This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCA5C9FAD04711F080F824C0DAE4EC9C.roa File: CCA5C9FAD04711F080F824C0DAE4EC9C.roa (raw, json) Hash identifier: GIbYdmElX1gEEc1HYx374GMNIgj8BVfNbrSySlJERtU= Subject key identifier: D4:55:A7:FF:DC:4B:89:4C:FD:3C:72:54:85:BF:86:EE:AF:DC:7D:B5 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC60 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCA5C9FAD04711F080F824C0DAE4EC9C.roa Signing time: Wed 03 Dec 2025 12:58:49 +0000 ROA not before: Wed 03 Dec 2025 12:58:39 +0000 ROA not after: Mon 05 Jan 2026 12:58:39 +0000 asID: 202656 IP address blocks: 154.218.30.0/24 maxlen: 24 154.219.16.0/24 maxlen: 24 154.219.24.0/24 maxlen: 24 154.219.28.0/24 maxlen: 24 154.219.207.0/24 maxlen: 24 154.219.211.0/24 maxlen: 24 154.219.222.0/24 maxlen: 24 154.219.230.0/24 maxlen: 24 154.219.232.0/24 maxlen: 24 154.219.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 07 Dec 2025 11:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109664 (0x1ac60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 12:58:39 2025 GMT Not After : Jan 5 12:58:39 2026 GMT Subject: CN=69303408-2dc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fd:64:47:69:29:26:b3:1d:6b:b4:fe:15:c4: f6:b5:e4:83:9d:f2:fb:24:6d:bf:d9:c1:45:68:c9: e7:c9:79:c2:c7:5b:a9:2d:9e:7d:f4:ad:c6:87:55: ab:9c:fc:6f:e3:6b:78:06:e1:8a:f4:2f:99:b7:ab: ea:56:fd:53:3b:99:81:88:6d:ac:34:be:4c:a4:f9: 25:1c:5d:77:9d:f1:8f:cb:c3:74:da:2d:28:dd:45: b6:ef:e4:77:f9:f5:e7:fb:ad:84:70:d3:d8:2a:33: cc:93:d1:bb:69:c8:7d:88:1d:6b:b5:69:9b:c5:9b: 7a:a4:c1:bc:cc:a2:d2:a5:db:fe:a8:7b:91:a4:02: aa:de:3d:25:13:55:11:2a:d5:26:62:62:96:a3:45: 46:45:35:58:61:ae:15:08:8c:ea:ff:57:f8:6e:eb: e8:64:cd:7b:39:df:4a:d8:8d:a1:2c:38:7e:6d:ad: 96:8f:30:d1:ac:ea:df:55:2e:7c:4d:a6:53:68:42: e0:6c:d7:40:6c:22:2b:33:67:7c:82:e5:dd:1e:83: 82:82:10:58:3f:a0:fe:7b:6a:26:7d:ea:89:64:25: 91:14:7b:27:86:ca:a1:fc:0a:74:de:6a:ce:6b:e8: 07:0f:45:5b:7b:53:05:4b:b1:77:99:0f:db:10:2d: d7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:55:A7:FF:DC:4B:89:4C:FD:3C:72:54:85:BF:86:EE:AF:DC:7D:B5 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCA5C9FAD04711F080F824C0DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.218.30.0/24 154.219.16.0/24 154.219.24.0/24 154.219.28.0/24 154.219.207.0/24 154.219.211.0/24 154.219.222.0/24 154.219.230.0/24 154.219.232.0/24 154.219.245.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:51:f5:4a:18:e3:0c:72:3f:2b:23:05:0e:1c:a7:01:20:ca: 70:a7:89:64:4a:3a:68:0f:ea:c0:6e:45:d9:de:64:9e:c7:63: 3f:86:a1:b7:79:47:35:40:0c:ea:52:1c:50:2f:31:7a:2d:49: 5f:c1:b6:3d:4b:59:fa:cc:8b:85:87:2d:25:03:44:b5:d8:d5: 44:ed:fc:70:97:28:d2:4b:88:07:8f:8c:6f:b8:d2:51:28:24: 4e:b2:13:fc:ea:96:5e:e5:fa:2e:fd:f5:f1:71:ba:d6:69:2d: 38:07:6b:a7:1e:ab:f7:01:57:53:23:85:3b:d8:09:e4:81:18: bb:62:53:0d:77:1b:c8:8a:de:ae:05:e3:66:ee:a3:7d:3a:0c: 76:09:0c:9f:04:c3:a8:b3:1c:79:42:e8:58:ec:ad:f5:11:14: 82:01:82:f0:21:11:e1:a2:95:26:a4:21:3a:bb:19:43:38:59: e9:b2:a3:5a:d5:c6:ff:f5:eb:b7:e5:65:82:08:c9:51:09:39: f8:27:33:6c:f5:af:ce:cc:cb:c6:6a:93:41:c8:b4:2c:5d:a6: 25:76:ea:69:a8:15:dc:00:29:b4:af:42:53:e3:ee:99:33:9f: 0a:de:d5:25:07:61:2f:12:f4:03:0b:b8:fe:b8:4d:6c:a4:90: 13:9f:12:22 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIDAaxgMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMTI1ODM5WhcNMjYwMTA1MTI1ODM5WjAYMRYw FAYDVQQDEw02OTMwMzQwOC0yZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA0v1kR2kpJrMda7T+FcT2teSDnfL7JG2/2cFFaMnnyXnCx1upLZ599K3G h1WrnPxv42t4BuGK9C+Zt6vqVv1TO5mBiG2sNL5MpPklHF13nfGPy8N02i0o3UW2 7+R3+fXn+62EcNPYKjPMk9G7ach9iB1rtWmbxZt6pMG8zKLSpdv+qHuRpAKq3j0l E1URKtUmYmKWo0VGRTVYYa4VCIzq/1f4buvoZM17Od9K2I2hLDh+ba2WjzDRrOrf VS58TaZTaELgbNdAbCIrM2d8guXdHoOCghBYP6D+e2omfeqJZCWRFHsnhsqh/Ap0 3mrOa+gHD0Vbe1MFS7F3mQ/bEC3XHQIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFNRV p//cS4lM/TxyVIW/hu6v3H21MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DQ0E1QzlGQUQwNDcxMUYwODBGODI0QzBEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAmtoeAwQAmtsQAwQAmtsY AwQAmtscAwQAmtvPAwQAmtvTAwQAmtveAwQAmtvmAwQAmtvoAwQAmtv1MA0GCSqG SIb3DQEBCwUAA4IBAQCeUfVKGOMMcj8rIwUOHKcBIMpwp4lkSjpoD+rAbkXZ3mSe x2M/hqG3eUc1QAzqUhxQLzF6LUlfwbY9S1n6zIuFhy0lA0S12NVE7fxwlyjSS4gH j4xvuNJRKCROshP86pZe5fou/fXxcbrWaS04B2unHqv3AVdTI4U72AnkgRi7YlMN dxvIit6uBeNm7qN9Ogx2CQyfBMOosxx5QuhY7K31ERSCAYLwIRHhopUmpCE6uxlD OFnpsqNa1cb/9eu35WWCCMlRCTn4JzNs9a/OzMvGapNByLQsXaYlduppqBXcACm0 r0JT4+6ZM58K3tUlB2EvEvQDC7j+uE1spJATnxIi -----END CERTIFICATE-----Generated at Fri Dec 5 15:37:52 2025 by rpki-client