This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B09854CCFC311F0914E44F6DAE4EC9C.roa File: 8B09854CCFC311F0914E44F6DAE4EC9C.roa (raw, json) Hash identifier: Pzj8WmE1JBbTVYK0jmZcyseE/k1ibl41siHakbEfPOk= Subject key identifier: 71:99:2F:50:92:AB:24:4F:0A:AF:41:29:F9:2F:00:DC:4B:D9:F6:EB Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ABCD Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B09854CCFC311F0914E44F6DAE4EC9C.roa Signing time: Tue 02 Dec 2025 21:12:01 +0000 ROA not before: Tue 02 Dec 2025 21:11:56 +0000 ROA not after: Thu 02 Nov 2028 21:11:56 +0000 asID: 17561 IP address blocks: 154.216.145.0/24 maxlen: 24 154.216.146.0/24 maxlen: 24 154.216.147.0/24 maxlen: 24 154.216.148.0/24 maxlen: 24 154.216.149.0/24 maxlen: 24 154.216.150.0/24 maxlen: 24 154.216.151.0/24 maxlen: 24 154.216.152.0/24 maxlen: 24 154.216.153.0/24 maxlen: 24 154.216.154.0/24 maxlen: 24 154.216.155.0/24 maxlen: 24 154.216.156.0/24 maxlen: 24 154.216.157.0/24 maxlen: 24 154.216.158.0/24 maxlen: 24 154.216.159.0/24 maxlen: 24 154.216.160.0/24 maxlen: 24 154.216.161.0/24 maxlen: 24 154.216.162.0/24 maxlen: 24 154.216.163.0/24 maxlen: 24 154.216.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109517 (0x1abcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 21:11:56 2025 GMT Not After : Nov 2 21:11:56 2028 GMT Subject: CN=692f5621-11a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:90:32:f9:a8:91:ba:80:88:e7:a0:88:e4:60: de:12:66:28:8a:b9:de:1d:3a:f1:de:1a:52:e9:9b: 30:42:cb:38:29:f6:1a:72:8a:11:79:c7:01:27:e2: 0f:55:a9:af:70:60:37:18:68:b4:19:4d:d1:bf:85: 00:e0:24:c7:b8:ee:10:24:66:50:8f:7c:65:83:9b: ca:3e:57:bc:bd:d4:12:2e:36:52:b4:e3:f2:7f:7f: 8f:a1:a0:cb:5e:b2:f9:bc:5a:ee:37:f6:28:b8:19: 5f:c5:cd:20:8b:9e:7c:51:bc:3b:5d:5d:2f:34:34: 67:bd:46:bc:97:5f:c9:a1:a3:da:b8:28:b6:e7:a7: 81:6f:b2:f7:d1:66:31:22:3f:89:58:75:f4:42:c0: fd:a0:0a:ba:4a:16:da:4a:41:51:66:48:08:b3:9d: 33:38:0d:a0:24:f4:8f:99:6e:72:f4:f0:a3:e9:67: d4:4c:07:54:12:34:f5:5f:1a:80:03:81:7c:18:8a: 1d:b2:d5:2a:37:e1:6d:a2:4f:73:53:88:04:fe:7c: b5:dd:73:79:a8:f3:b6:18:33:69:11:c2:69:d2:79: 3c:0c:ff:68:f9:c2:c9:0c:fc:6e:38:c1:f4:75:c5: 4b:4d:0a:85:ba:54:be:a2:8c:6d:95:ab:b4:d7:09: 75:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:99:2F:50:92:AB:24:4F:0A:AF:41:29:F9:2F:00:DC:4B:D9:F6:EB X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B09854CCFC311F0914E44F6DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.216.145.0-154.216.164.255 Signature Algorithm: sha256WithRSAEncryption 47:48:36:06:08:be:43:55:3a:59:c8:53:4d:11:ff:6b:a8:c0: 34:b7:5e:8d:9a:1b:9c:a9:ff:64:ba:8d:8d:fe:15:aa:e9:bb: 4a:8b:81:40:52:9d:53:40:c7:45:6c:9b:83:72:db:f5:7e:eb: 91:58:70:e3:59:dd:0f:80:cb:1c:72:38:64:eb:b2:8d:a5:10: a0:4c:44:29:4b:d9:f2:3f:be:f4:6e:cc:52:1f:10:6a:68:d0: 5d:fa:4f:39:56:a0:34:56:e5:02:b6:3e:bd:08:d1:94:c6:99: 9a:68:d6:5d:25:f4:60:5c:47:9b:b9:bd:45:41:0d:54:a1:0c: cb:1e:8a:18:d9:3f:d3:fd:db:91:ef:57:55:ce:d3:a2:37:76: fb:7c:46:6e:bb:cc:78:1a:93:13:cb:35:23:1f:09:34:e1:41: 5c:e6:70:27:2b:d8:b5:37:69:87:57:2e:56:c4:09:f6:69:ca: ca:8c:c9:f5:d3:b6:bc:0a:1e:61:79:66:03:b9:7e:55:c5:1c: f5:60:b7:70:6e:3f:fb:fa:94:9c:ab:b5:b4:ce:f4:19:1b:33: 92:70:e1:cc:12:ee:72:a4:22:e1:de:12:9d:f7:e9:80:db:01: 56:ea:03:a1:17:18:7c:ff:9b:29:98:5d:17:80:90:bb:e2:ab: 0b:87:1a:0a -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIDAavNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMjExMTU2WhcNMjgxMTAyMjExMTU2WjAYMRYw FAYDVQQDEw02OTJmNTYyMS0xMWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAzZAy+aiRuoCI56CI5GDeEmYoirneHTrx3hpS6ZswQss4KfYacooReccB J+IPVamvcGA3GGi0GU3Rv4UA4CTHuO4QJGZQj3xlg5vKPle8vdQSLjZStOPyf3+P oaDLXrL5vFruN/YouBlfxc0gi558Ubw7XV0vNDRnvUa8l1/JoaPauCi256eBb7L3 0WYxIj+JWHX0QsD9oAq6ShbaSkFRZkgIs50zOA2gJPSPmW5y9PCj6WfUTAdUEjT1 XxqAA4F8GIodstUqN+Ftok9zU4gE/ny13XN5qPO2GDNpEcJp0nk8DP9o+cLJDPxu OMH0dcVLTQqFulS+ooxtlau01wl1lQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHGZ L1CSqyRPCq9BKfkvANxL2fbrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC84QjA5ODU0Q0NGQzMxMUYwOTE0RTQ0RjZEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACa2JEDBACa2KQwDQYJ KoZIhvcNAQELBQADggEBAEdINgYIvkNVOlnIU00R/2uowDS3Xo2aG5yp/2S6jY3+ Farpu0qLgUBSnVNAx0Vsm4Ny2/V+65FYcONZ3Q+AyxxyOGTrso2lEKBMRClL2fI/ vvRuzFIfEGpo0F36TzlWoDRW5QK2Pr0I0ZTGmZpo1l0l9GBcR5u5vUVBDVShDMse ihjZP9P925HvV1XO06I3dvt8Rm67zHgakxPLNSMfCTThQVzmcCcr2LU3aYdXLlbE CfZpysqMyfXTtrwKHmF5ZgO5flXFHPVgt3BuP/v6lJyrtbTO9BkbM5Jw4cwS7nKk IuHeEp336YDbAVbqA6EXGHz/mymYXReAkLviqwuHGgo= -----END CERTIFICATE-----Generated at Wed Dec 3 10:29:01 2025 by rpki-client