This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCA6AC64C3C111F0A5594F84DAE4EC9C.roa File: BCA6AC64C3C111F0A5594F84DAE4EC9C.roa (raw, json) Hash identifier: HpoiGI3R2TytUts/q63UCh6ehJQTJnpLwAFfXvfaiIo= Subject key identifier: A8:CB:02:55:8D:1B:A2:9D:32:F2:EA:41:69:80:17:8F:27:A3:5F:2A Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A96B Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCA6AC64C3C111F0A5594F84DAE4EC9C.roa Signing time: Mon 17 Nov 2025 14:28:51 +0000 ROA not before: Mon 17 Nov 2025 14:28:46 +0000 ROA not after: Wed 24 Dec 2025 14:28:46 +0000 asID: 55933 IP address blocks: 154.89.144.0/20 maxlen: 24 154.89.148.0/23 maxlen: 24 154.89.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108907 (0x1a96b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 17 14:28:46 2025 GMT Not After : Dec 24 14:28:46 2025 GMT Subject: CN=691b3123-fc4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0d:01:9b:b4:84:96:2e:52:8a:2d:fd:f4:26: ab:5b:0e:bc:1a:e2:90:11:c0:51:f6:6f:37:3c:38: c8:b2:ce:69:b3:d7:d5:99:10:d9:59:4f:00:39:68: e5:21:02:d6:f5:82:c7:13:74:6b:78:73:f4:c2:f9: 27:95:ff:8e:eb:44:db:e3:db:fd:67:77:10:b2:05: c5:9c:d6:ee:e7:56:ed:5b:ff:06:af:3c:ac:e4:9c: f6:87:56:5e:a9:3b:a0:71:8d:c2:6a:96:34:00:7b: a5:be:04:3d:79:f6:e5:e7:0f:c5:c5:30:ca:ae:55: ab:4d:15:e8:1b:2f:3f:f8:cb:8f:fb:8b:a2:5b:5c: 1b:a4:1b:e7:52:39:b5:d6:34:49:ac:99:1f:02:17: a9:2c:43:65:f7:27:6d:95:5c:39:b0:81:1c:6b:54: 4a:e7:1a:05:54:4f:d4:2b:cc:e4:b9:57:ce:3c:db: 97:53:2b:99:e5:d5:0c:3b:73:0c:0c:5e:a1:e6:f5: e0:6b:28:c1:4e:f4:f9:7e:39:85:48:e0:cf:21:54: 4e:90:8f:be:45:3c:57:8b:a7:44:d0:16:13:d8:a6: f1:9d:3b:22:fa:27:fd:8f:81:a9:26:8b:ad:e2:7b: f9:b9:25:eb:da:8b:03:16:68:da:76:25:eb:0e:35: 3c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CB:02:55:8D:1B:A2:9D:32:F2:EA:41:69:80:17:8F:27:A3:5F:2A X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BCA6AC64C3C111F0A5594F84DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.89.144.0/20 Signature Algorithm: sha256WithRSAEncryption 7e:da:61:02:22:0e:26:aa:2f:c4:5c:a0:90:11:4b:26:89:0b: 22:69:58:c4:fe:45:85:9e:e3:25:16:36:9e:69:77:93:9f:5a: 26:c5:fc:2c:98:3e:4b:aa:3e:5f:63:7d:15:75:cb:c0:ae:1e: da:ec:02:15:2e:c4:9a:5f:5a:9e:72:52:35:7c:ac:8e:98:69: f2:76:64:c5:63:69:07:24:dc:24:fa:aa:8f:5c:78:86:d6:27: 7c:7f:f2:63:55:53:02:1c:07:90:36:81:c1:11:29:51:ab:76: ca:dc:6b:1e:ca:a6:50:ed:e0:f1:70:a8:03:2f:b5:d5:85:6a: 4d:77:de:1c:8d:21:fa:6e:20:be:4e:2b:f9:51:fc:d5:a6:7a: 62:a1:72:b4:a3:3f:1c:9d:73:e3:5f:02:2e:9d:72:82:74:1d: 92:e8:f2:ff:06:16:d5:66:2f:1f:a7:31:ed:9f:1c:2c:47:46: 78:67:56:5d:97:63:85:50:e4:ce:90:65:99:51:1c:2e:5e:7f: a8:4b:cf:0f:e8:30:25:82:c6:5a:2b:d1:0c:9b:61:ba:0a:fb: 1e:40:2f:f8:d4:35:95:f6:4e:b6:42:4f:93:af:a2:42:79:94: 11:8a:42:d7:1f:c3:94:3c:9c:10:bf:98:b1:25:1d:f4:0d:ce: 69:24:26:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAalrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTE3MTQyODQ2WhcNMjUxMjI0MTQyODQ2WjAYMRYw FAYDVQQDEw02OTFiMzEyMy1mYzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAzQ0Bm7SEli5Sii399CarWw68GuKQEcBR9m83PDjIss5ps9fVmRDZWU8A OWjlIQLW9YLHE3RreHP0wvknlf+O60Tb49v9Z3cQsgXFnNbu51btW/8Grzys5Jz2 h1ZeqTugcY3CapY0AHulvgQ9efbl5w/FxTDKrlWrTRXoGy8/+MuP+4uiW1wbpBvn Ujm11jRJrJkfAhepLENl9ydtlVw5sIEca1RK5xoFVE/UK8zkuVfOPNuXUyuZ5dUM O3MMDF6h5vXgayjBTvT5fjmFSODPIVROkI++RTxXi6dE0BYT2KbxnTsi+if9j4Gp Jout4nv5uSXr2osDFmjadiXrDjU8lQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKjL AlWNG6KdMvLqQWmAF48no18qMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9CQ0E2QUM2NEMzQzExMUYwQTU1OTRGODREQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmlmQMA0GCSqGSIb3DQEB CwUAA4IBAQB+2mECIg4mqi/EXKCQEUsmiQsiaVjE/kWFnuMlFjaeaXeTn1omxfws mD5Lqj5fY30VdcvArh7a7AIVLsSaX1qeclI1fKyOmGnydmTFY2kHJNwk+qqPXHiG 1id8f/JjVVMCHAeQNoHBESlRq3bK3GseyqZQ7eDxcKgDL7XVhWpNd94cjSH6biC+ Tiv5UfzVpnpioXK0oz8cnXPjXwIunXKCdB2S6PL/BhbVZi8fpzHtnxwsR0Z4Z1Zd l2OFUOTOkGWZURwuXn+oS88P6DAlgsZaK9EMm2G6CvseQC/41DWV9k62Qk+Tr6JC eZQRikLXH8OUPJwQv5ixJR30Dc5pJCZ0 -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:14 2025 by rpki-client