This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D511944C92F11F08EF8E3B1DAE4EC9C.roa File: 9D511944C92F11F08EF8E3B1DAE4EC9C.roa (raw, json) Hash identifier: 17Y1iR0WRxALwfE89yNet0IMAFsHn0KRTruGjK9aa+w= Subject key identifier: E2:9A:06:11:1B:D9:E3:B5:0F:3B:91:9D:5B:B8:58:7C:34:14:74:3D Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AA69 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D511944C92F11F08EF8E3B1DAE4EC9C.roa Signing time: Mon 24 Nov 2025 12:17:59 +0000 ROA not before: Mon 24 Nov 2025 12:17:52 +0000 ROA not after: Tue 30 Dec 2025 12:17:52 +0000 asID: 401783 IP address blocks: 154.193.35.0/24 maxlen: 24 154.196.179.0/24 maxlen: 24 154.196.180.0/24 maxlen: 24 154.200.26.0/24 maxlen: 24 154.200.43.0/24 maxlen: 24 154.200.51.0/24 maxlen: 24 154.200.52.0/24 maxlen: 24 154.200.140.0/24 maxlen: 24 154.200.142.0/24 maxlen: 24 154.200.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109161 (0x1aa69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 24 12:17:52 2025 GMT Not After : Dec 30 12:17:52 2025 GMT Subject: CN=69244cf7-22be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:69:42:c9:a9:b4:15:30:7b:b9:b5:ff:50:67: 38:cd:d3:52:f2:6c:28:7f:72:3d:8f:3b:9a:ca:6d: a0:74:98:56:9c:e2:e6:2a:2d:fb:4b:9a:75:16:76: f5:96:b2:69:7b:c8:25:e0:cf:59:07:82:e0:84:76: c1:03:24:29:4c:e0:79:5d:62:c5:4e:63:52:30:ae: 15:19:ab:33:65:ef:d4:1c:6d:3d:df:ec:fe:5a:64: 99:50:88:29:d0:3d:31:72:94:41:f5:ea:82:92:85: 5c:6a:c9:8b:51:30:a6:aa:fb:2f:fe:d2:65:31:44: 7f:22:d9:87:06:85:66:a3:1a:d0:05:ab:46:bf:e6: 3c:da:d3:bf:c6:ac:fd:70:1d:4f:b8:30:3d:0d:90: 62:9d:4e:d9:1d:71:40:1c:2b:10:ca:71:25:e3:06: f7:cc:d1:66:49:32:cf:1c:a6:29:a8:19:3b:a8:3d: 9f:3d:b9:7a:6f:61:a4:3b:20:c4:b3:e7:bb:d9:27: 54:39:29:4c:dd:4a:f1:4a:fd:61:98:ac:f5:40:83: 98:76:fe:d4:cd:5a:51:04:23:d1:e7:9d:da:08:ea: db:24:12:66:6e:a3:31:0c:99:fd:9a:6d:09:3e:70: 67:58:75:73:35:c9:0f:61:47:c5:16:35:ea:03:75: b8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:9A:06:11:1B:D9:E3:B5:0F:3B:91:9D:5B:B8:58:7C:34:14:74:3D X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D511944C92F11F08EF8E3B1DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.193.35.0/24 154.196.179.0-154.196.180.255 154.200.26.0/24 154.200.43.0/24 154.200.51.0-154.200.52.255 154.200.140.0/24 154.200.142.0/24 154.200.191.0/24 Signature Algorithm: sha256WithRSAEncryption 29:ae:e1:36:e9:90:42:62:ef:db:d8:9a:65:1d:01:c0:25:45: d1:98:82:12:07:e6:46:57:e9:3f:4a:83:a2:f6:2f:c8:df:48: 8e:08:32:5e:e6:60:14:47:8a:40:5e:03:84:d0:52:c8:4b:ea: ed:ef:83:36:da:a4:00:97:38:2f:cf:fc:eb:22:c6:58:03:fe: fa:48:cc:f2:c6:70:8f:af:fc:b4:da:52:56:30:a5:c3:78:29: 96:2d:b3:31:8e:e0:98:6a:29:4b:ff:79:5d:74:d7:c8:63:fe: 52:8d:9a:9b:f1:23:fd:fa:45:5e:e6:57:bc:97:5c:0b:b0:75: 70:7c:42:dc:4b:62:63:19:31:25:a5:1c:e6:32:7f:37:ae:75: 62:e2:ee:26:f2:e8:32:36:b2:27:09:7a:b5:74:08:e3:e0:cf: 70:69:e3:f0:8e:d4:cc:28:b7:31:48:92:c9:92:94:11:99:c1: 52:c9:18:65:49:d3:b2:50:90:92:5e:03:34:e9:4b:7e:3b:51: 87:4d:26:68:c1:b9:2b:51:6f:98:fc:03:24:13:64:a2:be:bd: 5a:57:71:2f:ca:27:3c:ed:dc:59:08:e7:34:60:9f:d1:6c:1e: 9e:f2:9b:b0:6d:bd:2d:60:05:04:a9:10:70:65:97:8b:b2:69: 1f:ac:3f:86 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgIDAappMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTI0MTIxNzUyWhcNMjUxMjMwMTIxNzUyWjAYMRYw FAYDVQQDEw02OTI0NGNmNy0yMmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA2GlCyam0FTB7ubX/UGc4zdNS8mwof3I9jzuaym2gdJhWnOLmKi37S5p1 Fnb1lrJpe8gl4M9ZB4LghHbBAyQpTOB5XWLFTmNSMK4VGaszZe/UHG093+z+WmSZ UIgp0D0xcpRB9eqCkoVcasmLUTCmqvsv/tJlMUR/ItmHBoVmoxrQBatGv+Y82tO/ xqz9cB1PuDA9DZBinU7ZHXFAHCsQynEl4wb3zNFmSTLPHKYpqBk7qD2fPbl6b2Gk OyDEs+e72SdUOSlM3UrxSv1hmKz1QIOYdv7UzVpRBCPR553aCOrbJBJmbqMxDJn9 mm0JPnBnWHVzNckPYUfFFjXqA3W41wIDAQABo4IC3zCCAtswHQYDVR0OBBYEFOKa BhEb2eO1DzuRnVu4WHw0FHQ9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC85RDUxMTk0NEM5MkYxMUYwOEVGOEUzQjFEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQAmsEjMAwDBACaxLMDBACa xLQDBACayBoDBACayCswDAMEAJrIMwMEAJrINAMEAJrIjAMEAJrIjgMEAJrIvzAN BgkqhkiG9w0BAQsFAAOCAQEAKa7hNumQQmLv29iaZR0BwCVF0ZiCEgfmRlfpP0qD ovYvyN9IjggyXuZgFEeKQF4DhNBSyEvq7e+DNtqkAJc4L8/86yLGWAP++kjM8sZw j6/8tNpSVjClw3gpli2zMY7gmGopS/95XXTXyGP+Uo2am/Ej/fpFXuZXvJdcC7B1 cHxC3EtiYxkxJaUc5jJ/N651YuLuJvLoMjayJwl6tXQI4+DPcGnj8I7UzCi3MUiS yZKUEZnBUskYZUnTslCQkl4DNOlLfjtRh00maMG5K1FvmPwDJBNkor69WldxL8on PO3cWQjnNGCf0WwenvKbsG29LWAFBKkQcGWXi7JpH6w/hg== -----END CERTIFICATE-----Generated at Wed Dec 3 10:26:11 2025 by rpki-client