This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4A4C51ACFD311F0A9C0C5D9DAE4EC9C.roa File: A4A4C51ACFD311F0A9C0C5D9DAE4EC9C.roa (raw, json) Hash identifier: Bepq9syCh5gDyFuovsJTaaJ/C3VtkDbTt/RtQT2ZWRQ= Subject key identifier: 43:B1:FE:59:96:8C:E9:52:34:A7:E1:40:DD:1A:1E:0D:4A:B0:9E:4B Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ABEB Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4A4C51ACFD311F0A9C0C5D9DAE4EC9C.roa Signing time: Tue 02 Dec 2025 23:07:16 +0000 ROA not before: Tue 02 Dec 2025 23:07:10 +0000 ROA not after: Sat 18 Nov 2028 23:07:10 +0000 asID: 17561 IP address blocks: 154.211.128.0/24 maxlen: 24 154.211.129.0/24 maxlen: 24 154.211.130.0/24 maxlen: 24 154.211.131.0/24 maxlen: 24 154.211.132.0/24 maxlen: 24 154.211.133.0/24 maxlen: 24 154.211.134.0/24 maxlen: 24 154.211.135.0/24 maxlen: 24 154.211.136.0/24 maxlen: 24 154.211.137.0/24 maxlen: 24 154.211.138.0/24 maxlen: 24 154.211.215.0/24 maxlen: 24 154.211.216.0/24 maxlen: 24 154.211.217.0/24 maxlen: 24 154.211.218.0/24 maxlen: 24 154.211.219.0/24 maxlen: 24 154.211.220.0/24 maxlen: 24 154.211.221.0/24 maxlen: 24 154.211.222.0/24 maxlen: 24 154.211.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109547 (0x1abeb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 23:07:10 2025 GMT Not After : Nov 18 23:07:10 2028 GMT Subject: CN=692f7124-6219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9f:2d:f3:a1:db:4e:f1:1a:08:09:f0:f4:fd: 56:e0:24:bc:72:9e:d8:72:a8:0b:3a:17:27:df:40: 5e:5e:8a:1a:56:0d:b3:15:26:2f:fe:20:5b:55:ac: 63:51:5a:f5:d4:df:a0:19:8c:91:e5:3f:d9:9b:f6: 6b:74:88:73:7a:32:43:c1:02:1b:85:67:91:fa:04: bd:78:4c:9f:1d:b4:10:f3:f6:a2:ff:53:eb:71:29: 61:65:97:1c:26:9f:d5:44:b8:fc:23:be:c7:3a:d7: 32:c2:a8:85:f9:de:c4:a4:a5:1d:24:32:a5:b9:e3: d5:65:52:d9:e2:9d:3e:52:25:fb:41:c0:f7:91:58: a4:f5:7a:48:a5:d3:df:02:80:bb:30:aa:a0:97:c6: f4:ef:74:b4:29:25:4e:99:23:96:c9:5f:21:cd:e2: da:f5:4e:b8:f9:11:16:f3:4f:a6:ca:57:5e:3d:82: 98:5a:e2:c9:43:f5:b3:4f:31:32:86:e4:42:62:30: c6:bf:10:18:2c:ab:fb:01:17:25:3e:b0:02:69:e3: c7:ad:a6:39:95:4d:9c:6d:72:de:25:58:fe:dc:77: 3d:6d:ed:e5:e0:fe:b2:a6:d0:67:f7:39:69:e6:60: a8:a2:54:81:b3:4a:35:66:3c:99:67:d2:73:b8:ec: 29:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B1:FE:59:96:8C:E9:52:34:A7:E1:40:DD:1A:1E:0D:4A:B0:9E:4B X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4A4C51ACFD311F0A9C0C5D9DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.211.128.0-154.211.138.255 154.211.215.0-154.211.223.255 Signature Algorithm: sha256WithRSAEncryption c7:22:fd:80:1c:99:57:95:bd:f5:6d:f2:55:43:d2:05:cd:a8: f3:8e:70:40:e6:df:a1:6a:17:72:09:96:cd:4e:ab:b4:80:24: a6:80:36:00:56:de:cb:c2:88:ab:07:dc:9b:bf:08:68:70:94: 14:98:ca:bb:2c:a7:97:fc:76:fc:14:ce:35:ee:9e:f1:cf:a5: a9:c0:8e:bd:3d:2b:a5:96:ca:d6:94:e6:e7:b4:62:26:94:2b: a3:99:a9:71:b6:e7:e7:00:2c:d6:c2:62:2d:10:1e:67:5e:63: 89:49:17:7d:5b:b2:2a:7a:0b:13:03:45:ef:3b:a6:94:6f:08: 3c:55:a5:31:40:85:87:9e:cf:1e:b1:c7:ad:db:eb:9e:4e:13: 74:4f:e6:bf:5e:a3:11:23:39:f1:03:b7:d4:bb:e7:a1:d6:7c: 07:f8:43:01:73:2b:82:67:a6:cf:38:7c:ae:14:68:aa:e5:5c: 29:28:cb:de:96:00:e3:46:4c:68:d9:2e:d9:ae:af:e8:93:7d: 36:af:54:61:df:08:c3:3e:e9:27:ff:f2:1b:6c:a7:61:cd:22: 0c:41:04:ee:c3:a1:d8:93:d8:4d:61:65:c3:ed:55:a7:6b:ec: c7:ee:40:af:c0:02:23:e6:56:f1:bc:25:c2:6c:63:b5:72:bd: 26:82:6e:ab -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgIDAavrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMjMwNzEwWhcNMjgxMTE4MjMwNzEwWjAYMRYw FAYDVQQDEw02OTJmNzEyNC02MjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAup8t86HbTvEaCAnw9P1W4CS8cp7YcqgLOhcn30BeXooaVg2zFSYv/iBb VaxjUVr11N+gGYyR5T/Zm/ZrdIhzejJDwQIbhWeR+gS9eEyfHbQQ8/ai/1PrcSlh ZZccJp/VRLj8I77HOtcywqiF+d7EpKUdJDKluePVZVLZ4p0+UiX7QcD3kVik9XpI pdPfAoC7MKqgl8b073S0KSVOmSOWyV8hzeLa9U64+REW80+myldePYKYWuLJQ/Wz TzEyhuRCYjDGvxAYLKv7ARclPrACaePHraY5lU2cbXLeJVj+3Hc9be3l4P6yptBn 9zlp5mCoolSBs0o1ZjyZZ9JzuOwpbQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFEOx /lmWjOlSNKfhQN0aHg1KsJ5LMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9BNEE0QzUxQUNGRDMxMUYwQTlDMEM1RDlEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAea04ADBACa04owDAME AJrT1wMEBZrTwDANBgkqhkiG9w0BAQsFAAOCAQEAxyL9gByZV5W99W3yVUPSBc2o 845wQObfoWoXcgmWzU6rtIAkpoA2AFbey8KIqwfcm78IaHCUFJjKuyynl/x2/BTO Ne6e8c+lqcCOvT0rpZbK1pTm57RiJpQro5mpcbbn5wAs1sJiLRAeZ15jiUkXfVuy KnoLEwNF7zumlG8IPFWlMUCFh57PHrHHrdvrnk4TdE/mv16jESM58QO31LvnodZ8 B/hDAXMrgmemzzh8rhRoquVcKSjL3pYA40ZMaNku2a6v6JN9Nq9UYd8Iwz7pJ//y G2ynYc0iDEEE7sOh2JPYTWFlw+1Vp2vsx+5Ar8ACI+ZW8bwlwmxjtXK9JoJuqw== -----END CERTIFICATE-----Generated at Wed Dec 3 11:06:33 2025 by rpki-client