This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A0B33CAD04A11F0B24C33CFDAE4EC9C.roa File: 8A0B33CAD04A11F0B24C33CFDAE4EC9C.roa (raw, json) Hash identifier: +I4sT6x3eUHEu5xfQr1pqptRT2ONIh5jsCL0sLiBzhc= Subject key identifier: 6F:43:4D:C8:29:FB:BE:98:8C:9B:FB:72:C5:DA:AE:A5:A4:71:D1:DD Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC66 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A0B33CAD04A11F0B24C33CFDAE4EC9C.roa Signing time: Wed 03 Dec 2025 13:18:21 +0000 ROA not before: Wed 03 Dec 2025 13:18:16 +0000 ROA not after: Mon 05 Jan 2026 13:18:16 +0000 asID: 202656 IP address blocks: 154.219.29.0/24 maxlen: 24 154.222.40.0/24 maxlen: 24 154.222.41.0/24 maxlen: 24 154.222.42.0/24 maxlen: 24 154.222.193.0/24 maxlen: 24 154.222.194.0/24 maxlen: 24 154.222.195.0/24 maxlen: 24 154.222.196.0/24 maxlen: 24 154.222.198.0/24 maxlen: 24 154.222.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 07 Dec 2025 11:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109670 (0x1ac66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 13:18:16 2025 GMT Not After : Jan 5 13:18:16 2026 GMT Subject: CN=6930389d-c509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:07:90:e8:a9:9b:4f:19:0d:b1:48:80:fd:86: cd:32:dd:6b:c4:fa:98:fe:9c:1e:a3:dd:8e:e2:a4: 00:f0:30:ba:4d:1e:69:b7:2c:74:cb:13:a2:cd:80: c0:7f:7e:b2:93:14:84:48:b2:65:81:c7:57:6d:94: b2:4d:a0:8c:11:d1:91:87:a9:90:66:5c:a1:f1:e9: 90:2f:1c:68:11:5c:60:f1:ed:ff:b5:f7:5e:48:1e: 79:aa:76:40:05:37:0a:9d:6d:f5:14:dd:15:5d:e5: 4d:53:b3:5d:a4:6b:81:45:5c:cd:45:c3:28:63:90: c0:ae:d0:ec:99:df:4c:e6:7e:e9:72:fd:01:46:10: 7f:26:81:5a:ba:4b:19:ab:1d:7e:e0:27:91:16:ac: 03:8a:ab:f6:72:98:94:03:89:62:24:0a:74:b6:78: 62:32:a8:ab:79:6b:56:e8:50:ee:23:43:2e:7a:1d: a6:91:86:b8:bb:19:d8:31:a1:a4:ab:ad:df:71:27: 10:fe:67:f7:8d:13:22:fe:d7:61:62:22:d0:c3:b5: 6e:3e:33:17:ce:43:f6:4a:41:d7:cb:5a:d3:a4:7c: b5:41:be:70:ac:bf:90:ea:79:3f:e8:e5:0e:64:2a: 74:ef:06:10:2f:5e:fa:8c:73:c1:3a:06:7c:e3:bb: f1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:43:4D:C8:29:FB:BE:98:8C:9B:FB:72:C5:DA:AE:A5:A4:71:D1:DD X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A0B33CAD04A11F0B24C33CFDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.219.29.0/24 154.222.40.0-154.222.42.255 154.222.193.0-154.222.196.255 154.222.198.0/23 Signature Algorithm: sha256WithRSAEncryption 55:b7:3d:8b:34:5f:4f:62:c9:a0:50:44:a1:f9:f1:25:6d:df: 7c:b2:0d:21:9d:e5:45:3d:1e:81:9c:16:aa:5c:e6:ef:c7:ac: ff:09:2e:fa:99:3f:98:f8:11:30:06:fc:56:8e:52:b7:88:de: 62:a8:3f:24:58:5e:ea:c2:aa:66:22:3c:8d:39:44:b2:09:9b: 92:ea:f0:87:4b:8c:de:5b:89:94:5f:cf:49:0c:20:d1:88:e4: cb:5b:be:c2:43:7e:b7:e8:f8:a7:43:c6:22:37:30:48:2e:53: 71:23:5e:f7:41:11:aa:39:41:ca:ab:80:fd:82:d7:bc:db:62: 77:3d:6a:fa:d0:ba:3e:be:6f:1c:65:5f:8c:38:54:a3:7e:8a: f5:84:e4:6e:53:ee:ce:6f:b2:d3:99:63:6e:08:51:1e:24:25: f3:25:80:bc:f0:74:ec:1f:ac:8e:84:09:5a:e4:36:3d:01:8c: 2a:36:35:9b:86:e6:fd:ea:61:19:1c:bc:63:3d:da:ed:0a:86: be:09:4b:2a:8d:73:e0:39:76:04:1d:bd:93:b9:9a:3f:90:20: 3c:bf:32:7f:87:5a:30:a7:6d:1b:6e:9e:a9:43:8e:d3:0d:0f: 46:51:76:c2:72:7c:6b:8e:d4:8f:6e:d8:74:25:79:7c:f4:1e: a1:3b:71:e4 -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgIDAaxmMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMTMxODE2WhcNMjYwMTA1MTMxODE2WjAYMRYw FAYDVQQDEw02OTMwMzg5ZC1jNTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAsQeQ6KmbTxkNsUiA/YbNMt1rxPqY/pweo92O4qQA8DC6TR5ptyx0yxOi zYDAf36ykxSESLJlgcdXbZSyTaCMEdGRh6mQZlyh8emQLxxoEVxg8e3/tfdeSB55 qnZABTcKnW31FN0VXeVNU7NdpGuBRVzNRcMoY5DArtDsmd9M5n7pcv0BRhB/JoFa uksZqx1+4CeRFqwDiqv2cpiUA4liJAp0tnhiMqireWtW6FDuI0Mueh2mkYa4uxnY MaGkq63fcScQ/mf3jRMi/tdhYiLQw7VuPjMXzkP2SkHXy1rTpHy1Qb5wrL+Q6nk/ 6OUOZCp07wYQL176jHPBOgZ847vxeQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFG9D Tcgp+76YjJv7csXarqWkcdHdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC84QTBCMzNDQUQwNEExMUYwQjI0QzMzQ0ZEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAmtsdMAwDBAOa3igDBACa 3iowDAMEAJrewQMEAJrexAMEAZrexjANBgkqhkiG9w0BAQsFAAOCAQEAVbc9izRf T2LJoFBEofnxJW3ffLINIZ3lRT0egZwWqlzm78es/wku+pk/mPgRMAb8Vo5St4je Yqg/JFhe6sKqZiI8jTlEsgmbkurwh0uM3luJlF/PSQwg0Yjky1u+wkN+t+j4p0PG IjcwSC5TcSNe90ERqjlByquA/YLXvNtidz1q+tC6Pr5vHGVfjDhUo36K9YTkblPu zm+y05ljbghRHiQl8yWAvPB07B+sjoQJWuQ2PQGMKjY1m4bm/ephGRy8Yz3a7QqG vglLKo1z4Dl2BB29k7maP5AgPL8yf4daMKdtG26eqUOO0w0PRlF2wnJ8a47Uj27Y dCV5fPQeoTtx5A== -----END CERTIFICATE-----Generated at Fri Dec 5 15:39:50 2025 by rpki-client