This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBD62C5CC13A11F0984FB495DAE4EC9C.roa File: CBD62C5CC13A11F0984FB495DAE4EC9C.roa (raw, json) Hash identifier: RBs/B+XEsYzotgPqf4ZAfrxCqW2v+6TNoyHKB49HVhs= Subject key identifier: 70:D4:57:12:98:42:DE:ED:AA:B7:52:18:3F:DF:5B:1E:61:B0:69:30 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A8FE Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBD62C5CC13A11F0984FB495DAE4EC9C.roa Signing time: Fri 14 Nov 2025 09:17:52 +0000 ROA not before: Fri 14 Nov 2025 09:17:48 +0000 ROA not after: Tue 16 Dec 2025 09:17:48 +0000 asID: 22773 IP address blocks: 154.202.78.0/24 maxlen: 24 154.202.79.0/24 maxlen: 24 154.202.80.0/24 maxlen: 24 154.202.81.0/24 maxlen: 24 154.202.82.0/24 maxlen: 24 154.202.83.0/24 maxlen: 24 154.202.84.0/24 maxlen: 24 154.202.85.0/24 maxlen: 24 154.202.88.0/24 maxlen: 24 154.202.111.0/24 maxlen: 24 154.202.112.0/24 maxlen: 24 154.202.113.0/24 maxlen: 24 154.202.114.0/24 maxlen: 24 154.202.116.0/24 maxlen: 24 154.202.137.0/24 maxlen: 24 154.213.192.0/24 maxlen: 24 154.213.200.0/24 maxlen: 24 154.213.201.0/24 maxlen: 24 154.213.205.0/24 maxlen: 24 154.213.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108798 (0x1a8fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 14 09:17:48 2025 GMT Not After : Dec 16 09:17:48 2025 GMT Subject: CN=6916f3c0-e868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ca:aa:42:e7:54:98:10:c3:92:30:d5:2d:44: 3e:42:4c:8b:4e:c9:e4:26:88:3b:a7:86:ac:20:c9: 4c:44:44:cd:af:69:ec:eb:55:53:90:71:5e:de:e9: 7a:cc:1d:44:0d:37:55:bf:73:da:a1:e5:f3:a2:fc: 3c:91:6d:5c:b8:ba:5a:2c:75:1d:2f:31:ac:20:20: 74:f7:f7:05:70:a4:61:94:1e:ed:c5:da:21:c0:54: 31:05:dd:31:26:78:60:69:2b:0b:6b:e3:9f:3e:9f: f3:96:48:54:36:08:25:bb:c8:cd:52:e7:2b:7f:e5: db:b1:c3:a6:67:c4:f2:53:e8:1b:1f:37:3d:d2:7e: 63:16:42:0a:b1:d1:38:af:78:f2:0d:4d:ea:6c:de: e3:ea:e9:79:94:de:e3:de:f6:a2:af:25:f5:f5:4a: 57:2f:50:97:a7:ec:87:62:b5:1a:17:f5:e2:52:8d: ab:46:83:e6:0e:e8:2d:7b:93:c3:39:a5:b7:c4:0c: 45:29:bd:97:e5:f4:07:ed:33:76:17:b3:d8:1d:34: 71:48:17:5d:d0:61:2d:47:16:33:c1:cd:a1:08:3f: ff:31:0c:c3:4d:5c:69:7f:53:f3:f3:67:43:c7:2f: 56:09:b6:25:11:bc:01:38:47:b2:8e:8c:10:95:d0: 84:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D4:57:12:98:42:DE:ED:AA:B7:52:18:3F:DF:5B:1E:61:B0:69:30 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBD62C5CC13A11F0984FB495DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.202.78.0-154.202.85.255 154.202.88.0/24 154.202.111.0-154.202.114.255 154.202.116.0/24 154.202.137.0/24 154.213.192.0/24 154.213.200.0/23 154.213.205.0-154.213.206.255 Signature Algorithm: sha256WithRSAEncryption 15:42:d6:48:82:ca:3b:c0:f2:80:e3:0b:f2:95:23:6c:5e:0c: 4b:16:29:4a:09:a0:87:af:b4:ea:2e:84:4e:0b:89:b7:6d:3f: a7:61:06:a6:23:61:34:cd:c6:4a:4d:3b:bd:2a:1a:4a:70:7a: 86:3a:dc:a3:90:65:a4:16:c6:35:f5:f7:2b:df:c7:8f:63:de: 73:bc:63:5a:07:0a:e6:a5:ad:e5:9a:d9:4c:b9:b9:e6:bf:44: 8b:d8:23:d0:00:88:b0:95:fb:52:89:5c:4a:4b:3f:97:22:c8: b5:51:0a:bb:cf:7c:4e:c1:91:51:91:c2:e1:78:9b:19:35:4b: 25:e3:c2:89:38:1f:2d:68:af:86:2d:16:13:1c:28:7d:6d:47: 2f:74:56:1f:4d:5e:3f:07:e2:14:14:c3:c5:bf:ce:ec:d7:72: 44:c8:06:77:b2:cd:70:1a:31:1c:7a:8e:54:28:e5:4f:fa:93: 13:5f:d5:15:10:29:b0:85:e9:8d:08:a4:f2:49:cb:c9:21:21: ea:8a:e0:2a:de:60:8e:80:0f:1f:89:01:89:ef:7b:cf:77:bc: 18:7d:58:82:24:01:79:c3:d2:fd:29:ea:ea:f9:1f:dd:af:4e: 11:76:7d:43:7e:1e:30:0d:8f:86:39:9f:4c:6b:31:a7:f9:3c: 2c:02:1c:9b -----BEGIN CERTIFICATE----- MIIFxjCCBK6gAwIBAgIDAaj+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTE0MDkxNzQ4WhcNMjUxMjE2MDkxNzQ4WjAYMRYw FAYDVQQDEw02OTE2ZjNjMC1lODY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA6sqqQudUmBDDkjDVLUQ+QkyLTsnkJog7p4asIMlMRETNr2ns61VTkHFe 3ul6zB1EDTdVv3PaoeXzovw8kW1cuLpaLHUdLzGsICB09/cFcKRhlB7txdohwFQx Bd0xJnhgaSsLa+OfPp/zlkhUNgglu8jNUucrf+XbscOmZ8TyU+gbHzc90n5jFkIK sdE4r3jyDU3qbN7j6ul5lN7j3vairyX19UpXL1CXp+yHYrUaF/XiUo2rRoPmDugt e5PDOaW3xAxFKb2X5fQH7TN2F7PYHTRxSBdd0GEtRxYzwc2hCD//MQzDTVxpf1Pz 82dDxy9WCbYlEbwBOEeyjowQldCEgQIDAQABo4IC5zCCAuMwHQYDVR0OBBYEFHDU VxKYQt7tqrdSGD/fWx5hsGkwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DQkQ2MkM1Q0MxM0ExMUYwOTg0RkI0OTVEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIMAwDBAGayk4DBAGaylQDBACa ylgwDAMEAJrKbwMEAJrKcgMEAJrKdAMEAJrKiQMEAJrVwAMEAZrVyDAMAwQAmtXN AwQAmtXOMA0GCSqGSIb3DQEBCwUAA4IBAQAVQtZIgso7wPKA4wvylSNsXgxLFilK CaCHr7TqLoROC4m3bT+nYQamI2E0zcZKTTu9KhpKcHqGOtyjkGWkFsY19fcr38eP Y95zvGNaBwrmpa3lmtlMubnmv0SL2CPQAIiwlftSiVxKSz+XIsi1UQq7z3xOwZFR kcLheJsZNUsl48KJOB8taK+GLRYTHCh9bUcvdFYfTV4/B+IUFMPFv87s13JEyAZ3 ss1wGjEceo5UKOVP+pMTX9UVECmwhemNCKTyScvJISHqiuAq3mCOgA8fiQGJ73vP d7wYfViCJAF5w9L9Kerq+R/dr04Rdn1Dfh4wDY+GOZ9MazGn+TwsAhyb -----END CERTIFICATE-----Generated at Wed Dec 3 10:24:56 2025 by rpki-client