This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4B1AB8AC92E11F0A5B9EEABDAE4EC9C.roa File: C4B1AB8AC92E11F0A5B9EEABDAE4EC9C.roa (raw, json) Hash identifier: W+Bq7TWpCP/e9oegwsTMdj2aR3ln9zzTFYobMlMYEDc= Subject key identifier: 9E:11:76:06:3D:E0:8A:40:90:4E:E0:7F:A8:D0:DD:11:B1:F7:FD:D9 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AA67 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4B1AB8AC92E11F0A5B9EEABDAE4EC9C.roa Signing time: Mon 24 Nov 2025 12:11:56 +0000 ROA not before: Mon 24 Nov 2025 12:11:51 +0000 ROA not after: Tue 30 Dec 2025 12:11:51 +0000 asID: 401783 IP address blocks: 154.194.195.0/24 maxlen: 24 154.196.134.0/24 maxlen: 24 154.200.1.0/24 maxlen: 24 154.200.37.0/24 maxlen: 24 154.200.46.0/24 maxlen: 24 154.200.48.0/24 maxlen: 24 154.200.53.0/24 maxlen: 24 154.200.54.0/24 maxlen: 24 154.200.60.0/24 maxlen: 24 154.211.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109159 (0x1aa67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 24 12:11:51 2025 GMT Not After : Dec 30 12:11:51 2025 GMT Subject: CN=69244b8c-0b5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:75:d9:c5:a0:38:18:3e:7b:62:d8:db:09:cd: b2:06:ff:4f:b7:16:94:8b:15:e7:2a:56:64:ca:91: 12:c3:32:75:4c:6d:da:5f:ba:fe:c5:f6:49:14:d0: f9:db:ab:9a:02:17:6b:cf:d6:0f:85:97:03:1d:6b: b4:bc:b0:e7:3b:26:4c:22:74:3b:e9:2a:f8:4d:88: 10:06:c7:6d:64:c6:9a:1a:4d:3b:d7:49:08:a4:26: d5:97:05:48:c0:4e:fe:a0:bc:5e:01:ff:aa:e2:5e: d5:7e:87:a2:f3:e9:dc:e2:c8:1e:60:03:32:6b:d2: 8c:16:fd:c9:6d:b6:96:c1:27:c1:89:c0:aa:17:53: ba:ba:36:db:45:50:fe:74:9f:57:b9:7f:52:3d:79: 8d:8e:94:ca:e1:b1:27:6b:37:27:a5:9a:d3:4f:2a: b3:ce:51:4f:12:75:61:a9:c5:4c:0f:48:f0:b4:da: f2:b8:b9:54:c3:c2:a1:9c:c7:3a:4c:63:5f:68:ec: 79:a3:78:b1:31:8c:48:cc:68:79:2d:c2:1d:d2:16: ad:49:bc:87:c5:ce:0d:03:1c:bf:51:7d:8a:70:fc: d3:6b:2a:07:bb:fd:e0:0e:83:b9:c0:47:34:e3:c7: 23:7e:62:a1:84:52:5b:88:11:01:e4:d8:36:4b:b8: 64:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:11:76:06:3D:E0:8A:40:90:4E:E0:7F:A8:D0:DD:11:B1:F7:FD:D9 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4B1AB8AC92E11F0A5B9EEABDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.194.195.0/24 154.196.134.0/24 154.200.1.0/24 154.200.37.0/24 154.200.46.0/24 154.200.48.0/24 154.200.53.0-154.200.54.255 154.200.60.0/24 154.211.211.0/24 Signature Algorithm: sha256WithRSAEncryption 62:db:fe:41:d3:14:f1:97:21:c7:f5:66:e5:1a:b5:3e:67:52: d0:0a:3e:52:bd:a1:cb:a4:08:e6:8a:5c:61:13:91:74:74:fb: 32:d6:b8:88:a4:c6:3c:02:bf:6e:aa:8e:c0:fb:4a:42:48:b6: fc:6a:42:d2:93:65:35:c7:17:e1:da:d7:c4:25:c1:7d:8b:0f: be:4e:4f:4d:b4:2d:0e:6b:55:91:8e:a0:2a:fe:c2:64:30:86: 01:81:6e:5f:b9:0f:de:c9:1f:dd:fd:2a:e6:fe:d8:64:18:76: a2:a9:b0:02:69:fb:d8:d7:a1:36:bc:96:6b:85:f8:a7:a5:cb: a3:9c:55:49:65:b2:1e:de:ab:5b:3f:97:11:05:ae:77:6c:d0: fc:f3:73:2f:56:ea:f1:4e:44:10:33:bf:2f:d9:86:7d:13:fa: 81:c8:c9:69:3d:18:36:68:23:06:d5:34:f6:6d:cd:3f:32:2c: 9a:97:18:a7:cd:c3:f5:af:22:ea:20:ac:9e:a8:de:13:e2:ea: c7:a8:24:03:80:01:2c:2e:36:d6:59:74:9d:73:cd:70:56:2c: 33:82:c8:c6:6e:02:fe:61:a8:b4:e5:79:9b:2e:a5:61:50:fd: 78:19:23:7a:42:56:32:62:61:ed:6a:33:18:81:e4:cf:1d:5e: a1:bb:6a:47 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIDAapnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTI0MTIxMTUxWhcNMjUxMjMwMTIxMTUxWjAYMRYw FAYDVQQDEw02OTI0NGI4Yy0wYjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA13XZxaA4GD57YtjbCc2yBv9PtxaUixXnKlZkypESwzJ1TG3aX7r+xfZJ FND526uaAhdrz9YPhZcDHWu0vLDnOyZMInQ76Sr4TYgQBsdtZMaaGk0710kIpCbV lwVIwE7+oLxeAf+q4l7Vfoei8+nc4sgeYAMya9KMFv3JbbaWwSfBicCqF1O6ujbb RVD+dJ9XuX9SPXmNjpTK4bEnazcnpZrTTyqzzlFPEnVhqcVMD0jwtNryuLlUw8Kh nMc6TGNfaOx5o3ixMYxIzGh5LcId0hatSbyHxc4NAxy/UX2KcPzTayoHu/3gDoO5 wEc048cjfmKhhFJbiBEB5Ng2S7hkGQIDAQABo4IC3TCCAtkwHQYDVR0OBBYEFJ4R dgY94IpAkE7gf6jQ3RGx9/3ZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DNEIxQUI4QUM5MkUxMUYwQTVCOUVFQUJEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAmsLDAwQAmsSGAwQAmsgB AwQAmsglAwQAmsguAwQAmsgwMAwDBACayDUDBACayDYDBACayDwDBACa09MwDQYJ KoZIhvcNAQELBQADggEBAGLb/kHTFPGXIcf1ZuUatT5nUtAKPlK9ocukCOaKXGET kXR0+zLWuIikxjwCv26qjsD7SkJItvxqQtKTZTXHF+Ha18QlwX2LD75OT020LQ5r VZGOoCr+wmQwhgGBbl+5D97JH939Kub+2GQYdqKpsAJp+9jXoTa8lmuF+Kely6Oc VUllsh7eq1s/lxEFrnds0Pzzcy9W6vFORBAzvy/Zhn0T+oHIyWk9GDZoIwbVNPZt zT8yLJqXGKfNw/WvIuogrJ6o3hPi6seoJAOAASwuNtZZdJ1zzXBWLDOCyMZuAv5h qLTleZsupWFQ/XgZI3pCVjJiYe1qMxiB5M8dXqG7akc= -----END CERTIFICATE-----Generated at Wed Dec 3 10:26:06 2025 by rpki-client