This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA84AC20DA7111F09D6BA47DDAE4EC9C.roa File: CA84AC20DA7111F09D6BA47DDAE4EC9C.roa (raw, json) Hash identifier: W0vzVXCFm/gx6pIAPEyj3FeozxcYAbo/iREGveDbIwk= Subject key identifier: 7B:6F:A8:1B:C4:A7:B4:D8:31:84:BF:56:D7:CA:2A:16:0E:6C:E6:31 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AE8F Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA84AC20DA7111F09D6BA47DDAE4EC9C.roa Signing time: Tue 16 Dec 2025 11:24:31 +0000 ROA not before: Tue 16 Dec 2025 11:24:27 +0000 ROA not after: Sat 16 Dec 2028 11:24:27 +0000 asID: 17561 IP address blocks: 154.198.1.0/24 maxlen: 24 154.198.2.0/24 maxlen: 24 154.198.3.0/24 maxlen: 24 154.201.32.0/24 maxlen: 24 154.201.35.0/24 maxlen: 24 154.201.53.0/24 maxlen: 24 154.201.54.0/24 maxlen: 24 154.201.55.0/24 maxlen: 24 154.202.64.0/24 maxlen: 24 154.202.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 21 Dec 2025 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110223 (0x1ae8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 16 11:24:27 2025 GMT Not After : Dec 16 11:24:27 2028 GMT Subject: CN=6941416f-8af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:13:2e:5f:57:ae:cd:73:8f:33:7d:b6:1f:da: d5:e7:df:78:e9:c9:e0:ce:41:6d:0d:e3:95:5b:e9: 4d:29:d6:76:cd:52:c4:e2:c3:46:c5:b4:8a:ba:7d: 6b:2f:dc:af:cb:74:8c:2d:3a:26:18:8c:44:5b:0d: 3e:cc:da:e6:e6:a9:a0:ca:92:26:48:17:da:ba:a6: 04:2e:a1:68:41:94:13:d5:9e:20:e3:df:ca:33:67: 30:7d:b0:ca:d5:5b:c1:99:62:ce:7d:fd:a4:0a:af: f6:14:e9:cb:62:6e:42:45:20:6b:67:37:39:9c:d3: 81:a7:9e:64:0c:9c:27:73:90:e7:67:61:d7:7f:de: 61:6a:e5:58:f1:84:0c:1f:40:b0:41:82:e1:66:ff: d6:6d:ed:ff:b2:72:25:d9:7f:e9:1c:cb:a6:08:00: 73:7b:c9:03:b1:f2:c1:21:02:b9:58:46:81:f9:b7: c8:52:b6:60:7c:9b:16:65:12:0b:74:d3:4d:14:aa: d0:06:14:a3:6e:05:a6:e3:13:74:1a:43:a8:93:8c: 88:b3:1e:b6:0a:45:a8:f3:34:4b:55:77:1c:85:4b: df:e6:3e:83:d2:73:fb:91:2d:7c:b7:9b:4b:41:34: 1d:73:9a:af:76:d2:22:cb:83:0f:90:26:6d:48:49: 09:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:6F:A8:1B:C4:A7:B4:D8:31:84:BF:56:D7:CA:2A:16:0E:6C:E6:31 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA84AC20DA7111F09D6BA47DDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.198.1.0-154.198.3.255 154.201.32.0/24 154.201.35.0/24 154.201.53.0-154.201.55.255 154.202.64.0/24 154.202.128.0/24 Signature Algorithm: sha256WithRSAEncryption cd:3f:0d:54:34:73:d3:8e:87:5d:69:fa:6f:c2:2c:d9:2e:96: 58:82:e3:37:fc:5a:02:ee:31:f5:ab:2c:48:dc:e5:b5:e4:80: 61:58:2f:4e:2e:11:a5:31:10:9b:04:c7:12:94:be:a5:8e:9c: e7:70:64:25:95:77:e9:ca:e2:90:64:e5:2e:58:04:59:69:65: 39:0f:50:bc:a8:58:b5:a3:6b:b7:9b:77:74:64:72:f3:74:ca: 32:8e:08:c6:75:fa:45:79:38:9d:6f:71:fd:47:ec:db:66:d6: 39:f8:06:b0:c3:e4:40:97:6c:8d:09:0c:89:a0:dd:90:ea:18: 13:16:2c:04:99:68:32:8c:32:77:23:e7:a2:74:83:c8:65:9a: 44:d1:6b:8d:b8:5d:cb:d5:d2:47:67:4e:4d:7d:c1:af:55:0e: 0c:e2:53:67:69:21:6e:74:6f:f9:d3:1d:d5:4d:08:16:96:e0: d8:df:11:12:0f:5f:8c:4a:8d:84:75:96:95:ed:19:1c:0c:ab: 14:b3:a6:51:5b:ea:e1:f4:d5:38:04:ab:09:fd:fd:6e:8f:45: 00:5a:7d:41:e3:8e:d2:77:08:2a:3f:d6:e6:4e:46:7d:61:4d: 9f:28:57:30:81:c7:76:c3:d7:d8:6f:ff:b2:e2:7b:6e:3b:31: 2e:c3:19:67 -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgIDAa6PMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjE2MTEyNDI3WhcNMjgxMjE2MTEyNDI3WjAYMRYw FAYDVQQDEw02OTQxNDE2Zi04YWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA0xMuX1euzXOPM322H9rV59946cngzkFtDeOVW+lNKdZ2zVLE4sNGxbSK un1rL9yvy3SMLTomGIxEWw0+zNrm5qmgypImSBfauqYELqFoQZQT1Z4g49/KM2cw fbDK1VvBmWLOff2kCq/2FOnLYm5CRSBrZzc5nNOBp55kDJwnc5DnZ2HXf95hauVY 8YQMH0CwQYLhZv/Wbe3/snIl2X/pHMumCABze8kDsfLBIQK5WEaB+bfIUrZgfJsW ZRILdNNNFKrQBhSjbgWm4xN0GkOok4yIsx62CkWo8zRLVXcchUvf5j6D0nP7kS18 t5tLQTQdc5qvdtIiy4MPkCZtSEkJ8QIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFHtv qBvEp7TYMYS/VtfKKhYObOYxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DQTg0QUMyMERBNzExMUYwOUQ2QkE0N0REQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAwDBACaxgEDBAKaxgADBACa ySADBACaySMwDAMEAJrJNQMEA5rJMAMEAJrKQAMEAJrKgDANBgkqhkiG9w0BAQsF AAOCAQEAzT8NVDRz046HXWn6b8Is2S6WWILjN/xaAu4x9assSNzlteSAYVgvTi4R pTEQmwTHEpS+pY6c53BkJZV36crikGTlLlgEWWllOQ9QvKhYtaNrt5t3dGRy83TK Mo4IxnX6RXk4nW9x/Ufs22bWOfgGsMPkQJdsjQkMiaDdkOoYExYsBJloMowydyPn onSDyGWaRNFrjbhdy9XSR2dOTX3Br1UODOJTZ2khbnRv+dMd1U0IFpbg2N8REg9f jEqNhHWWle0ZHAyrFLOmUVvq4fTVOASrCf39bo9FAFp9QeOO0ncIKj/W5k5GfWFN nyhXMIHHdsPX2G//suJ7bjsxLsMZZw== -----END CERTIFICATE-----Generated at Fri Dec 19 09:17:59 2025 by rpki-client