This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF0F5A22CFD411F0B8BE0FE0DAE4EC9C.roa File: BF0F5A22CFD411F0B8BE0FE0DAE4EC9C.roa (raw, json) Hash identifier: jagqX+IoldAv23M6Pjy8tRc5oVaikrPuwY+ud001Vfw= Subject key identifier: C5:85:C0:0E:F1:13:FB:00:9A:AE:7D:B3:15:EC:BC:0C:6F:6F:67:0E Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ABED Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF0F5A22CFD411F0B8BE0FE0DAE4EC9C.roa Signing time: Tue 02 Dec 2025 23:15:10 +0000 ROA not before: Tue 02 Dec 2025 23:15:05 +0000 ROA not after: Sat 18 Nov 2028 23:15:05 +0000 asID: 17561 IP address blocks: 154.211.139.0/24 maxlen: 24 154.211.140.0/24 maxlen: 24 154.211.141.0/24 maxlen: 24 154.211.142.0/24 maxlen: 24 154.211.143.0/24 maxlen: 24 154.211.144.0/24 maxlen: 24 154.211.145.0/24 maxlen: 24 154.211.146.0/24 maxlen: 24 154.211.147.0/24 maxlen: 24 154.211.148.0/24 maxlen: 24 154.211.149.0/24 maxlen: 24 154.211.150.0/24 maxlen: 24 154.211.151.0/24 maxlen: 24 154.211.168.0/24 maxlen: 24 154.211.169.0/24 maxlen: 24 154.211.170.0/24 maxlen: 24 154.211.171.0/24 maxlen: 24 154.211.172.0/24 maxlen: 24 154.211.173.0/24 maxlen: 24 154.211.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109549 (0x1abed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 23:15:05 2025 GMT Not After : Nov 18 23:15:05 2028 GMT Subject: CN=692f72fe-5ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:45:87:2b:b8:0f:10:f8:3a:dc:37:d9:8c:0a: 44:90:cb:26:38:6c:1e:6c:53:a9:e8:94:d1:64:70: 54:32:24:ab:f0:a2:6e:92:54:57:5a:5e:f6:49:2b: 8b:2e:45:b2:5a:69:19:9c:17:9c:c4:ed:9b:df:43: d6:d7:9e:12:e2:ec:36:62:0f:6e:0a:79:d3:9a:63: fc:bd:3e:c0:9c:b2:df:67:6a:9a:04:77:cf:73:c3: bb:02:24:b9:86:37:63:8b:84:05:14:21:be:c3:25: e0:cb:47:58:4a:be:f1:63:37:3c:45:42:f8:56:44: 16:9e:e9:7f:82:b5:28:3e:c9:03:fc:7f:df:73:71: 3e:05:74:69:9d:a6:d8:c3:86:d1:8b:8d:48:a2:72: 18:7b:ff:a7:ff:46:b2:35:0e:6b:37:9b:44:0a:7f: e7:20:61:a1:f2:94:2d:0f:fd:44:e8:74:c9:ba:a7: 1c:31:52:5d:71:bb:ad:7e:e7:b2:8f:f1:21:3f:57: b5:8a:2a:ef:6d:28:8d:82:fe:c5:2e:a1:4d:c9:01: 31:42:63:8a:50:c2:64:e8:04:64:60:16:16:7c:67: 39:e2:0c:2f:ed:52:71:ca:a4:24:0e:16:3a:7a:d5: 88:d7:0b:41:73:d8:29:26:97:2a:aa:54:57:8d:13: 08:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:85:C0:0E:F1:13:FB:00:9A:AE:7D:B3:15:EC:BC:0C:6F:6F:67:0E X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BF0F5A22CFD411F0B8BE0FE0DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.211.139.0-154.211.151.255 154.211.168.0-154.211.174.255 Signature Algorithm: sha256WithRSAEncryption 90:1c:87:b2:1e:5d:d6:96:16:46:70:27:19:b8:a8:28:ca:7f: 6d:0b:a8:8b:f1:7e:cb:1f:33:a1:54:af:8e:1d:18:96:80:86: 2e:b3:d6:9b:9a:ac:5c:09:0d:f6:e4:e4:64:53:ce:4d:e1:e0: 67:d5:58:cc:5e:96:fd:7a:97:60:94:38:f3:b8:3b:1d:16:c9: 14:06:5b:88:49:a7:9c:86:1b:ae:9b:a5:6b:6d:f2:5c:b8:f5: 09:8c:f1:1f:9f:98:8c:2a:9d:47:2c:fa:c2:6a:ac:b3:4e:f6: 80:a9:85:2d:2c:73:d6:69:e9:a2:0d:72:e7:97:ae:5c:07:c4: e1:e1:24:86:14:27:70:52:01:6a:dc:c6:55:71:a9:fa:fd:45: 5a:8e:40:1d:fb:06:39:ee:ff:62:e7:ac:13:94:f0:78:b6:50: af:78:8b:29:4b:6c:ce:c0:c0:bc:de:5e:66:79:4c:08:26:70: 5d:b3:92:7a:45:f9:5f:0d:ab:bd:c9:e9:fa:a8:ae:d2:d5:ad: 2b:e1:08:a8:66:89:30:c7:08:19:17:7b:ec:35:88:0e:73:5a: 52:23:b6:a8:81:14:94:c7:a5:fb:8a:6e:47:0c:1f:4a:a6:4c: 28:64:0a:ce:93:33:ea:96:08:13:b6:43:01:8d:71:63:db:2b: b8:51:4d:81 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgIDAavtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMjMxNTA1WhcNMjgxMTE4MjMxNTA1WjAYMRYw FAYDVQQDEw02OTJmNzJmZS01ZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA40WHK7gPEPg63DfZjApEkMsmOGwebFOp6JTRZHBUMiSr8KJuklRXWl72 SSuLLkWyWmkZnBecxO2b30PW154S4uw2Yg9uCnnTmmP8vT7AnLLfZ2qaBHfPc8O7 AiS5hjdji4QFFCG+wyXgy0dYSr7xYzc8RUL4VkQWnul/grUoPskD/H/fc3E+BXRp nabYw4bRi41IonIYe/+n/0ayNQ5rN5tECn/nIGGh8pQtD/1E6HTJuqccMVJdcbut fueyj/EhP1e1iirvbSiNgv7FLqFNyQExQmOKUMJk6ARkYBYWfGc54gwv7VJxyqQk DhY6etWI1wtBc9gpJpcqqlRXjRMIJwIDAQABo4ICuzCCArcwHQYDVR0OBBYEFMWF wA7xE/sAmq59sxXsvAxvb2cOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9CRjBGNUEyMkNGRDQxMUYwQjhCRTBGRTBEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBACa04sDBAOa05AwDAME A5rTqAMEAJrTrjANBgkqhkiG9w0BAQsFAAOCAQEAkByHsh5d1pYWRnAnGbioKMp/ bQuoi/F+yx8zoVSvjh0YloCGLrPWm5qsXAkN9uTkZFPOTeHgZ9VYzF6W/XqXYJQ4 87g7HRbJFAZbiEmnnIYbrpula23yXLj1CYzxH5+YjCqdRyz6wmqss072gKmFLSxz 1mnpog1y55euXAfE4eEkhhQncFIBatzGVXGp+v1FWo5AHfsGOe7/YuesE5TweLZQ r3iLKUtszsDAvN5eZnlMCCZwXbOSekX5Xw2rvcnp+qiu0tWtK+EIqGaJMMcIGRd7 7DWIDnNaUiO2qIEUlMel+4puRwwfSqZMKGQKzpMz6pYIE7ZDAY1xY9sruFFNgQ== -----END CERTIFICATE-----Generated at Wed Dec 3 11:07:16 2025 by rpki-client