This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDB35AA0C01211F0B7E428BADAE4EC9C.roa File: CDB35AA0C01211F0B7E428BADAE4EC9C.roa (raw, json) Hash identifier: doePqWVhcr9rSbkev1x6yRycjgDV6sCKOtZWOspvOm8= Subject key identifier: 49:FA:C9:C5:A1:25:D3:9C:59:35:F3:1A:A4:4C:2E:66:96:CC:AB:E2 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A8CB Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDB35AA0C01211F0B7E428BADAE4EC9C.roa Signing time: Wed 12 Nov 2025 21:59:05 +0000 ROA not before: Wed 12 Nov 2025 21:59:00 +0000 ROA not after: Mon 18 May 2026 21:59:00 +0000 asID: 18013 IP address blocks: 154.210.16.0/20 maxlen: 24 154.212.132.0/22 maxlen: 24 154.212.135.0/24 maxlen: 24 154.215.2.0/23 maxlen: 24 154.221.2.0/23 maxlen: 24 154.221.8.0/21 maxlen: 24 154.222.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108747 (0x1a8cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 12 21:59:00 2025 GMT Not After : May 18 21:59:00 2026 GMT Subject: CN=69150328-dfe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:13:4a:fb:7f:71:60:5a:56:90:29:69:7d:d1: 43:88:a4:d7:02:f1:6d:8f:a8:10:14:e5:35:4e:6d: 78:e6:de:dd:5c:c1:e4:5b:57:42:8f:32:6c:b8:79: d4:df:69:f6:4b:a5:13:2d:72:6d:5b:4c:15:91:03: bd:b1:16:c7:25:65:9a:b8:e2:35:e4:13:f7:90:52: 0e:2c:2a:11:00:63:16:47:07:c4:5f:a8:86:11:aa: 49:01:43:89:ab:92:ab:44:da:63:08:8a:32:ba:b6: be:a8:f0:3e:a7:06:43:d1:3f:85:82:24:56:a1:28: ac:d2:fb:d8:60:0b:9f:fe:de:c3:d2:cb:96:c8:5f: a7:08:9f:b9:32:f2:f4:a2:02:cc:e9:29:fd:22:55: 40:44:f7:ee:25:0a:a4:5c:14:7f:83:9d:46:02:fa: f7:36:f1:28:d9:e7:46:db:65:13:74:30:af:e9:ea: 0a:a4:61:ad:50:a8:a9:d3:b4:9b:dc:cc:08:c1:e9: b9:ef:91:4d:16:75:80:7d:57:b0:0f:2e:f5:bb:ce: 00:40:a1:c0:f4:d8:75:5a:f4:fe:de:69:fb:a1:74: 8f:12:8a:70:46:00:19:fb:a2:06:db:d6:7e:8c:cc: a1:a7:90:f8:90:73:a7:0a:fa:d0:b2:4a:f8:94:7e: 1c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FA:C9:C5:A1:25:D3:9C:59:35:F3:1A:A4:4C:2E:66:96:CC:AB:E2 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDB35AA0C01211F0B7E428BADAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.210.16.0/20 154.212.132.0/22 154.215.2.0/23 154.221.2.0/23 154.221.8.0/21 154.222.224.0/20 Signature Algorithm: sha256WithRSAEncryption a9:7b:f3:ee:89:c1:c6:30:35:a7:12:83:34:1b:7c:66:38:ef: b3:01:ed:39:cc:5c:fd:c2:fc:48:e4:b5:aa:5a:c9:cf:59:48: e5:40:6f:df:5d:48:eb:53:fe:5d:79:9b:3e:5b:a2:be:1f:bf: 1c:7c:ef:19:c0:68:f8:35:90:cf:5e:f7:67:2d:52:f4:71:94: 7e:ce:c5:32:4c:11:b0:d4:4e:17:2e:70:82:b6:05:cf:8d:b0: 83:e8:86:39:72:8e:d4:4e:9d:ce:ad:86:30:a0:a3:91:cb:74: 6d:9b:fc:16:42:87:3c:31:0b:79:47:b8:92:89:55:ad:15:0d: ed:cc:91:1e:52:63:1b:78:e5:7b:9b:3f:05:1f:74:15:75:c8: 30:dc:f1:2f:7e:04:16:48:bf:f9:10:58:e0:58:c7:80:32:d6: 47:5e:4a:1b:37:c1:99:cb:07:f1:9a:03:1d:9a:25:e8:3b:6e: 0c:1e:34:23:10:b2:87:b0:2d:48:f2:96:e7:19:66:69:0c:ba: 03:30:29:5d:c4:a6:f9:48:d9:93:05:f7:a3:dc:1a:1f:f5:ef: c7:a0:49:12:ac:46:51:31:6b:45:5e:6c:13:79:6c:67:4b:04: 47:f3:e7:08:7b:55:1e:f7:38:b8:5c:0e:74:7b:e0:ad:b0:66: 69:9b:f1:ba -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIDAajLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTEyMjE1OTAwWhcNMjYwNTE4MjE1OTAwWjAYMRYw FAYDVQQDEw02OTE1MDMyOC1kZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAzBNK+39xYFpWkClpfdFDiKTXAvFtj6gQFOU1Tm145t7dXMHkW1dCjzJs uHnU32n2S6UTLXJtW0wVkQO9sRbHJWWauOI15BP3kFIOLCoRAGMWRwfEX6iGEapJ AUOJq5KrRNpjCIoyura+qPA+pwZD0T+FgiRWoSis0vvYYAuf/t7D0suWyF+nCJ+5 MvL0ogLM6Sn9IlVARPfuJQqkXBR/g51GAvr3NvEo2edG22UTdDCv6eoKpGGtUKip 07Sb3MwIwem575FNFnWAfVewDy71u84AQKHA9Nh1WvT+3mn7oXSPEopwRgAZ+6IG 29Z+jMyhp5D4kHOnCvrQskr4lH4cGwIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFEn6 ycWhJdOcWTXzGqRMLmaWzKviMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DREIzNUFBMEMwMTIxMUYwQjdFNDI4QkFEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQEmtIQAwQCmtSEAwQBmtcC AwQBmt0CAwQDmt0IAwQEmt7gMA0GCSqGSIb3DQEBCwUAA4IBAQCpe/PuicHGMDWn EoM0G3xmOO+zAe05zFz9wvxI5LWqWsnPWUjlQG/fXUjrU/5deZs+W6K+H78cfO8Z wGj4NZDPXvdnLVL0cZR+zsUyTBGw1E4XLnCCtgXPjbCD6IY5co7UTp3OrYYwoKOR y3Rtm/wWQoc8MQt5R7iSiVWtFQ3tzJEeUmMbeOV7mz8FH3QVdcgw3PEvfgQWSL/5 EFjgWMeAMtZHXkobN8GZywfxmgMdmiXoO24MHjQjELKHsC1I8pbnGWZpDLoDMCld xKb5SNmTBfej3Bof9e/HoEkSrEZRMWtFXmwTeWxnSwRH8+cIe1Ue9zi4XA50e+Ct sGZpm/G6 -----END CERTIFICATE-----Generated at Wed Dec 3 11:06:30 2025 by rpki-client