This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB423F14D72511F0AABCFAD2DAE4EC9C.roa File: CB423F14D72511F0AABCFAD2DAE4EC9C.roa (raw, json) Hash identifier: YVKTfZVu3gMbiDySVK+0G0ynuxJfTmJNXwV2UeKEVlU= Subject key identifier: C7:F1:9F:A4:15:28:F0:9B:D7:2D:1E:2E:E6:EB:BB:E2:2C:8F:03:AB Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ADE8 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB423F14D72511F0AABCFAD2DAE4EC9C.roa Signing time: Fri 12 Dec 2025 06:42:58 +0000 ROA not before: Fri 12 Dec 2025 06:42:53 +0000 ROA not after: Tue 12 Dec 2028 06:42:53 +0000 asID: 17561 IP address blocks: 154.207.84.0/24 maxlen: 24 154.207.85.0/24 maxlen: 24 154.207.86.0/24 maxlen: 24 154.207.87.0/24 maxlen: 24 154.207.102.0/24 maxlen: 24 154.207.103.0/24 maxlen: 24 154.207.114.0/24 maxlen: 24 154.207.115.0/24 maxlen: 24 154.207.116.0/24 maxlen: 24 154.207.117.0/24 maxlen: 24 154.207.118.0/24 maxlen: 24 154.207.119.0/24 maxlen: 24 154.207.120.0/24 maxlen: 24 154.207.121.0/24 maxlen: 24 154.207.122.0/24 maxlen: 24 154.207.123.0/24 maxlen: 24 154.207.124.0/24 maxlen: 24 154.208.138.0/24 maxlen: 24 154.208.139.0/24 maxlen: 24 154.208.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 21 Dec 2025 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110056 (0x1ade8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 12 06:42:53 2025 GMT Not After : Dec 12 06:42:53 2028 GMT Subject: CN=693bb971-219d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:37:d4:60:b7:e8:7c:44:8d:19:6a:da:cb:f2: 6d:ec:e3:d3:d7:70:d0:72:10:9c:c1:00:45:77:f4: ab:2d:d2:8f:e9:14:32:e7:76:9d:e9:7d:e4:bc:e1: 90:f6:ef:28:8c:44:d5:fa:a6:4e:17:41:3e:0f:48: cf:8f:8c:93:74:f2:bd:31:f6:b9:cd:6b:af:c1:29: 08:86:f5:63:ab:3d:de:5d:e1:5c:4f:95:52:25:48: 95:02:ec:6a:b0:13:8f:35:3d:7f:67:ab:5f:b3:b5: 0f:57:0e:c9:f7:9e:75:32:5c:5d:31:47:a4:05:65: 85:d3:96:21:53:d9:ba:b8:d3:8d:f9:c6:83:cd:48: 2e:90:31:ff:d5:df:d1:fc:07:0b:6a:1d:88:f1:6b: 63:7e:d1:99:fb:36:32:12:ac:1f:4f:6c:b4:93:fa: 29:a6:50:e5:fa:3f:99:b6:ba:f7:3d:d5:eb:4f:54: a4:13:8e:7c:9d:7f:6a:8e:24:76:44:78:73:a6:62: 15:d6:91:f7:2a:02:bf:92:36:40:d7:dd:8a:84:25: 24:56:86:74:58:31:5a:30:d1:b5:e6:0f:79:ba:8d: c3:5d:7c:ab:bc:73:50:68:2a:77:e5:7e:b9:0f:85: 08:96:c3:b7:4e:19:3e:54:48:e7:b1:29:b6:c1:cf: d8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F1:9F:A4:15:28:F0:9B:D7:2D:1E:2E:E6:EB:BB:E2:2C:8F:03:AB X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CB423F14D72511F0AABCFAD2DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.207.84.0/22 154.207.102.0/23 154.207.114.0-154.207.124.255 154.208.138.0/23 154.208.175.0/24 Signature Algorithm: sha256WithRSAEncryption 88:d5:a6:59:b8:71:91:ef:06:b6:71:e2:99:c5:8a:39:81:ec: d1:6c:6e:6c:9e:b2:99:da:6c:d7:54:a8:8e:ba:1a:ad:f5:93: 57:36:9a:2e:d1:d8:fb:10:a2:eb:3e:e1:ea:c8:7e:6d:24:44: fc:23:e2:6b:2b:6b:e3:2c:6e:3e:99:64:a7:0d:25:df:49:68: 79:4e:95:f7:a6:e3:e6:b0:23:f3:46:5e:c5:d2:54:3f:e2:76: a5:f5:11:52:62:36:be:39:96:a1:44:cc:95:ad:45:bb:fb:ce: dd:05:6c:f8:2b:14:f5:2a:71:9c:61:df:49:1c:d4:f8:a4:f7: 64:76:78:c9:41:c0:e5:b3:53:19:e2:d5:85:fd:91:14:81:a6: 5a:46:66:9c:1d:ac:23:af:15:0d:84:0d:bd:80:33:e4:a3:cc: 14:ac:cf:ca:5b:3c:a7:9a:8f:77:a1:4e:0d:21:77:8a:11:a5: f5:24:29:57:03:2f:98:26:94:9b:03:62:41:1b:f8:d0:4c:4e: fb:1c:31:75:a2:db:75:70:5d:10:b1:22:c8:45:b9:a1:04:51: f5:9f:6e:f1:79:44:d8:c0:04:24:bd:b8:d1:ca:66:d4:60:a6: 1a:cd:ec:c7:4c:cc:52:cc:e9:1d:c9:02:0a:a8:b0:16:5b:05: 24:7a:2f:23 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgIDAa3oMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjEyMDY0MjUzWhcNMjgxMjEyMDY0MjUzWjAYMRYw FAYDVQQDEw02OTNiYjk3MS0yMTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA0DfUYLfofESNGWray/Jt7OPT13DQchCcwQBFd/SrLdKP6RQy53ad6X3k vOGQ9u8ojETV+qZOF0E+D0jPj4yTdPK9Mfa5zWuvwSkIhvVjqz3eXeFcT5VSJUiV AuxqsBOPNT1/Z6tfs7UPVw7J9551MlxdMUekBWWF05YhU9m6uNON+caDzUgukDH/ 1d/R/AcLah2I8WtjftGZ+zYyEqwfT2y0k/opplDl+j+Ztrr3PdXrT1SkE458nX9q jiR2RHhzpmIV1pH3KgK/kjZA192KhCUkVoZ0WDFaMNG15g95uo3DXXyrvHNQaCp3 5X65D4UIlsO3Thk+VEjnsSm2wc/YIwIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFMfx n6QVKPCb1y0eLubru+IsjwOrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DQjQyM0YxNEQ3MjUxMUYwQUFCQ0ZBRDJEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCms9UAwQBms9mMAwDBAGa z3IDBACaz3wDBAGa0IoDBACa0K8wDQYJKoZIhvcNAQELBQADggEBAIjVplm4cZHv BrZx4pnFijmB7NFsbmyespnabNdUqI66Gq31k1c2mi7R2PsQous+4erIfm0kRPwj 4msra+Msbj6ZZKcNJd9JaHlOlfem4+awI/NGXsXSVD/idqX1EVJiNr45lqFEzJWt Rbv7zt0FbPgrFPUqcZxh30kc1Pik92R2eMlBwOWzUxni1YX9kRSBplpGZpwdrCOv FQ2EDb2AM+SjzBSsz8pbPKeaj3ehTg0hd4oRpfUkKVcDL5gmlJsDYkEb+NBMTvsc MXWi23VwXRCxIshFuaEEUfWfbvF5RNjABCS9uNHKZtRgphrN7MdMzFLM6R3JAgqo sBZbBSR6LyM= -----END CERTIFICATE-----Generated at Fri Dec 19 09:17:56 2025 by rpki-client