This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE41D7CAC13511F0B2370DF6DAE4EC9C.roa File: CE41D7CAC13511F0B2370DF6DAE4EC9C.roa (raw, json) Hash identifier: EplE5NWBN7WcFlCmgYh7m4WwsOUuZuj+ne/2mBCjBlY= Subject key identifier: 67:F5:76:2F:32:23:D9:8A:B4:CE:68:A6:F7:30:B0:1C:65:21:5A:33 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A8F6 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE41D7CAC13511F0B2370DF6DAE4EC9C.roa Signing time: Fri 14 Nov 2025 08:42:09 +0000 ROA not before: Fri 14 Nov 2025 08:42:04 +0000 ROA not after: Sat 20 Dec 2025 08:42:04 +0000 asID: 214143 IP address blocks: 154.194.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108790 (0x1a8f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 14 08:42:04 2025 GMT Not After : Dec 20 08:42:04 2025 GMT Subject: CN=6916eb61-47e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d9:4a:8c:c3:66:28:ad:bb:60:43:dc:cc:6c: 0b:51:a7:c2:5e:5d:09:8b:7b:10:ed:81:1b:e3:43: 06:4e:2a:79:3d:9d:03:9c:cf:74:61:4c:a1:39:56: 1c:b4:7b:48:f5:9c:4b:75:a7:ed:15:2d:70:4b:1d: 04:ee:37:3c:19:bc:9d:e8:83:17:b5:37:6c:ed:68: 49:58:9d:40:9e:b2:b6:35:6d:6a:55:8f:98:84:67: 44:7b:26:26:c2:17:21:e2:8a:74:ec:2c:81:81:13: 6c:24:f0:9d:6f:e8:32:b9:92:77:4d:df:65:a0:69: 3d:56:93:3c:18:49:28:8c:26:40:b4:39:61:bc:81: ee:dd:f2:40:41:e1:b6:81:37:1c:23:6a:75:7c:bf: e9:6b:66:18:a7:5a:7e:f2:28:03:04:bb:d4:b8:6c: 0e:93:9f:53:90:61:bc:8e:7c:7a:69:32:2d:bc:a0: 58:52:06:fe:e1:72:75:56:84:4d:3d:a3:a4:3d:92: 91:94:18:fb:74:fe:f3:14:ae:57:77:55:ad:d0:d1: 70:c7:01:74:f6:b2:ba:95:93:49:3d:2a:f0:81:ea: 74:47:22:32:d2:ed:5d:45:c7:3e:18:f9:43:76:5d: 49:03:f6:a9:fc:34:53:34:af:5f:4b:61:d9:f3:ad: 97:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F5:76:2F:32:23:D9:8A:B4:CE:68:A6:F7:30:B0:1C:65:21:5A:33 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE41D7CAC13511F0B2370DF6DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.194.208.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:1d:d2:af:68:91:14:c2:7a:94:ea:6f:42:b0:4a:ec:1c:8f: 5f:4b:02:03:3f:e1:09:87:36:b2:f9:4e:a7:28:85:67:cc:c6: 5f:8d:24:79:66:a9:81:46:5a:16:0a:56:f8:76:a7:d0:a4:88: 1d:1f:99:50:4d:12:e3:06:4b:17:d7:2a:d3:51:3e:1c:d3:44: 01:d8:47:6f:84:b6:8e:98:24:af:2b:da:b0:d9:9d:e0:fe:0e: b8:d7:9e:c8:de:b7:34:52:63:68:6d:ea:cb:f0:04:f5:c9:97: fd:6c:22:d5:6b:86:6c:f4:6c:4b:07:a1:b5:08:30:fc:51:7e: 0d:6d:5b:5f:cb:84:33:1d:80:2f:45:3d:b1:96:14:67:55:0f: 45:7a:5c:c1:c4:9d:74:3e:02:06:75:12:67:0a:0c:72:5c:f9: 6d:82:89:56:29:20:b1:b0:93:a6:b3:06:09:6f:a9:34:a1:f6: 58:b2:10:c0:9b:a1:cc:a7:80:09:6b:c9:52:d0:9f:43:2b:c8: d2:35:21:34:7d:91:c3:c2:21:31:51:d4:41:f8:c9:48:51:88: 9f:41:33:39:07:e9:f6:97:8b:0e:48:2e:2d:f9:1a:7d:61:dc: 7b:a2:10:56:fb:7d:c3:e4:b7:48:fe:f3:78:b2:82:a0:f3:1c: 74:31:02:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAaj2MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTE0MDg0MjA0WhcNMjUxMjIwMDg0MjA0WjAYMRYw FAYDVQQDEw02OTE2ZWI2MS00N2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA5tlKjMNmKK27YEPczGwLUafCXl0Ji3sQ7YEb40MGTip5PZ0DnM90YUyh OVYctHtI9ZxLdaftFS1wSx0E7jc8Gbyd6IMXtTds7WhJWJ1AnrK2NW1qVY+YhGdE eyYmwhch4op07CyBgRNsJPCdb+gyuZJ3Td9loGk9VpM8GEkojCZAtDlhvIHu3fJA QeG2gTccI2p1fL/pa2YYp1p+8igDBLvUuGwOk59TkGG8jnx6aTItvKBYUgb+4XJ1 VoRNPaOkPZKRlBj7dP7zFK5Xd1Wt0NFwxwF09rK6lZNJPSrwgep0RyIy0u1dRcc+ GPlDdl1JA/ap/DRTNK9fS2HZ862XMQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGf1 di8yI9mKtM5opvcwsBxlIVozMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DRTQxRDdDQUMxMzUxMUYwQjIzNzBERjZEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsLQMA0GCSqGSIb3DQEB CwUAA4IBAQA/HdKvaJEUwnqU6m9CsErsHI9fSwIDP+EJhzay+U6nKIVnzMZfjSR5 ZqmBRloWClb4dqfQpIgdH5lQTRLjBksX1yrTUT4c00QB2EdvhLaOmCSvK9qw2Z3g /g64157I3rc0UmNoberL8AT1yZf9bCLVa4Zs9GxLB6G1CDD8UX4NbVtfy4QzHYAv RT2xlhRnVQ9FelzBxJ10PgIGdRJnCgxyXPltgolWKSCxsJOmswYJb6k0ofZYshDA m6HMp4AJa8lS0J9DK8jSNSE0fZHDwiExUdRB+MlIUYifQTM5B+n2l4sOSC4t+Rp9 Ydx7ohBW+33D5LdI/vN4soKg8xx0MQJo -----END CERTIFICATE-----Generated at Wed Dec 3 10:28:59 2025 by rpki-client