This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A997D58B4E011F081D960B4DAE4EC9C.roa File: 9A997D58B4E011F081D960B4DAE4EC9C.roa (raw, json) Hash identifier: tk85KOmgAxR96QdFBAlWxj9nkB9rQ68YPBFZm7dH2PM= Subject key identifier: 6A:67:C1:31:9A:65:D6:65:4E:E2:C1:59:AD:9A:61:E2:71:EB:14:72 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A66E Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A997D58B4E011F081D960B4DAE4EC9C.roa Signing time: Wed 29 Oct 2025 16:02:01 +0000 ROA not before: Wed 29 Oct 2025 16:01:56 +0000 ROA not after: Sat 06 Dec 2025 16:01:56 +0000 asID: 202656 IP address blocks: 154.219.214.0/24 maxlen: 24 154.219.215.0/24 maxlen: 24 154.219.216.0/24 maxlen: 24 154.220.1.0/24 maxlen: 24 154.221.1.0/24 maxlen: 24 154.221.53.0/24 maxlen: 24 154.221.54.0/24 maxlen: 24 154.221.55.0/24 maxlen: 24 154.221.62.0/24 maxlen: 24 154.221.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108142 (0x1a66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Oct 29 16:01:56 2025 GMT Not After : Dec 6 16:01:56 2025 GMT Subject: CN=69023a79-9811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ee:85:a5:10:dd:27:2d:e3:15:6e:2b:b0:bf: 77:7f:da:71:5f:9d:9e:8f:6b:98:65:2e:e4:ec:ad: b1:5d:57:15:b3:ef:16:02:bd:79:7c:6d:54:eb:11: 37:f2:f0:a1:8d:f7:3b:5f:86:d7:2a:54:80:d2:7c: 7f:1a:45:1f:75:f9:8a:b2:5b:57:de:e9:08:9a:bd: 30:0d:01:86:d2:52:e2:08:b2:f9:5e:b3:01:3a:6e: bc:cf:5d:85:7d:0e:dc:ce:6c:d9:ab:74:7b:f4:0b: d5:86:54:60:7c:cd:b4:a5:4c:ea:d7:33:26:b1:ee: 39:4d:9c:ba:08:0d:a9:7c:fb:46:9d:a9:9a:97:b0: a8:c3:a8:11:43:0a:1b:fb:9d:63:16:a6:7a:42:df: 4f:8d:cc:86:cd:9f:64:9c:1f:88:b5:3a:f2:89:a2: af:79:0f:16:3b:6d:75:48:d1:76:8c:cd:04:71:4b: 56:3f:2c:2a:c8:da:ae:09:f1:ba:1a:48:97:28:4a: e1:71:f3:f8:95:38:8f:b3:fe:24:d5:c6:fb:51:22: d2:37:84:06:6d:19:1c:22:ce:b5:79:70:68:0e:b4: 0d:22:86:a5:49:35:3c:43:31:e3:64:ee:df:4d:66: b6:51:17:5b:ab:c0:e7:98:35:ca:79:9d:d4:0a:89: 0b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:67:C1:31:9A:65:D6:65:4E:E2:C1:59:AD:9A:61:E2:71:EB:14:72 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A997D58B4E011F081D960B4DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.219.214.0-154.219.216.255 154.220.1.0/24 154.221.1.0/24 154.221.53.0-154.221.55.255 154.221.62.0/23 Signature Algorithm: sha256WithRSAEncryption a6:72:3d:d2:f5:01:bb:7a:83:d4:6b:93:cc:84:9b:32:5d:77: 7b:92:f2:2a:ff:55:97:2e:ff:8b:e1:21:2e:10:f2:8f:ac:b9: 45:74:5e:11:0c:01:2d:0f:14:aa:4e:47:3b:62:3b:16:3a:b0: c0:e5:0b:20:35:61:c5:03:3e:0e:a0:9d:0d:a1:6a:a5:8b:10: 3c:a9:82:e8:3d:a3:07:65:51:7b:40:00:1f:8d:3e:95:45:90: f2:cc:3d:df:d2:df:c5:ed:47:7f:03:97:34:4a:7e:50:6e:24: 94:05:cc:8f:5e:e4:e4:df:29:44:58:5a:13:3f:62:c8:a9:5b: f1:01:b0:fa:0b:21:96:20:7c:3a:31:33:01:92:7d:02:70:7e: 30:ea:fc:76:80:95:3e:08:9f:2e:e9:42:cd:a4:e6:d4:e8:a6: 71:ca:f3:2c:b8:1a:24:40:4f:19:c9:74:2f:25:9e:c8:8b:6b: 63:25:67:a7:61:18:dd:8f:52:f5:44:eb:5a:69:c8:67:ff:29: 4c:d0:72:1e:77:6f:f8:d4:e3:71:a3:6f:9a:e3:47:b5:2b:74: 0a:bf:fa:b5:3f:98:74:1c:39:2b:9b:bf:59:fb:08:52:e1:3d: db:6a:fc:a2:35:37:f3:93:a8:bf:ad:ab:2b:ec:99:c9:6c:f6: 10:e2:30:2b -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgIDAaZuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMDI5MTYwMTU2WhcNMjUxMjA2MTYwMTU2WjAYMRYw FAYDVQQDEw02OTAyM2E3OS05ODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAsu6FpRDdJy3jFW4rsL93f9pxX52ej2uYZS7k7K2xXVcVs+8WAr15fG1U 6xE38vChjfc7X4bXKlSA0nx/GkUfdfmKsltX3ukImr0wDQGG0lLiCLL5XrMBOm68 z12FfQ7czmzZq3R79AvVhlRgfM20pUzq1zMmse45TZy6CA2pfPtGnamal7Cow6gR Qwob+51jFqZ6Qt9PjcyGzZ9knB+ItTryiaKveQ8WO211SNF2jM0EcUtWPywqyNqu CfG6GkiXKErhcfP4lTiPs/4k1cb7USLSN4QGbRkcIs61eXBoDrQNIoalSTU8QzHj ZO7fTWa2URdbq8DnmDXKeZ3UCokLFwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFGpn wTGaZdZlTuLBWa2aYeJx6xRyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC85QTk5N0Q1OEI0RTAxMUYwODFEOTYwQjREQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAGa29YDBACa29gDBACa 3AEDBACa3QEwDAMEAJrdNQMEA5rdMAMEAZrdPjANBgkqhkiG9w0BAQsFAAOCAQEA pnI90vUBu3qD1GuTzISbMl13e5LyKv9Vly7/i+EhLhDyj6y5RXReEQwBLQ8Uqk5H O2I7FjqwwOULIDVhxQM+DqCdDaFqpYsQPKmC6D2jB2VRe0AAH40+lUWQ8sw939Lf xe1HfwOXNEp+UG4klAXMj17k5N8pRFhaEz9iyKlb8QGw+gshliB8OjEzAZJ9AnB+ MOr8doCVPgifLulCzaTm1OimccrzLLgaJEBPGcl0LyWeyItrYyVnp2EY3Y9S9UTr WmnIZ/8pTNByHndv+NTjcaNvmuNHtSt0Cr/6tT+YdBw5K5u/WfsIUuE922r8ojU3 85Oov62rK+yZyWz2EOIwKw== -----END CERTIFICATE-----Generated at Wed Dec 3 11:07:10 2025 by rpki-client