This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8498A8F0D04F11F0801958EEDAE4EC9C.roa File: 8498A8F0D04F11F0801958EEDAE4EC9C.roa (raw, json) Hash identifier: tSpX3hGYlM/L+ppWhhZrp3Z+08efYANfKZFfBnbzMVA= Subject key identifier: 6A:AA:B3:58:E0:F2:7B:A7:DF:3A:FF:4C:6C:11:30:7A:CC:5D:87:D4 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC72 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8498A8F0D04F11F0801958EEDAE4EC9C.roa Signing time: Wed 03 Dec 2025 13:54:00 +0000 ROA not before: Wed 03 Dec 2025 13:53:53 +0000 ROA not after: Mon 05 Jan 2026 13:53:53 +0000 asID: 202656 IP address blocks: 154.219.228.0/24 maxlen: 24 154.219.229.0/24 maxlen: 24 154.219.231.0/24 maxlen: 24 154.219.233.0/24 maxlen: 24 154.219.234.0/24 maxlen: 24 154.219.235.0/24 maxlen: 24 154.219.236.0/24 maxlen: 24 154.219.249.0/24 maxlen: 24 154.221.52.0/24 maxlen: 24 154.222.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 07 Dec 2025 11:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109682 (0x1ac72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 13:53:53 2025 GMT Not After : Jan 5 13:53:53 2026 GMT Subject: CN=693040f8-0b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:93:35:15:f5:6b:3b:73:85:e6:10:97:4f:53: b0:dd:a4:d6:97:27:e1:cf:b5:46:97:9f:68:18:8a: 73:9f:99:c3:e0:ba:3c:f8:0d:f5:47:f2:7d:10:7a: ad:fe:72:dd:f7:63:01:d5:a1:45:50:33:89:78:0e: bf:d4:32:04:a2:84:33:ff:e5:28:15:6e:76:a6:c5: 9a:45:2f:9d:27:7d:21:22:f7:cf:28:ec:b9:33:ce: 92:ba:6e:05:51:2b:05:b2:84:55:e5:16:8f:da:0b: fd:a1:42:31:df:4d:3b:ff:93:a7:84:37:8f:2a:89: ea:93:32:d0:52:49:09:5f:ef:7e:a0:87:32:3c:b7: 21:dd:3f:50:27:14:97:43:cd:2b:b6:7c:19:ee:92: 5a:fc:3b:9b:4b:5a:3a:62:7e:ac:63:44:97:14:0b: 8c:7e:2f:46:2e:20:d9:b7:b0:45:0b:38:97:8d:74: 85:ee:1f:9d:6a:44:2a:c0:e1:c4:75:2a:be:9f:a7: 0b:16:ef:cc:f6:d7:19:b1:39:2a:c2:be:88:db:de: 5d:d0:96:0a:72:2c:29:cd:f0:ac:69:46:34:2a:20: 0c:c7:8b:74:3a:dc:d9:c2:cc:0b:d9:a3:e1:dd:f2: 5b:ea:95:7e:e1:67:cd:89:d7:f3:76:7e:85:5b:dc: 08:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:AA:B3:58:E0:F2:7B:A7:DF:3A:FF:4C:6C:11:30:7A:CC:5D:87:D4 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8498A8F0D04F11F0801958EEDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.219.228.0/23 154.219.231.0/24 154.219.233.0-154.219.236.255 154.219.249.0/24 154.221.52.0/24 154.222.197.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:5d:0c:76:d2:16:78:58:81:35:88:74:ff:80:aa:3f:96:c3: 36:41:21:7b:a6:4a:c3:bd:03:b4:ef:dc:29:dc:37:12:4c:12: 2d:8e:7e:cc:ef:54:bb:b9:db:bb:00:a8:5d:ad:4a:f8:f5:63: ff:36:43:47:41:6c:1c:a8:ed:52:d3:95:a3:ba:9c:68:3b:cb: af:22:00:69:a3:66:1a:21:8a:d7:ec:bb:6d:e6:2e:1e:21:91: 70:95:49:fd:45:81:ee:9d:a2:26:21:ba:a5:73:5e:06:d1:78: fd:6b:90:58:dd:db:53:e3:98:90:28:94:9f:69:c2:17:66:e3: 3d:cd:4d:93:ed:50:e3:95:a2:fb:4d:97:9b:d4:21:d0:be:7b: d7:81:06:1f:6b:92:93:8e:f9:cf:b7:ab:5a:d0:21:99:93:95: 0d:46:2e:e0:e7:da:68:9f:bb:73:13:29:ee:d2:ca:e1:21:80: cb:69:e2:a8:0e:6e:7f:5b:b5:29:fe:77:29:c8:a0:e5:88:a0: 9d:d3:70:20:fe:59:c0:39:b2:9b:4b:1e:52:c6:ff:f9:02:26: 6f:06:a2:c0:3d:33:73:b3:f9:01:3e:28:51:30:39:d4:58:ad: bc:ba:37:df:4f:32:10:56:a5:dc:90:65:f5:b1:8b:86:5d:10: e3:07:41:5f -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgIDAaxyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMTM1MzUzWhcNMjYwMTA1MTM1MzUzWjAYMRYw FAYDVQQDEw02OTMwNDBmOC0wYjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAy5M1FfVrO3OF5hCXT1Ow3aTWlyfhz7VGl59oGIpzn5nD4Lo8+A31R/J9 EHqt/nLd92MB1aFFUDOJeA6/1DIEooQz/+UoFW52psWaRS+dJ30hIvfPKOy5M86S um4FUSsFsoRV5RaP2gv9oUIx3007/5OnhDePKonqkzLQUkkJX+9+oIcyPLch3T9Q JxSXQ80rtnwZ7pJa/DubS1o6Yn6sY0SXFAuMfi9GLiDZt7BFCziXjXSF7h+dakQq wOHEdSq+n6cLFu/M9tcZsTkqwr6I295d0JYKciwpzfCsaUY0KiAMx4t0OtzZwswL 2aPh3fJb6pV+4WfNidfzdn6FW9wIsQIDAQABo4ICyzCCAscwHQYDVR0OBBYEFGqq s1jg8nun3zr/TGwRMHrMXYfUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC84NDk4QThGMEQwNEYxMUYwODAxOTU4RUVEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBmtvkAwQAmtvnMAwDBACa 2+kDBACa2+wDBACa2/kDBACa3TQDBACa3sUwDQYJKoZIhvcNAQELBQADggEBAD1d DHbSFnhYgTWIdP+Aqj+WwzZBIXumSsO9A7Tv3CncNxJMEi2OfszvVLu527sAqF2t Svj1Y/82Q0dBbByo7VLTlaO6nGg7y68iAGmjZhohitfsu23mLh4hkXCVSf1Fge6d oiYhuqVzXgbReP1rkFjd21PjmJAolJ9pwhdm4z3NTZPtUOOVovtNl5vUIdC+e9eB Bh9rkpOO+c+3q1rQIZmTlQ1GLuDn2mifu3MTKe7SyuEhgMtp4qgObn9btSn+dynI oOWIoJ3TcCD+WcA5sptLHlLG//kCJm8GosA9M3Oz+QE+KFEwOdRYrby6N99PMhBW pdyQZfWxi4ZdEOMHQV8= -----END CERTIFICATE-----Generated at Fri Dec 5 15:37:52 2025 by rpki-client