This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A91EEC36C48B11F0BC14BD82DAE4EC9C.roa File: A91EEC36C48B11F0BC14BD82DAE4EC9C.roa (raw, json) Hash identifier: a6oa7Lk1D88JH3UtjvaIpvKd7MLncLT2jZFX+mayMvA= Subject key identifier: C4:25:D2:D6:CF:DB:D6:62:CE:94:93:94:EE:03:D1:4D:12:53:C0:EA Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A9AF Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A91EEC36C48B11F0BC14BD82DAE4EC9C.roa Signing time: Tue 18 Nov 2025 14:34:17 +0000 ROA not before: Tue 18 Nov 2025 14:34:10 +0000 ROA not after: Fri 17 Jul 2026 14:34:10 +0000 asID: 18013 IP address blocks: 154.202.117.0/24 maxlen: 24 154.202.120.0/21 maxlen: 24 154.204.8.0/21 maxlen: 24 154.204.128.0/18 maxlen: 24 154.210.2.0/24 maxlen: 24 154.211.4.0/22 maxlen: 24 154.217.234.0/23 maxlen: 24 154.217.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108975 (0x1a9af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 18 14:34:10 2025 GMT Not After : Jul 17 14:34:10 2026 GMT Subject: CN=691c83e9-aaec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9c:81:ae:0a:de:7f:7f:28:3e:a9:ff:21:f0: 07:ea:20:d6:6b:97:d0:15:33:3f:e6:9a:f6:b5:d2: 16:99:eb:fe:7f:b3:37:2f:f5:b3:1c:5f:2a:47:6c: 3a:67:20:52:8d:02:0f:ce:39:d9:4c:c1:67:57:41: d1:cb:2c:11:2f:c6:ac:71:0c:b6:12:43:ff:70:96: b5:3a:cf:51:ab:c1:6e:90:c7:8a:77:9f:b9:ec:64: 93:41:3a:04:1c:b3:29:0b:39:93:6e:0c:e9:4c:23: 84:f2:62:9f:68:6a:e4:85:e8:f2:4d:27:e9:f3:96: dd:a7:0b:32:b0:ae:4d:84:54:f3:d2:b1:05:16:89: a2:e3:1f:6e:e4:b3:32:e2:7d:e3:bf:3c:f0:5f:ff: 95:1c:15:89:f5:44:8f:0c:33:0c:62:69:0e:a7:bb: 8e:49:0e:df:3c:13:5f:28:19:50:d9:85:1a:0c:f3: db:1f:96:15:c9:db:ee:6c:b6:d6:ac:41:d8:ca:fb: 8b:5d:11:57:cd:0d:ce:96:1a:f6:1a:58:42:15:93: 12:82:c9:1c:d3:3a:e4:89:38:8b:29:c5:82:6a:95: c5:2c:95:60:ba:62:1e:2c:7c:8b:3d:e6:9e:72:f5: 11:f1:0f:b7:c6:5d:88:ab:da:84:22:85:c0:33:be: 2e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:25:D2:D6:CF:DB:D6:62:CE:94:93:94:EE:03:D1:4D:12:53:C0:EA X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A91EEC36C48B11F0BC14BD82DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.202.117.0/24 154.202.120.0/21 154.204.8.0/21 154.204.128.0/18 154.210.2.0/24 154.211.4.0/22 154.217.234.0-154.217.239.255 Signature Algorithm: sha256WithRSAEncryption 11:03:d6:56:2d:08:3a:92:c3:71:14:5b:ec:35:1b:ec:92:0e: 84:32:27:34:2e:17:dd:27:9b:8f:6a:90:66:2e:f2:d5:96:39: 6f:e3:e3:cf:70:d8:41:a0:a9:fd:1c:7e:4b:34:36:22:cd:06: 00:b6:7f:54:f4:f3:2d:ca:d4:09:ac:5d:51:01:be:07:c9:38: b3:e4:a9:1f:2a:c6:b7:fb:81:10:fb:3f:8c:d8:15:37:d0:c7: 8d:53:47:6a:f8:a4:08:78:cd:7e:9b:be:66:2e:46:43:f9:3b: 3a:5b:47:03:63:56:3b:9c:94:83:b1:cf:e6:89:57:81:a9:92: 33:7e:3c:c0:48:de:03:e2:fd:fe:ad:3e:7e:bd:50:0b:b0:26: 2f:96:64:a5:df:ea:8d:ea:56:73:11:e3:e5:05:ba:52:e1:03: ab:5a:c5:19:ad:1f:9f:d4:96:d0:eb:9d:5f:8a:f0:9e:53:b4: 91:ce:6c:f8:4a:35:21:6c:7c:52:e1:b0:2a:68:d9:63:4a:41: 15:f2:1f:f3:ea:19:0a:a8:9f:3a:2d:39:97:72:d7:a4:ff:bc: 6a:57:ee:7a:3e:5a:85:ed:86:18:71:3a:99:4f:2a:d8:d3:a3: 7e:39:8c:1a:d7:2d:3b:6a:fc:ef:1e:17:f2:26:98:bd:1c:f4: 45:9a:66:20 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIDAamvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTE4MTQzNDEwWhcNMjYwNzE3MTQzNDEwWjAYMRYw FAYDVQQDEw02OTFjODNlOS1hYWVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA0pyBrgref38oPqn/IfAH6iDWa5fQFTM/5pr2tdIWmev+f7M3L/WzHF8q R2w6ZyBSjQIPzjnZTMFnV0HRyywRL8ascQy2EkP/cJa1Os9Rq8FukMeKd5+57GST QToEHLMpCzmTbgzpTCOE8mKfaGrkhejyTSfp85bdpwsysK5NhFTz0rEFFomi4x9u 5LMy4n3jvzzwX/+VHBWJ9USPDDMMYmkOp7uOSQ7fPBNfKBlQ2YUaDPPbH5YVydvu bLbWrEHYyvuLXRFXzQ3Olhr2GlhCFZMSgskc0zrkiTiLKcWCapXFLJVgumIeLHyL PeaecvUR8Q+3xl2Iq9qEIoXAM74uvwIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFMQl 0tbP29ZizpSTlO4D0U0SU8DqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9BOTFFRUMzNkM0OEIxMUYwQkMxNEJEODJEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQAmsp1AwQDmsp4AwQDmswI AwQGmsyAAwQAmtICAwQCmtMEMAwDBAGa2eoDBASa2eAwDQYJKoZIhvcNAQELBQAD ggEBABED1lYtCDqSw3EUW+w1G+ySDoQyJzQuF90nm49qkGYu8tWWOW/j489w2EGg qf0cfks0NiLNBgC2f1T08y3K1AmsXVEBvgfJOLPkqR8qxrf7gRD7P4zYFTfQx41T R2r4pAh4zX6bvmYuRkP5OzpbRwNjVjuclIOxz+aJV4GpkjN+PMBI3gPi/f6tPn69 UAuwJi+WZKXf6o3qVnMR4+UFulLhA6taxRmtH5/UltDrnV+K8J5TtJHObPhKNSFs fFLhsCpo2WNKQRXyH/PqGQqonzotOZdy16T/vGpX7no+WoXthhhxOplPKtjTo345 jBrXLTtq/O8eF/ImmL0c9EWaZiA= -----END CERTIFICATE-----Generated at Wed Dec 3 11:07:13 2025 by rpki-client