This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC5A7EC8CC4D11F0871D61D2DAE4EC9C.roa File: AC5A7EC8CC4D11F0871D61D2DAE4EC9C.roa (raw, json) Hash identifier: 183qi7EM8O5h6r6zjbRPj2PLwMT0F3iZ8S6KgPbLUiU= Subject key identifier: 0E:67:5A:F1:9B:70:88:90:66:BE:B2:17:2A:77:F4:86:E2:A3:65:A3 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AB06 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC5A7EC8CC4D11F0871D61D2DAE4EC9C.roa Signing time: Fri 28 Nov 2025 11:30:43 +0000 ROA not before: Fri 28 Nov 2025 11:30:38 +0000 ROA not after: Thu 24 Dec 2026 11:30:38 +0000 asID: 137443 IP address blocks: 154.211.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109318 (0x1ab06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 28 11:30:38 2025 GMT Not After : Dec 24 11:30:38 2026 GMT Subject: CN=692987e3-f4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4e:f1:1f:69:7a:bb:f3:17:8a:d2:f8:ce:9d: 37:dd:be:e4:e7:09:ca:9c:8e:ac:1d:ba:c8:43:b6: 4c:e8:a4:66:9c:b7:f2:12:6a:35:48:09:aa:2f:25: c1:7d:4a:be:80:fe:37:2a:f1:a2:ef:82:35:e3:73: 51:73:c8:17:c7:9e:af:32:6d:7e:b1:97:aa:32:86: b4:35:c2:3b:92:d6:0e:9b:5f:37:8f:dc:65:87:d0: f2:6d:48:62:fb:b7:83:70:ca:68:7f:f8:ae:97:14: 14:58:72:94:56:0f:4d:f9:69:ee:0a:c9:77:82:28: 87:1f:37:75:5f:b6:c6:97:2c:3d:c4:e0:6d:6e:87: 54:22:82:a1:61:7f:61:03:65:fd:0b:4d:4b:96:d0: f0:21:a7:be:98:0b:83:c6:ba:13:1b:7e:f3:e8:a7: 2d:d4:df:a5:85:d7:af:9e:ef:31:bf:f1:19:6c:b5: 59:c1:7d:48:16:78:80:17:8a:4e:19:ea:0c:e5:22: 77:f7:b1:5f:b1:f3:2d:07:52:91:d7:79:92:71:53: 6e:f7:da:7e:dd:93:f7:d0:16:e1:ac:43:e7:83:42: 42:77:15:5f:ec:64:c7:c7:3e:89:85:7b:bd:fc:3c: 41:8a:fa:ab:7c:e3:2b:93:bf:51:b4:46:6b:62:70: 96:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:67:5A:F1:9B:70:88:90:66:BE:B2:17:2A:77:F4:86:E2:A3:65:A3 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC5A7EC8CC4D11F0871D61D2DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.211.20.0/22 Signature Algorithm: sha256WithRSAEncryption 32:55:75:eb:e0:ce:cf:77:61:4e:3d:cf:3e:b1:37:20:cd:05: 58:43:ca:93:b6:d0:5d:ab:f3:51:0c:98:ab:ad:75:c9:9b:a0: 0c:01:9d:04:b5:1f:39:93:6b:98:a3:25:8d:43:12:56:77:fc: 23:35:fd:09:e1:ad:57:63:15:14:80:f5:9f:32:cd:bb:00:9e: 5f:cb:bb:a6:ed:33:b7:46:18:97:fc:51:34:d1:c2:03:0b:51: 54:b5:04:09:09:e7:bf:ab:c5:98:75:b6:b9:c9:6e:a8:de:aa: 6c:3a:ae:98:d0:13:06:63:ed:56:dd:d6:72:0b:d0:9f:09:e2: fa:95:cb:f1:19:ed:b8:9c:a2:5c:3d:47:14:19:36:72:46:ce: d0:3b:07:2a:f3:9c:e6:98:c6:7c:a2:9b:20:a3:70:41:2c:75: e1:38:d7:91:4c:a3:06:79:7c:b0:ec:28:5c:41:6f:89:94:de: 7e:af:94:5d:84:0e:d7:be:44:6c:35:15:15:cb:88:5e:43:00: b7:6c:20:d3:a8:3e:8d:3f:5e:a7:09:a3:58:d9:41:2b:78:91: 04:e7:34:60:20:4d:cd:6e:08:18:98:3c:58:e8:e2:e8:09:c2: af:98:60:67:f7:d7:c5:fe:db:84:17:db:18:9c:0f:6f:bd:af: 66:e3:82:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAasGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTI4MTEzMDM4WhcNMjYxMjI0MTEzMDM4WjAYMRYw FAYDVQQDEw02OTI5ODdlMy1mNGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAu07xH2l6u/MXitL4zp033b7k5wnKnI6sHbrIQ7ZM6KRmnLfyEmo1SAmq LyXBfUq+gP43KvGi74I143NRc8gXx56vMm1+sZeqMoa0NcI7ktYOm183j9xlh9Dy bUhi+7eDcMpof/iulxQUWHKUVg9N+WnuCsl3giiHHzd1X7bGlyw9xOBtbodUIoKh YX9hA2X9C01LltDwIae+mAuDxroTG37z6Kct1N+lhdevnu8xv/EZbLVZwX1IFniA F4pOGeoM5SJ397FfsfMtB1KR13mScVNu99p+3ZP30BbhrEPng0JCdxVf7GTHxz6J hXu9/DxBivqrfOMrk79RtEZrYnCWUwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFA5n WvGbcIiQZr6yFyp39Ibio2WjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9BQzVBN0VDOENDNEQxMUYwODcxRDYxRDJEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmtMUMA0GCSqGSIb3DQEB CwUAA4IBAQAyVXXr4M7Pd2FOPc8+sTcgzQVYQ8qTttBdq/NRDJirrXXJm6AMAZ0E tR85k2uYoyWNQxJWd/wjNf0J4a1XYxUUgPWfMs27AJ5fy7um7TO3RhiX/FE00cID C1FUtQQJCee/q8WYdba5yW6o3qpsOq6Y0BMGY+1W3dZyC9CfCeL6lcvxGe24nKJc PUcUGTZyRs7QOwcq85zmmMZ8opsgo3BBLHXhONeRTKMGeXyw7ChcQW+JlN5+r5Rd hA7XvkRsNRUVy4heQwC3bCDTqD6NP16nCaNY2UEreJEE5zRgIE3NbggYmDxY6OLo CcKvmGBn99fF/tuEF9sYnA9vva9m44LJ -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:16 2025 by rpki-client