxlen: 24 154.209.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 07 Dec 2025 00:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109776 (0x1acd0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 4 10:53:34 2025 GMT Not After : Jan 5 10:53:34 2026 GMT Subject: CN=69316834-14b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:98:74:cb:2c:86:df:13:1d:fb:cf:bd:c9:93: a9:7c:55:05:93:c4:cc:d9:86:95:1a:11:e8:78:e9: 2d:07:b5:b5:b0:47:27:4e:43:93:a8:4c:60:53:d0: 47:ca:1b:95:08:21:62:3e:e1:d0:af:8c:89:5c:b8: 8e:36:bf:fb:02:a9:ac:29:a4:f2:26:f6:c2:10:d4: 08:e9:88:de:c2:28:0e:f0:75:8a:76:75:ca:27:7f: 46:5c:00:17:33:d3:13:6f:28:e5:2c:11:af:4a:f0: 1f:a3:e5:aa:4e:0a:b3:60:5c:b4:01:24:a4:3a:fd: 25:c5:d6:45:1d:e2:ed:d6:33:b7:67:ce:c9:c4:bb: 0c:a7:31:34:8d:cf:5d:f3:2d:ea:53:22:7a:91:41: e5:2b:24:be:18:96:d8:8e:39:75:97:5e:5e:b1:e1: a0:4c:e7:00:87:db:56:f0:64:82:39:82:8b:72:72: 9f:21:b9:cd:f5:d8:2c:31:91:9c:9a:f9:df:cf:90: 0a:07:61:52:d7:87:c7:96:a6:3c:bf:50:7c:80:bf: be:f3:67:d6:55:4b:60:64:c5:80:d2:d5:e1:01:0e: a4:65:d0:d3:f8:36:44:4b:e5:82:30:d5:4a:42:87: 5b:91:ce:02:7b:59:4b:dd:62:85:6f:1c:4c:83:39: b3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EC:C2:21:D2:51:27:5C:9B:3D:B1:5E:9F:05:0B:E8:88:9D:1F:EF X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DDF96E4D0FF11F0945BB6C3DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.203.224.0/24 154.203.230.0/23 154.209.144.0/23 154.209.152.0/22 154.209.157.0/24 Signature Algorithm: sha256WithRSAEncryption 66:07:3f:03:46:32:5e:c4:18:cf:7b:5b:25:4e:f1:29:49:53: ba:dd:c3:1d:71:03:ec:48:f8:26:00:ed:36:c7:32:ea:db:b0: af:97:db:e9:3c:83:1a:79:26:3d:91:90:23:ad:52:94:48:54: 0f:76:01:72:64:2d:bf:9d:43:d3:3c:32:bf:bb:de:c3:5c:e6: 08:e1:3f:53:24:97:63:50:dd:4e:5c:1c:1e:04:fa:04:6c:e1: a4:51:7b:46:bd:4b:38:ce:a9:14:62:42:3c:bc:c1:33:0c:7a: ba:a4:4f:6b:5c:96:90:63:e8:32:70:95:96:c7:99:5f:e0:e1: 9c:9d:82:29:18:ec:d0:f6:19:6e:3b:d8:6d:dd:1f:85:1f:5a: 2d:bf:dc:16:f2:81:68:85:b0:41:74:ff:5a:e0:88:64:9c:ae: f9:6b:83:42:be:34:b5:8d:02:45:05:00:93:e8:ba:1f:40:7d: ae:db:99:aa:fb:fe:77:ec:c7:bd:a5:6a:75:0a:c4:c9:59:9a: 97:e7:c4:9d:12:44:ef:c7:ca:47:d6:7e:03:aa:dc:bb:e6:9b: a5:87:2e:6e:30:2a:b9:fe:53:96:e5:26:1e:a5:e4:da:ab:31: e0:db:76:cf:2e:4c:ad:7e:1d:f9:e8:2f:3a:c9:b0:04:1f:d5: c9:62:63:8e -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgIDAazQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjA0MTA1MzM0WhcNMjYwMTA1MTA1MzM0WjAYMRYw FAYDVQQDEw02OTMxNjgzNC0xNGI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAt5h0yyyG3xMd+8+9yZOpfFUFk8TM2YaVGhHoeOktB7W1sEcnTkOTqExg U9BHyhuVCCFiPuHQr4yJXLiONr/7AqmsKaTyJvbCENQI6YjewigO8HWKdnXKJ39G XAAXM9MTbyjlLBGvSvAfo+WqTgqzYFy0ASSkOv0lxdZFHeLt1jO3Z87JxLsMpzE0 jc9d8y3qUyJ6kUHlKyS+GJbYjjl1l15eseGgTOcAh9tW8GSCOYKLcnKfIbnN9dgs MZGcmvnfz5AKB2FS14fHlqY8v1B8gL++82fWVUtgZMWA0tXhAQ6kZdDT+DZES+WC MNVKQodbkc4Ce1lL3WKFbxxMgzmzvwIDAQABo4ICvTCCArkwHQYDVR0OBBYEFMTs wiHSUSdcmz2xXp8FC+iInR/vMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC83RERGOTZFNEQwRkYxMUYwOTQ1QkI2QzNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAmsvgAwQBmsvmAwQBmtGQ AwQCmtGYAwQAmtGdMA0GCSqGSIb3DQEBCwUAA4IBAQBmBz8DRjJexBjPe1slTvEp SVO63cMdcQPsSPgmAO02xzLq27Cvl9vpPIMaeSY9kZAjrVKUSFQPdgFyZC2/nUPT PDK/u97DXOYI4T9TJJdjUN1OXBweBPoEbOGkUXtGvUs4zqkUYkI8vMEzDHq6pE9r XJaQY+gycJWWx5lf4OGcnYIpGOzQ9hluO9ht3R+FH1otv9wW8oFohbBBdP9a4Ihk nK75a4NCvjS1jQJFBQCT6LofQH2u25mq+/537Me9pWp1CsTJWZqX58SdEkTvx8pH 1n4Dqty75pulhy5uMCq5/lOW5SYepeTaqzHg23bPLkytfh356C86ybAEH9XJYmOO -----END CERTIFICATE-----Generated at Fri Dec 5 11:49:30 2025 by rpki-client