This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B749220CD01D11F0B8B2BBBCDAE4EC9C.roa File: B749220CD01D11F0B8B2BBBCDAE4EC9C.roa (raw, json) Hash identifier: in+1daCLtEns9gNhjOqktK69RxVwYob0gjmPN6Or0qY= Subject key identifier: 73:D5:2B:45:3F:41:6A:73:78:3C:92:6D:3C:E8:DC:ED:AC:A5:BD:0E Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC08 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B749220CD01D11F0B8B2BBBCDAE4EC9C.roa Signing time: Wed 03 Dec 2025 07:57:34 +0000 ROA not before: Wed 03 Dec 2025 07:57:25 +0000 ROA not after: Mon 05 Jan 2026 07:57:25 +0000 asID: 44559 IP address blocks: 154.209.136.0/24 maxlen: 24 154.209.137.0/24 maxlen: 24 154.209.138.0/24 maxlen: 24 154.209.139.0/24 maxlen: 24 154.209.140.0/24 maxlen: 24 154.209.141.0/24 maxlen: 24 154.209.142.0/24 maxlen: 24 154.209.143.0/24 maxlen: 24 154.209.150.0/24 maxlen: 24 154.209.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109576 (0x1ac08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 07:57:25 2025 GMT Not After : Jan 5 07:57:25 2026 GMT Subject: CN=692fed6d-9171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ee:7f:11:c3:04:31:c8:b9:58:17:b8:d3:ae: dc:f0:94:c7:5d:14:35:57:99:74:3c:de:d3:d0:aa: fe:30:77:d3:c8:80:65:2a:98:04:ab:d2:8d:7d:6e: 52:f7:fb:9b:67:2b:72:86:35:7a:20:82:c9:09:40: 54:9a:47:67:13:52:79:04:47:3c:da:72:31:2a:59: e3:95:5b:60:19:b3:23:b3:ef:b0:cb:5a:1a:7d:98: d5:d6:fd:53:41:14:72:13:d6:a3:74:53:d2:4f:5b: 8a:e8:bb:e3:11:fd:8a:95:4b:f8:7a:f5:c8:78:d1: 10:5f:0c:f5:58:8f:f4:30:c0:94:93:63:b1:66:cc: 2a:65:c7:99:1e:48:2e:ec:0a:ff:cf:95:ac:9b:18: 3e:bc:a6:14:33:ad:e7:4a:56:39:be:f2:fe:b0:25: e4:77:d4:c0:a8:7c:ba:8c:9f:cc:2b:9a:95:49:0b: b9:15:fa:1b:ab:23:07:42:03:51:35:23:4a:71:2a: 32:3d:c2:fc:cc:c8:3e:e0:a3:59:76:7a:58:2b:a6: 19:1f:44:a6:ee:cf:97:fc:20:36:e1:97:c6:c2:f9: 87:d3:79:0f:7e:f6:83:37:93:ba:a1:7f:f4:3c:d3: 21:e1:36:44:08:4d:5b:8e:3b:76:f2:e7:69:21:4a: 99:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D5:2B:45:3F:41:6A:73:78:3C:92:6D:3C:E8:DC:ED:AC:A5:BD:0E X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B749220CD01D11F0B8B2BBBCDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.209.136.0/21 154.209.150.0/23 Signature Algorithm: sha256WithRSAEncryption bb:4a:b4:7f:60:92:09:96:eb:42:27:77:57:a0:95:01:b3:5f: 64:c8:8d:9b:e9:93:e4:f3:3c:19:84:d9:05:63:03:7d:8c:4f: 09:d3:38:87:d6:7a:6f:49:d7:9b:ac:b9:f2:7b:4b:43:a7:df: ec:d5:59:33:0e:bd:e7:7f:d5:93:ab:10:7b:24:d8:5b:a0:a7: a5:70:22:84:76:05:d9:d4:30:b9:1e:7b:77:e9:94:dc:19:c2: 5b:ef:48:5d:bc:bd:fd:c2:bb:6e:5b:1e:b9:29:e5:b2:8b:b6: 02:fd:aa:c4:6e:3e:60:5c:b4:c4:8a:b4:d1:31:aa:f8:f1:b5: 08:c4:8a:20:fa:cf:f0:2f:9d:4b:55:0f:8c:6c:e7:2b:f4:51: da:88:84:55:4a:d5:d1:3a:a9:b3:84:cd:cd:60:07:82:ff:2d: 86:c5:8f:37:c6:f3:fa:6e:c3:b0:80:91:30:c3:df:f3:ae:9a: 86:f5:00:46:1b:8d:d7:40:24:ca:b3:2f:1b:a4:7d:d6:b6:30: 04:51:aa:f4:90:34:d7:33:5c:26:fb:f7:84:10:22:6d:01:74: 38:ce:82:eb:31:1f:12:1a:df:9c:c4:da:77:8c:2e:24:3c:e4: 4a:43:ed:4f:f9:df:01:05:66:85:9b:7f:26:ad:ae:09:82:ca: b3:37:d1:54 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAawIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMDc1NzI1WhcNMjYwMTA1MDc1NzI1WjAYMRYw FAYDVQQDEw02OTJmZWQ2ZC05MTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAxO5/EcMEMci5WBe4067c8JTHXRQ1V5l0PN7T0Kr+MHfTyIBlKpgEq9KN fW5S9/ubZytyhjV6IILJCUBUmkdnE1J5BEc82nIxKlnjlVtgGbMjs++wy1oafZjV 1v1TQRRyE9ajdFPST1uK6LvjEf2KlUv4evXIeNEQXwz1WI/0MMCUk2OxZswqZceZ Hkgu7Ar/z5Wsmxg+vKYUM63nSlY5vvL+sCXkd9TAqHy6jJ/MK5qVSQu5FfobqyMH QgNRNSNKcSoyPcL8zMg+4KNZdnpYK6YZH0Sm7s+X/CA24ZfGwvmH03kPfvaDN5O6 oX/0PNMh4TZECE1bjjt28udpIUqZGwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFHPV K0U/QWpzeDySbTzo3O2spb0OMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9CNzQ5MjIwQ0QwMUQxMUYwQjhCMkJCQkNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDmtGIAwQBmtGWMA0GCSqG SIb3DQEBCwUAA4IBAQC7SrR/YJIJlutCJ3dXoJUBs19kyI2b6ZPk8zwZhNkFYwN9 jE8J0ziH1npvSdebrLnye0tDp9/s1VkzDr3nf9WTqxB7JNhboKelcCKEdgXZ1DC5 Hnt36ZTcGcJb70hdvL39wrtuWx65KeWyi7YC/arEbj5gXLTEirTRMar48bUIxIog +s/wL51LVQ+MbOcr9FHaiIRVStXROqmzhM3NYAeC/y2GxY83xvP6bsOwgJEww9/z rpqG9QBGG43XQCTKsy8bpH3WtjAEUar0kDTXM1wm+/eEECJtAXQ4zoLrMR8SGt+c xNp3jC4kPORKQ+1P+d8BBWaFm38mra4JgsqzN9FU -----END CERTIFICATE-----Generated at Wed Dec 3 11:07:09 2025 by rpki-client