This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5855B4ECB9911F09E08CEE8DAE4EC9C.roa File: B5855B4ECB9911F09E08CEE8DAE4EC9C.roa (raw, json) Hash identifier: pMPH86sWsszCW9DHusVV5JdNNLi5t5Z6Egl+hwd7Ktg= Subject key identifier: 7A:C2:52:A5:1C:FD:C9:61:78:54:D7:12:AA:FB:01:E0:F7:43:6B:30 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AAE1 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5855B4ECB9911F09E08CEE8DAE4EC9C.roa Signing time: Thu 27 Nov 2025 14:02:29 +0000 ROA not before: Thu 27 Nov 2025 14:02:22 +0000 ROA not after: Fri 05 Dec 2025 14:02:22 +0000 asID: 44559 IP address blocks: 154.198.36.0/24 maxlen: 24 154.203.251.0/24 maxlen: 24 154.205.233.0/24 maxlen: 24 154.205.234.0/24 maxlen: 24 154.205.235.0/24 maxlen: 24 154.205.236.0/24 maxlen: 24 154.205.237.0/24 maxlen: 24 154.205.238.0/24 maxlen: 24 154.205.239.0/24 maxlen: 24 154.205.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109281 (0x1aae1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 27 14:02:22 2025 GMT Not After : Dec 5 14:02:22 2025 GMT Subject: CN=692859f5-5468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:2f:41:c7:f1:75:9f:52:0f:8b:f2:54:22:55: ac:76:5f:25:06:a1:bd:3f:79:1e:2f:8c:ca:68:f0: a7:88:15:0d:07:84:d0:9d:1d:1e:bc:7a:d6:3b:e7: 8b:f1:80:52:76:b3:f4:79:af:45:30:c1:16:b9:1b: 6e:12:4d:5f:db:9a:48:d1:65:d0:52:63:77:5d:e8: 22:32:d0:a8:fd:98:64:3e:84:33:43:02:59:63:80: 5c:c3:16:e7:92:5e:c2:08:d3:63:84:e3:96:db:45: 2b:3c:eb:6e:dd:02:5d:09:92:51:6c:b4:3b:5e:d4: a5:7d:82:fd:d3:8f:0b:3a:76:80:0a:7a:1e:22:41: d0:fa:b8:1f:c1:ce:5f:c8:64:74:1f:e6:77:b2:ca: 1d:36:5f:6a:72:4a:f3:cb:7c:98:9d:dd:f7:3f:1a: 98:03:71:7a:a4:05:84:e6:9e:40:c5:c0:b6:12:d7: 0b:0f:d4:7b:c0:1a:37:be:59:c8:43:3f:08:f3:9b: ad:5f:5f:74:ab:df:e0:39:30:5f:c9:b3:75:4a:5b: 4f:65:3c:7e:d9:16:c9:b8:7a:a3:00:fc:38:0a:50: 84:67:c6:59:ff:c9:d5:66:10:dd:b4:a3:b1:d8:12: b4:a7:a1:47:fd:15:0b:a1:76:33:5f:ac:50:05:c8: 9d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C2:52:A5:1C:FD:C9:61:78:54:D7:12:AA:FB:01:E0:F7:43:6B:30 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5855B4ECB9911F09E08CEE8DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.198.36.0/24 154.203.251.0/24 154.205.233.0-154.205.240.255 Signature Algorithm: sha256WithRSAEncryption a6:3b:b4:c5:ad:72:86:a7:ea:05:a6:e2:ad:b7:b4:b4:3d:6e: ba:e2:a0:43:0b:b0:fa:09:20:ed:88:55:57:4c:7d:4c:2b:42: 7a:67:50:5e:62:f9:90:31:e3:9b:7d:15:a3:21:29:d1:63:f2: be:9e:c0:35:61:8c:85:d5:67:93:3e:eb:cb:80:26:96:91:50: ec:38:3a:6c:14:f8:8c:3e:ae:41:e7:8a:fa:d1:49:25:a2:80: fd:22:35:5d:cd:20:c0:92:c6:29:81:d0:b9:08:54:87:c6:ed: 4b:cd:7d:0d:43:db:1c:4b:f5:02:de:48:78:f7:96:9c:d6:20: fd:7a:7b:6c:8e:bb:9d:5d:2b:49:31:6a:ad:7e:40:d3:ca:d9: 2d:97:e9:ac:8f:5a:14:1c:f0:35:0f:63:7b:b2:69:62:a2:84: 81:f2:6b:3c:06:93:5a:35:c3:04:f9:1c:68:1d:91:cb:a2:86: d6:3a:3d:e5:c4:91:3d:70:37:60:8b:4f:1b:6c:f1:5b:f4:b7: 85:8e:59:9c:6e:0b:89:e1:d3:3b:02:36:3e:13:c5:e0:6a:52: ed:bb:1d:90:95:68:6a:83:ae:de:fe:c8:70:f7:64:db:b0:2e: d5:31:74:9c:37:52:ea:1d:c0:f8:1d:63:88:48:0d:7e:e4:c4: f3:0d:92:c5 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgIDAarhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTI3MTQwMjIyWhcNMjUxMjA1MTQwMjIyWjAYMRYw FAYDVQQDEw02OTI4NTlmNS01NDY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAxy9Bx/F1n1IPi/JUIlWsdl8lBqG9P3keL4zKaPCniBUNB4TQnR0evHrW O+eL8YBSdrP0ea9FMMEWuRtuEk1f25pI0WXQUmN3XegiMtCo/ZhkPoQzQwJZY4Bc wxbnkl7CCNNjhOOW20UrPOtu3QJdCZJRbLQ7XtSlfYL9048LOnaACnoeIkHQ+rgf wc5fyGR0H+Z3ssodNl9qckrzy3yYnd33PxqYA3F6pAWE5p5AxcC2EtcLD9R7wBo3 vlnIQz8I85utX190q9/gOTBfybN1SltPZTx+2RbJuHqjAPw4ClCEZ8ZZ/8nVZhDd tKOx2BK0p6FH/RULoXYzX6xQBcid+QIDAQABo4ICuTCCArUwHQYDVR0OBBYEFHrC UqUc/clheFTXEqr7AeD3Q2swMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9CNTg1NUI0RUNCOTkxMUYwOUUwOENFRThEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAmsYkAwQAmsv7MAwDBACa zekDBACazfAwDQYJKoZIhvcNAQELBQADggEBAKY7tMWtcoan6gWm4q23tLQ9brri oEMLsPoJIO2IVVdMfUwrQnpnUF5i+ZAx45t9FaMhKdFj8r6ewDVhjIXVZ5M+68uA JpaRUOw4OmwU+Iw+rkHnivrRSSWigP0iNV3NIMCSximB0LkIVIfG7UvNfQ1D2xxL 9QLeSHj3lpzWIP16e2yOu51dK0kxaq1+QNPK2S2X6ayPWhQc8DUPY3uyaWKihIHy azwGk1o1wwT5HGgdkcuihtY6PeXEkT1wN2CLTxts8Vv0t4WOWZxuC4nh0zsCNj4T xeBqUu27HZCVaGqDrt7+yHD3ZNuwLtUxdJw3UuodwPgdY4hIDX7kxPMNksU= -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:09 2025 by rpki-client