This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA14BACAC13911F0BAC87C8FDAE4EC9C.roa File: BA14BACAC13911F0BAC87C8FDAE4EC9C.roa (raw, json) Hash identifier: PRLwBnVxTIQEYTu1b9rkElFDQBvRX6NLdOaC37t5bDE= Subject key identifier: F1:2A:C4:D1:0C:F7:DC:0F:96:03:88:61:4A:08:CF:91:D4:9C:F7:48 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A8FC Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA14BACAC13911F0BAC87C8FDAE4EC9C.roa Signing time: Fri 14 Nov 2025 09:10:13 +0000 ROA not before: Fri 14 Nov 2025 09:10:06 +0000 ROA not after: Tue 16 Dec 2025 09:10:06 +0000 asID: 22773 IP address blocks: 154.198.20.0/24 maxlen: 24 154.198.21.0/24 maxlen: 24 154.198.22.0/24 maxlen: 24 154.198.23.0/24 maxlen: 24 154.198.24.0/24 maxlen: 24 154.198.25.0/24 maxlen: 24 154.198.26.0/24 maxlen: 24 154.198.27.0/24 maxlen: 24 154.198.28.0/24 maxlen: 24 154.202.90.0/24 maxlen: 24 154.202.92.0/24 maxlen: 24 154.202.93.0/24 maxlen: 24 154.202.94.0/24 maxlen: 24 154.202.95.0/24 maxlen: 24 154.202.96.0/24 maxlen: 24 154.202.97.0/24 maxlen: 24 154.202.98.0/24 maxlen: 24 154.202.102.0/24 maxlen: 24 154.202.107.0/24 maxlen: 24 154.202.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108796 (0x1a8fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 14 09:10:06 2025 GMT Not After : Dec 16 09:10:06 2025 GMT Subject: CN=6916f1f5-c9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:43:fa:c7:fc:52:60:43:8e:3f:ec:9f:22:22: 52:c9:49:6e:68:8a:a4:88:d3:30:8e:3b:3d:8b:20: 5d:e7:3d:32:37:0e:20:c2:21:cc:69:17:ec:78:a9: 25:e7:66:4b:b2:8c:b4:b4:5f:8b:6a:3c:5a:ed:87: 89:9c:3e:d1:f9:8e:dc:cb:af:55:2a:9c:9f:db:f2: 18:43:59:4a:49:59:73:b3:6b:2b:71:6e:9b:c0:49: a7:e6:b9:c5:fd:c0:ba:ee:ba:fe:3c:b7:01:e5:f3: 6d:20:92:37:61:1f:66:c1:fe:40:58:40:81:53:88: 2c:64:99:2e:f9:8b:92:9a:ad:12:3e:59:bd:83:d4: 65:97:76:e8:40:28:aa:b1:ab:12:d6:78:3f:c6:59: bd:bd:ea:ff:f6:d5:11:f7:fc:41:e1:04:6f:76:f8: fc:2a:4f:44:44:85:7e:bf:2d:8f:90:0b:4f:f4:0e: e8:e6:92:e0:c3:9e:a5:82:80:53:7d:fb:f5:12:f4: b7:43:06:4c:15:cb:ca:83:9a:aa:eb:ed:1d:8d:1b: 2a:9e:3b:5a:34:97:25:4e:77:7c:a2:41:09:88:a8: f8:07:74:0f:e1:3b:e6:ed:54:c9:14:69:00:99:32: 6c:f9:f6:78:88:6b:11:1c:ca:79:a4:90:68:4b:e6: 41:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2A:C4:D1:0C:F7:DC:0F:96:03:88:61:4A:08:CF:91:D4:9C:F7:48 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BA14BACAC13911F0BAC87C8FDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.198.20.0-154.198.28.255 154.202.90.0/24 154.202.92.0-154.202.98.255 154.202.102.0/24 154.202.107.0-154.202.108.255 Signature Algorithm: sha256WithRSAEncryption 5d:ac:b8:84:c5:c1:71:ad:d6:f2:f2:93:9f:f3:40:02:78:e5: ec:68:73:bd:e1:d6:ae:11:9b:d7:4d:6c:d0:3f:06:b7:09:f9: 79:96:7e:c4:68:68:64:c9:39:bd:30:70:9d:8a:11:1b:b9:5f: 88:5d:7e:fa:53:f8:ee:10:84:9a:bd:b5:8f:38:9e:ea:40:61: eb:1d:f8:18:5c:a8:4e:0f:94:ef:0f:32:03:eb:ef:d7:00:e1: 01:4c:ea:d1:c6:8b:45:4d:3d:12:fe:86:22:34:a3:8c:72:58: 07:99:f4:81:cd:95:f8:11:c2:28:b1:f9:3c:6a:61:56:f9:cd: cd:fa:17:cc:22:23:78:6c:7a:22:68:c7:18:59:56:03:0c:67: 19:28:fc:22:5f:90:a1:59:f0:0d:d1:9f:77:15:7f:59:27:4f: 72:0f:2b:96:72:17:cd:da:b9:9e:90:5e:65:46:50:00:0b:01: ed:ec:b4:2b:a4:de:ac:20:d3:c9:fc:f8:cd:a7:88:a0:82:f7: 3f:6a:02:56:51:05:7c:7f:83:2f:3c:52:92:6f:cb:a8:a0:7d: 54:03:9e:64:06:27:3d:e2:2e:8f:6a:49:c2:7e:c6:40:f0:66: d3:42:8b:96:8f:94:9c:6d:dc:ad:e0:cd:e5:93:2c:c5:6c:56: 48:e5:7d:8f -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIDAaj8MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTE0MDkxMDA2WhcNMjUxMjE2MDkxMDA2WjAYMRYw FAYDVQQDEw02OTE2ZjFmNS1jOWFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAzkP6x/xSYEOOP+yfIiJSyUluaIqkiNMwjjs9iyBd5z0yNw4gwiHMaRfs eKkl52ZLsoy0tF+Lajxa7YeJnD7R+Y7cy69VKpyf2/IYQ1lKSVlzs2srcW6bwEmn 5rnF/cC67rr+PLcB5fNtIJI3YR9mwf5AWECBU4gsZJku+YuSmq0SPlm9g9Rll3bo QCiqsasS1ng/xlm9ver/9tUR9/xB4QRvdvj8Kk9ERIV+vy2PkAtP9A7o5pLgw56l goBTffv1EvS3QwZMFcvKg5qq6+0djRsqnjtaNJclTnd8okEJiKj4B3QP4Tvm7VTJ FGkAmTJs+fZ4iGsRHMp5pJBoS+ZB3wIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFPEq xNEM99wPlgOIYUoIz5HUnPdIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9CQTE0QkFDQUMxMzkxMUYwQkFDODdDOEZEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2MAwDBAKaxhQDBACaxhwDBACa ylowDAMEAprKXAMEAJrKYgMEAJrKZjAMAwQAmsprAwQAmspsMA0GCSqGSIb3DQEB CwUAA4IBAQBdrLiExcFxrdby8pOf80ACeOXsaHO94dauEZvXTWzQPwa3Cfl5ln7E aGhkyTm9MHCdihEbuV+IXX76U/juEISavbWPOJ7qQGHrHfgYXKhOD5TvDzID6+/X AOEBTOrRxotFTT0S/oYiNKOMclgHmfSBzZX4EcIosfk8amFW+c3N+hfMIiN4bHoi aMcYWVYDDGcZKPwiX5ChWfAN0Z93FX9ZJ09yDyuWchfN2rmekF5lRlAACwHt7LQr pN6sINPJ/PjNp4iggvc/agJWUQV8f4MvPFKSb8uooH1UA55kBic94i6PaknCfsZA 8GbTQouWj5Scbdyt4M3lkyzFbFZI5X2P -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:12 2025 by rpki-client