This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91829242CFD211F0A35220D3DAE4EC9C.roa File: 91829242CFD211F0A35220D3DAE4EC9C.roa (raw, json) Hash identifier: MqKf0CC991kzFs1ru3D+yLR/hAdY695jiDNYvHBjxsI= Subject key identifier: 30:58:A3:2B:E9:94:1F:2D:4C:C4:9B:28:CF:74:44:9F:EF:75:0B:7D Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ABE9 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91829242CFD211F0A35220D3DAE4EC9C.roa Signing time: Tue 02 Dec 2025 22:59:35 +0000 ROA not before: Tue 02 Dec 2025 22:59:29 +0000 ROA not after: Sat 18 Nov 2028 22:59:29 +0000 asID: 17561 IP address blocks: 154.195.4.0/24 maxlen: 24 154.195.5.0/24 maxlen: 24 154.195.33.0/24 maxlen: 24 154.195.35.0/24 maxlen: 24 154.195.40.0/24 maxlen: 24 154.195.42.0/24 maxlen: 24 154.195.46.0/24 maxlen: 24 154.195.50.0/24 maxlen: 24 154.211.208.0/24 maxlen: 24 154.211.209.0/24 maxlen: 24 154.211.212.0/24 maxlen: 24 154.211.213.0/24 maxlen: 24 154.211.214.0/24 maxlen: 24 154.223.226.0/24 maxlen: 24 154.223.228.0/24 maxlen: 24 154.223.229.0/24 maxlen: 24 154.223.241.0/24 maxlen: 24 154.223.244.0/24 maxlen: 24 154.223.245.0/24 maxlen: 24 154.223.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109545 (0x1abe9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 22:59:29 2025 GMT Not After : Nov 18 22:59:29 2028 GMT Subject: CN=692f6f57-b014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1d:f1:b2:9e:38:36:51:f7:c2:11:ab:69:e4: f4:c7:b9:86:4f:fe:e9:16:08:4a:3a:14:cd:13:80: bd:6e:0a:aa:35:ff:50:c0:ea:d6:f7:de:3c:44:d2: c2:5f:6e:f5:9f:10:eb:d5:8b:1b:2a:4b:09:6e:9b: 66:dd:69:f4:c1:e7:4c:a9:c9:c1:ae:d4:a7:f8:d2: 5c:9b:63:c8:7b:0a:cf:6f:09:4e:42:8a:c7:cf:0f: e7:c9:bd:b2:7a:13:03:0d:92:73:9d:ca:c2:85:aa: 16:f2:04:c8:01:d8:86:6a:cf:31:1f:39:f4:fa:62: c1:22:cb:1d:69:2d:21:62:59:9b:81:9e:c6:6a:af: e7:ed:e8:7e:80:52:6e:99:11:6a:ff:03:db:09:1c: fe:03:92:8d:7e:e9:2b:53:24:1b:7d:3d:bb:04:b9: 24:fd:9c:74:a1:77:07:55:ae:9f:46:1e:ee:d0:48: 27:ab:af:dc:95:90:a8:9f:f6:d2:d2:9f:0a:5d:99: e7:0a:09:c6:6c:cb:f9:b5:87:11:e9:42:74:4c:dd: e5:ae:8c:14:84:06:0d:4a:d6:3c:99:bd:e4:56:17: ca:d8:fa:2b:25:98:d1:f2:27:cb:56:a9:9d:41:29: 9b:76:cf:8b:5a:8a:8b:e1:62:24:a1:e5:17:53:7d: 51:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:58:A3:2B:E9:94:1F:2D:4C:C4:9B:28:CF:74:44:9F:EF:75:0B:7D X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91829242CFD211F0A35220D3DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.195.4.0/23 154.195.33.0/24 154.195.35.0/24 154.195.40.0/24 154.195.42.0/24 154.195.46.0/24 154.195.50.0/24 154.211.208.0/23 154.211.212.0-154.211.214.255 154.223.226.0/24 154.223.228.0/23 154.223.241.0/24 154.223.244.0/23 154.223.247.0/24 Signature Algorithm: sha256WithRSAEncryption 82:37:a7:57:6c:5e:6c:d4:52:64:ca:fb:0c:04:58:62:7c:5c: fa:1c:46:e1:82:ac:ab:f6:86:f0:b2:48:0c:9b:fd:36:f8:d5: 51:e7:d9:4a:2f:c1:cf:6b:f8:9a:56:6f:c7:4d:d8:ff:31:6e: 80:da:8c:24:72:bd:62:86:2c:4f:32:0b:cb:eb:e9:bd:04:f6: ab:0f:59:71:49:ea:3c:1b:4c:bb:88:34:c9:a8:29:a4:93:b8: 35:c6:9d:17:9d:83:20:98:73:dc:46:4b:de:a5:e7:b6:05:69: db:eb:d3:12:15:37:01:ea:ac:4e:25:9e:18:68:97:c2:de:fa: c5:94:aa:48:d1:f3:ab:dd:e9:67:6e:3d:18:a8:38:8c:d1:26: 21:8b:65:ee:0a:dc:39:83:e9:03:4e:79:fa:ea:41:db:d8:4f: a3:51:89:ed:62:7e:31:09:8d:7d:20:88:f4:f4:0c:62:9f:e6: 18:11:c8:82:3e:46:bf:7f:a9:f5:19:fe:6f:d2:96:a7:0f:64: cd:ae:f3:ca:7a:12:01:76:f4:69:23:5e:e5:0c:66:98:1b:70: d2:5b:1e:d6:d2:7b:86:1b:d8:57:b5:64:3a:7a:3c:d6:db:84: 66:8d:ba:57:54:7d:3f:e5:88:84:2f:a1:30:69:1a:d9:49:9b: 6a:a5:84:10 -----BEGIN CERTIFICATE----- MIIF2jCCBMKgAwIBAgIDAavpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMjI1OTI5WhcNMjgxMTE4MjI1OTI5WjAYMRYw FAYDVQQDEw02OTJmNmY1Ny1iMDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAvx3xsp44NlH3whGraeT0x7mGT/7pFghKOhTNE4C9bgqqNf9QwOrW9948 RNLCX271nxDr1YsbKksJbptm3Wn0wedMqcnBrtSn+NJcm2PIewrPbwlOQorHzw/n yb2yehMDDZJzncrChaoW8gTIAdiGas8xHzn0+mLBIssdaS0hYlmbgZ7Gaq/n7eh+ gFJumRFq/wPbCRz+A5KNfukrUyQbfT27BLkk/Zx0oXcHVa6fRh7u0Egnq6/clZCo n/bS0p8KXZnnCgnGbMv5tYcR6UJ0TN3lrowUhAYNStY8mb3kVhfK2PorJZjR8ifL VqmdQSmbds+LWoqL4WIkoeUXU31RmwIDAQABo4IC+zCCAvcwHQYDVR0OBBYEFDBY oyvplB8tTMSbKM90RJ/vdQt9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC85MTgyOTI0MkNGRDIxMUYwQTM1MjIwRDNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQBmsMEAwQAmsMhAwQAmsMj AwQAmsMoAwQAmsMqAwQAmsMuAwQAmsMyAwQBmtPQMAwDBAKa09QDBACa09YDBACa 3+IDBAGa3+QDBACa3/EDBAGa3/QDBACa3/cwDQYJKoZIhvcNAQELBQADggEBAII3 p1dsXmzUUmTK+wwEWGJ8XPocRuGCrKv2hvCySAyb/Tb41VHn2Uovwc9r+JpWb8dN 2P8xboDajCRyvWKGLE8yC8vr6b0E9qsPWXFJ6jwbTLuINMmoKaSTuDXGnRedgyCY c9xGS96l57YFadvr0xIVNwHqrE4lnhhol8Le+sWUqkjR86vd6WduPRioOIzRJiGL Ze4K3DmD6QNOefrqQdvYT6NRie1ifjEJjX0giPT0DGKf5hgRyII+Rr9/qfUZ/m/S lqcPZM2u88p6EgF29GkjXuUMZpgbcNJbHtbSe4Yb2Fe1ZDp6PNbbhGaNuldUfT/l iIQvoTBpGtlJm2qlhBA= -----END CERTIFICATE-----Generated at Wed Dec 3 10:24:45 2025 by rpki-client