This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8885CC1AC14D11F0869DE38ADAE4EC9C.roa File: 8885CC1AC14D11F0869DE38ADAE4EC9C.roa (raw, json) Hash identifier: RQov16sayVevB+zEE8Ixi5up85faklmZB0y7RLPWx48= Subject key identifier: D2:CB:D7:93:38:0C:09:04:06:36:0B:41:13:C9:95:DB:D7:46:86:D7 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A914 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8885CC1AC14D11F0869DE38ADAE4EC9C.roa Signing time: Fri 14 Nov 2025 11:32:00 +0000 ROA not before: Fri 14 Nov 2025 11:31:53 +0000 ROA not after: Tue 16 Dec 2025 11:31:53 +0000 asID: 22773 IP address blocks: 154.82.2.0/24 maxlen: 24 154.82.3.0/24 maxlen: 24 154.82.4.0/24 maxlen: 24 154.82.5.0/24 maxlen: 24 154.82.6.0/24 maxlen: 24 154.82.7.0/24 maxlen: 24 154.82.8.0/24 maxlen: 24 154.82.9.0/24 maxlen: 24 154.82.10.0/24 maxlen: 24 154.90.8.0/24 maxlen: 24 154.90.9.0/24 maxlen: 24 154.90.10.0/24 maxlen: 24 154.90.11.0/24 maxlen: 24 154.90.12.0/24 maxlen: 24 154.90.13.0/24 maxlen: 24 154.90.14.0/24 maxlen: 24 154.90.15.0/24 maxlen: 24 154.90.16.0/24 maxlen: 24 154.90.17.0/24 maxlen: 24 154.94.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108820 (0x1a914) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 14 11:31:53 2025 GMT Not After : Dec 16 11:31:53 2025 GMT Subject: CN=69171330-1571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8b:8d:a4:85:f7:df:13:cb:76:b7:73:b2:f4: 64:fc:3e:00:09:23:3d:f3:c7:50:9a:58:1d:b7:a5: f2:93:b9:ca:97:b5:cb:19:3d:8d:27:db:fa:a8:2d: a1:0b:cc:cb:df:42:d8:02:b2:db:70:4f:eb:b1:d8: 7e:2f:07:5f:10:0f:d9:27:23:99:5d:f9:bf:28:e2: 32:fe:63:da:30:88:41:e0:f5:38:89:c2:b6:6e:96: f4:a4:48:5b:2e:26:c2:8a:af:fc:c9:17:fd:83:dc: 40:80:ad:92:f4:3e:33:18:17:fa:da:b7:56:f7:58: 0d:df:86:52:3c:2a:16:75:6e:48:8b:de:bc:b6:b3: 71:7c:a8:97:7e:46:c2:59:16:c9:cc:a6:29:8a:e7: 1f:9b:c5:0c:c7:08:39:7c:21:2b:83:ef:6d:06:7e: 59:87:61:ab:58:37:c2:60:fe:60:f4:f7:f4:d0:ce: ab:12:d9:93:d9:0b:59:56:85:0d:47:d6:d4:1b:32: 50:03:20:15:99:7d:7c:08:56:e5:3a:e5:8a:04:0f: 24:da:9e:3b:42:55:14:33:f3:1c:37:f5:f7:04:5b: 49:22:b9:1b:7a:3b:3a:98:e0:eb:fb:66:e8:19:43: f0:18:58:f1:cd:d9:47:5c:48:61:75:ef:14:e1:bf: 92:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CB:D7:93:38:0C:09:04:06:36:0B:41:13:C9:95:DB:D7:46:86:D7 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8885CC1AC14D11F0869DE38ADAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.82.2.0-154.82.10.255 154.90.8.0-154.90.17.255 154.94.192.0/19 Signature Algorithm: sha256WithRSAEncryption 51:13:c6:82:2e:6d:20:a7:56:a4:a2:b2:24:b3:20:2d:b7:a8: 16:14:bf:c3:49:df:4a:19:2c:64:07:e5:7b:62:84:6d:02:da: 72:57:95:a4:a9:62:13:0f:b5:cc:4c:65:0c:30:ab:80:48:ba: e0:9c:82:41:55:39:4b:42:27:e4:55:cd:cd:a6:70:54:1d:f2: 97:a0:c6:59:95:ea:b6:5a:bd:36:2e:a4:8a:4f:55:5e:28:9f: d9:7d:2a:ed:fb:06:ff:fd:df:b3:dd:0c:ca:ba:3a:03:da:c3: c4:a4:41:1e:0b:25:8f:28:53:e1:87:f5:95:b7:ec:49:5d:61: fb:33:b3:c0:5b:19:21:e5:03:19:92:a7:08:c8:21:f8:26:a4: b5:8e:3b:be:ab:bc:95:3a:2e:e8:53:a1:84:af:5e:c7:f4:fd: 4e:43:44:51:8b:73:5d:99:03:d6:39:f8:f0:93:69:fd:92:79: d3:53:8d:e5:46:d1:e2:23:41:f6:a6:eb:5d:1e:82:43:b7:e1: 49:b2:1e:aa:ad:8a:15:1b:4f:4b:eb:0a:48:92:0f:0d:aa:04: f8:d7:57:3e:86:b1:7f:33:98:1c:07:f2:87:dd:7c:a2:3f:8a: 65:11:b2:4a:28:d7:d0:bd:a3:18:2a:98:54:5d:12:0e:80:cb: 6f:22:c2:0b -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIDAakUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTE0MTEzMTUzWhcNMjUxMjE2MTEzMTUzWjAYMRYw FAYDVQQDEw02OTE3MTMzMC0xNTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA44uNpIX33xPLdrdzsvRk/D4ACSM988dQmlgdt6Xyk7nKl7XLGT2NJ9v6 qC2hC8zL30LYArLbcE/rsdh+LwdfEA/ZJyOZXfm/KOIy/mPaMIhB4PU4icK2bpb0 pEhbLibCiq/8yRf9g9xAgK2S9D4zGBf62rdW91gN34ZSPCoWdW5Ii968trNxfKiX fkbCWRbJzKYpiucfm8UMxwg5fCErg+9tBn5Zh2GrWDfCYP5g9Pf00M6rEtmT2QtZ VoUNR9bUGzJQAyAVmX18CFblOuWKBA8k2p47QlUUM/McN/X3BFtJIrkbejs6mODr +2boGUPwGFjxzdlHXEhhde8U4b+SLwIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFNLL 15M4DAkEBjYLQRPJldvXRobXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC84ODg1Q0MxQUMxNEQxMUYwODY5REUzOEFEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAGaUgIDBACaUgowDAME A5paCAMEAZpaEAMEBZpewDANBgkqhkiG9w0BAQsFAAOCAQEAURPGgi5tIKdWpKKy JLMgLbeoFhS/w0nfShksZAfle2KEbQLacleVpKliEw+1zExlDDCrgEi64JyCQVU5 S0In5FXNzaZwVB3yl6DGWZXqtlq9Ni6kik9VXiif2X0q7fsG//3fs90Myro6A9rD xKRBHgsljyhT4Yf1lbfsSV1h+zOzwFsZIeUDGZKnCMgh+CaktY47vqu8lTou6FOh hK9ex/T9TkNEUYtzXZkD1jn48JNp/ZJ501ON5UbR4iNB9qbrXR6CQ7fhSbIeqq2K FRtPS+sKSJIPDaoE+NdXPoaxfzOYHAfyh918oj+KZRGySijX0L2jGCqYVF0SDoDL byLCCw== -----END CERTIFICATE-----Generated at Wed Dec 3 11:07:11 2025 by rpki-client