This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDC0CF58DF0A11F0B66053D4DAE4EC9C.roa File: BDC0CF58DF0A11F0B66053D4DAE4EC9C.roa (raw, json) Hash identifier: MAuPNtmNn0r4YlyHloXQeehkZQFnRrNexV6ndh0o5no= Subject key identifier: 5A:12:77:B4:C2:A5:D7:EC:8D:B1:E3:CF:E5:CC:5D:B6:CC:0F:6F:3A Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AFC6 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDC0CF58DF0A11F0B66053D4DAE4EC9C.roa Signing time: Mon 22 Dec 2025 07:49:28 +0000 ROA not before: Mon 22 Dec 2025 07:49:22 +0000 ROA not after: Sat 27 Dec 2025 07:49:22 +0000 asID: 140227 IP address blocks: 154.205.211.0/24 maxlen: 24 154.205.212.0/24 maxlen: 24 154.205.213.0/24 maxlen: 24 154.205.214.0/24 maxlen: 24 154.205.215.0/24 maxlen: 24 154.205.216.0/24 maxlen: 24 154.205.217.0/24 maxlen: 24 154.205.218.0/24 maxlen: 24 154.205.219.0/24 maxlen: 24 154.205.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 25 Dec 2025 00:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110534 (0x1afc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 22 07:49:22 2025 GMT Not After : Dec 27 07:49:22 2025 GMT Subject: CN=6948f808-ccf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:d1:b5:06:ad:a3:af:e8:5a:19:56:03:f6: 77:96:c0:fc:3a:0b:96:af:59:25:98:62:8b:14:d4: e0:7e:e2:aa:97:df:4f:a9:6e:3a:aa:8d:1e:96:51: 15:a1:6e:99:e7:5a:5c:f9:a3:91:c3:d7:2c:c5:80: 36:4c:39:9f:0d:c4:25:4e:0d:8f:44:04:53:54:b5: 03:04:29:21:81:d8:3f:a7:ba:a1:be:ba:92:bc:eb: d7:20:e1:6a:41:a1:7b:d0:fe:61:96:db:8d:73:6f: ba:73:13:79:96:d5:4a:03:e4:1b:0f:96:15:c2:b7: f3:a5:ea:ec:e4:d2:cb:48:17:7a:6a:d7:60:cc:04: db:b6:75:c2:ab:94:46:e3:f0:ba:19:2a:87:70:fe: c2:a7:20:27:9f:1d:d2:bd:a5:17:97:1c:f4:16:d0: c6:9d:71:38:d8:b1:c9:fa:60:f5:8f:86:3d:8e:a4: e0:47:a5:b8:88:9e:d8:34:0c:f1:31:8e:d8:2d:b2: ab:db:02:68:42:b1:b7:e7:e3:62:fe:22:85:f9:6a: c7:16:d6:85:44:bd:56:77:35:8a:20:12:bd:bb:46: c5:f1:72:a0:13:88:86:35:1d:93:eb:f6:64:48:64: e9:f6:ad:c6:ef:41:1b:86:89:3e:e3:3b:7e:a5:53: f0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:12:77:B4:C2:A5:D7:EC:8D:B1:E3:CF:E5:CC:5D:B6:CC:0F:6F:3A X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDC0CF58DF0A11F0B66053D4DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.205.211.0-154.205.220.255 Signature Algorithm: sha256WithRSAEncryption c8:d7:b1:e9:6d:68:21:30:29:71:7d:63:ee:25:74:ee:58:c0: 3b:b0:31:d1:ba:a8:c6:fa:b9:ad:7f:5d:06:0f:b4:2d:fb:a8: 81:9a:4f:a1:b9:38:ae:98:61:ee:ab:40:d0:e6:88:1c:9e:df: c0:47:1a:6f:b5:10:67:0e:dd:31:ff:42:e1:f1:17:92:cc:70: a3:ab:79:60:9d:68:c9:2a:8a:d3:23:71:cf:ac:64:43:c7:05: 82:ab:3b:c6:75:cf:c4:a6:8b:bb:41:5d:4b:f2:16:76:60:ff: 3c:9d:f2:f3:58:53:65:a6:93:6c:a4:2e:3c:1f:a5:aa:3c:f0: 70:95:40:39:57:ac:06:ef:76:19:6d:aa:68:11:05:f2:a9:59: af:bf:70:aa:df:e7:d0:ef:99:51:7a:99:6c:18:2c:12:2d:c0: e5:0a:8f:d8:4f:48:ad:67:a1:de:0f:9d:21:22:e4:13:92:b6: 38:0c:ff:d7:7f:59:6c:d8:41:10:6a:61:5c:fa:fd:52:ce:cb: 0a:ef:e0:47:57:e9:f6:d8:66:06:ae:48:ca:ac:09:0d:8b:7b: 86:0f:28:02:98:d6:a9:3b:6a:c4:7c:c7:03:f3:8f:97:a2:51: e1:92:3e:e5:86:31:a0:7e:a1:66:53:0a:a6:42:bd:5a:0f:8e: ad:cf:3f:81 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIDAa/GMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjIyMDc0OTIyWhcNMjUxMjI3MDc0OTIyWjAYMRYw FAYDVQQDEw02OTQ4ZjgwOC1jY2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAxJvRtQato6/oWhlWA/Z3lsD8OguWr1klmGKLFNTgfuKql99PqW46qo0e llEVoW6Z51pc+aORw9csxYA2TDmfDcQlTg2PRARTVLUDBCkhgdg/p7qhvrqSvOvX IOFqQaF70P5hltuNc2+6cxN5ltVKA+QbD5YVwrfzpers5NLLSBd6atdgzATbtnXC q5RG4/C6GSqHcP7CpyAnnx3SvaUXlxz0FtDGnXE42LHJ+mD1j4Y9jqTgR6W4iJ7Y NAzxMY7YLbKr2wJoQrG35+Ni/iKF+WrHFtaFRL1WdzWKIBK9u0bF8XKgE4iGNR2T 6/ZkSGTp9q3G70Ebhok+4zt+pVPwwwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFoS d7TCpdfsjbHjz+XMXbbMD286MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9CREMwQ0Y1OERGMEExMUYwQjY2MDUzRDREQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACazdMDBACazdwwDQYJ KoZIhvcNAQELBQADggEBAMjXseltaCEwKXF9Y+4ldO5YwDuwMdG6qMb6ua1/XQYP tC37qIGaT6G5OK6YYe6rQNDmiBye38BHGm+1EGcO3TH/QuHxF5LMcKOreWCdaMkq itMjcc+sZEPHBYKrO8Z1z8Smi7tBXUvyFnZg/zyd8vNYU2Wmk2ykLjwfpao88HCV QDlXrAbvdhltqmgRBfKpWa+/cKrf59DvmVF6mWwYLBItwOUKj9hPSK1nod4PnSEi 5BOStjgM/9d/WWzYQRBqYVz6/VLOywrv4EdX6fbYZgauSMqsCQ2Le4YPKAKY1qk7 asR8xwPzj5eiUeGSPuWGMaB+oWZTCqZCvVoPjq3PP4E= -----END CERTIFICATE-----Generated at Tue Dec 23 09:38:03 2025 by rpki-client