This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C23AA772D01C11F098B389B6DAE4EC9C.roa File: C23AA772D01C11F098B389B6DAE4EC9C.roa (raw, json) Hash identifier: sgVUb6XeyVFF3pUX8sxZQHsT4Tmd2EpuscMSep9aarE= Subject key identifier: 86:4C:04:73:55:2E:66:AB:BE:11:49:AF:68:B0:48:BD:AC:A5:F6:05 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC06 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C23AA772D01C11F098B389B6DAE4EC9C.roa Signing time: Wed 03 Dec 2025 07:50:39 +0000 ROA not before: Wed 03 Dec 2025 07:50:32 +0000 ROA not after: Mon 05 Jan 2026 07:50:32 +0000 asID: 44559 IP address blocks: 154.209.19.0/24 maxlen: 24 154.209.95.0/24 maxlen: 24 154.209.132.0/24 maxlen: 24 154.209.133.0/24 maxlen: 24 154.209.135.0/24 maxlen: 24 154.209.147.0/24 maxlen: 24 154.209.149.0/24 maxlen: 24 154.209.156.0/24 maxlen: 24 154.209.159.0/24 maxlen: 24 154.209.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109574 (0x1ac06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 07:50:32 2025 GMT Not After : Jan 5 07:50:32 2026 GMT Subject: CN=692febcf-9181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ad:cf:f6:79:2f:1c:e7:86:73:7c:71:a1:2b: ba:09:fa:91:94:a1:a9:66:08:32:30:dd:eb:d4:31: 44:ba:22:23:37:1b:43:62:fe:5e:c7:94:38:e4:f7: 28:48:7e:c4:43:c3:bc:5c:eb:ef:a5:78:3d:a7:d0: 12:d4:6c:27:bc:c8:53:83:ee:9b:73:a5:1e:31:a9: c2:16:b2:e0:bf:2c:4b:8c:0f:73:a9:7a:46:99:81: e2:b8:0b:5a:8b:43:27:1f:3d:9a:d6:f9:59:31:30: 25:45:ad:f1:60:90:cd:4e:8f:8f:ad:80:8c:2e:77: 40:1b:b2:71:1d:e7:32:ca:07:00:99:cd:49:e9:54: ab:51:87:b5:9f:ca:3b:40:f7:44:70:2f:ad:87:bd: c0:e1:43:78:52:74:ac:06:59:05:67:cc:8d:5f:ad: 8c:74:35:0f:d1:97:f4:42:6a:9b:26:c1:06:d9:d9: d7:54:96:0d:0c:6c:ce:41:2c:80:2d:31:9b:58:8a: c2:34:1e:38:d5:c2:c0:43:e6:06:7e:32:af:c2:68: 13:16:75:ee:e6:a5:85:1c:96:c3:a1:7c:59:90:0a: f0:35:5a:53:8c:65:56:7b:d4:74:d5:0e:fe:ab:ec: b7:6f:27:59:22:c6:e8:dc:5c:8a:47:51:c1:03:aa: d1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:4C:04:73:55:2E:66:AB:BE:11:49:AF:68:B0:48:BD:AC:A5:F6:05 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C23AA772D01C11F098B389B6DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.209.19.0/24 154.209.95.0/24 154.209.132.0/23 154.209.135.0/24 154.209.147.0/24 154.209.149.0/24 154.209.156.0/24 154.209.159.0/24 154.209.192.0/24 Signature Algorithm: sha256WithRSAEncryption 34:2a:d1:9e:13:d9:e9:c5:1b:c5:62:ce:07:dc:89:66:7a:bb: 87:ce:a8:a4:80:aa:18:17:0c:08:f9:35:81:62:e0:d7:cd:d0: fd:89:ec:88:8d:1a:57:1f:d3:48:23:ea:1b:10:46:70:24:c4: 2a:58:23:3f:b2:70:7a:7a:35:26:20:b1:46:f9:6e:c7:11:bc: f4:f7:2f:63:7e:fb:03:55:8a:90:4c:d8:93:33:56:0f:f7:b6: 95:ad:a6:d3:f5:f6:51:c4:e7:9b:81:5f:28:c9:f0:99:79:43: ae:a9:c4:3f:63:96:3b:a0:49:44:75:7f:20:37:27:bf:a7:e5: 2e:54:c9:30:22:f6:cb:2b:a6:4f:32:a5:32:0e:b8:45:59:1f: 17:0e:d3:70:f7:77:80:c2:ea:18:39:c4:64:41:e0:90:fa:f8: 28:90:db:50:03:3c:78:14:75:dc:b2:96:c4:fb:aa:0b:fe:bc: ab:6a:a1:07:06:42:63:6c:cf:3b:61:01:6f:14:de:b2:2e:f2: 5b:3c:e7:52:7a:f6:b3:13:a0:30:08:13:2f:0f:cb:63:c5:33: 68:a0:d1:ce:68:45:f1:c3:fc:fb:8d:a4:24:44:75:0c:64:e6: 32:78:cc:03:92:c2:51:79:1c:a7:f8:d3:10:9b:48:39:02:df: 1f:84:dd:a7 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIDAawGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMDc1MDMyWhcNMjYwMTA1MDc1MDMyWjAYMRYw FAYDVQQDEw02OTJmZWJjZi05MTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAta3P9nkvHOeGc3xxoSu6CfqRlKGpZggyMN3r1DFEuiIjNxtDYv5ex5Q4 5PcoSH7EQ8O8XOvvpXg9p9AS1GwnvMhTg+6bc6UeManCFrLgvyxLjA9zqXpGmYHi uAtai0MnHz2a1vlZMTAlRa3xYJDNTo+PrYCMLndAG7JxHecyygcAmc1J6VSrUYe1 n8o7QPdEcC+th73A4UN4UnSsBlkFZ8yNX62MdDUP0Zf0QmqbJsEG2dnXVJYNDGzO QSyALTGbWIrCNB441cLAQ+YGfjKvwmgTFnXu5qWFHJbDoXxZkArwNVpTjGVWe9R0 1Q7+q+y3bydZIsbo3FyKR1HBA6rRnwIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFIZM BHNVLmarvhFJr2iwSL2spfYFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DMjNBQTc3MkQwMUMxMUYwOThCMzg5QjZEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAmtETAwQAmtFfAwQBmtGE AwQAmtGHAwQAmtGTAwQAmtGVAwQAmtGcAwQAmtGfAwQAmtHAMA0GCSqGSIb3DQEB CwUAA4IBAQA0KtGeE9npxRvFYs4H3IlmeruHzqikgKoYFwwI+TWBYuDXzdD9ieyI jRpXH9NII+obEEZwJMQqWCM/snB6ejUmILFG+W7HEbz09y9jfvsDVYqQTNiTM1YP 97aVrabT9fZRxOebgV8oyfCZeUOuqcQ/Y5Y7oElEdX8gNye/p+UuVMkwIvbLK6ZP MqUyDrhFWR8XDtNw93eAwuoYOcRkQeCQ+vgokNtQAzx4FHXcspbE+6oL/ryraqEH BkJjbM87YQFvFN6yLvJbPOdSevazE6AwCBMvD8tjxTNooNHOaEXxw/z7jaQkRHUM ZOYyeMwDksJReRyn+NMQm0g5At8fhN2n -----END CERTIFICATE-----Generated at Wed Dec 3 11:45:34 2025 by rpki-client