This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEE25B6ECFC711F084028392DAE4EC9C.roa File: CEE25B6ECFC711F084028392DAE4EC9C.roa (raw, json) Hash identifier: WdlWYdXPv0iqTX3+uStfdRScUpHf/CIto94ypEh70LA= Subject key identifier: 98:3F:39:2E:BB:68:08:09:F5:8E:2E:B3:49:64:5C:8F:B4:E7:69:AD Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ABD5 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEE25B6ECFC711F084028392DAE4EC9C.roa Signing time: Tue 02 Dec 2025 21:42:33 +0000 ROA not before: Tue 02 Dec 2025 21:42:28 +0000 ROA not after: Fri 03 Nov 2028 21:42:28 +0000 asID: 17561 IP address blocks: 154.212.33.0/24 maxlen: 24 154.212.34.0/24 maxlen: 24 154.212.35.0/24 maxlen: 24 154.212.36.0/24 maxlen: 24 154.212.37.0/24 maxlen: 24 154.212.38.0/24 maxlen: 24 154.212.39.0/24 maxlen: 24 154.212.40.0/24 maxlen: 24 154.212.41.0/24 maxlen: 24 154.212.42.0/24 maxlen: 24 154.212.43.0/24 maxlen: 24 154.212.44.0/24 maxlen: 24 154.212.45.0/24 maxlen: 24 154.212.46.0/24 maxlen: 24 154.212.47.0/24 maxlen: 24 154.212.48.0/24 maxlen: 24 154.212.49.0/24 maxlen: 24 154.212.50.0/24 maxlen: 24 154.212.51.0/24 maxlen: 24 154.212.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109525 (0x1abd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 21:42:28 2025 GMT Not After : Nov 3 21:42:28 2028 GMT Subject: CN=692f5d49-d387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:85:50:e8:9f:c7:c8:dd:9e:60:5a:fb:50:98: a5:5e:3b:f1:ba:2c:9b:42:75:50:ba:49:bb:3f:a7: 51:c0:cc:07:a7:60:a7:a5:c3:4e:32:42:56:45:7d: 15:ba:0d:07:66:2b:e5:75:f6:a9:e6:11:c2:fd:2d: 9f:38:c8:79:04:e0:63:5c:98:87:7f:af:32:58:56: b2:7f:9d:59:f3:22:41:2d:58:14:fa:12:60:f5:bd: d1:ef:91:8e:23:3f:d7:6c:58:38:49:12:86:d9:c4: 74:97:f8:62:21:49:1c:cb:c2:85:17:8b:1d:59:ee: 5c:ac:eb:cb:4f:1c:02:58:d4:96:e1:5d:29:8b:88: d1:52:32:55:65:a9:e9:15:df:98:bd:bb:ca:e4:dd: d7:08:4a:a5:c4:8e:96:b5:47:fe:d0:29:60:12:fd: 4b:0f:f4:a4:9f:e1:ba:8b:9f:0c:20:07:ce:48:72: df:ae:d9:78:7c:15:8e:06:18:c7:8a:da:bf:fb:02: e6:c1:b8:01:5d:3d:10:4f:9e:68:09:f4:a5:5b:da: 4d:69:1d:d0:08:1f:c5:c2:74:3f:90:d5:78:1e:b1: 4a:32:9b:90:7a:2e:24:ea:7f:65:5a:87:48:3f:96: b1:c6:04:ec:1f:e4:2f:18:35:9b:6c:69:b4:e3:b2: d6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3F:39:2E:BB:68:08:09:F5:8E:2E:B3:49:64:5C:8F:B4:E7:69:AD X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEE25B6ECFC711F084028392DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.212.33.0-154.212.52.255 Signature Algorithm: sha256WithRSAEncryption 99:3b:e0:62:1b:2c:72:cd:0e:36:93:3d:0a:61:af:97:ab:18: 4e:72:d7:d6:8b:14:5b:19:4c:d7:fd:b1:7e:d6:3d:b8:79:01: a4:30:dd:ea:1f:c7:c6:b4:07:02:0f:9d:27:54:28:94:01:5a: e3:c6:f8:45:71:f6:34:2d:09:0e:e4:e0:a2:a6:c2:0e:d4:57: 28:87:49:b7:f4:a9:3c:ff:f0:44:6b:13:7b:37:e7:ea:9e:06: dc:c2:c9:70:c8:ea:94:2c:4c:3c:af:6c:6a:5a:c9:bc:a6:4b: 4e:78:08:7e:81:66:97:d2:35:2f:33:1c:21:2f:10:52:55:c4: e1:55:4b:c2:d0:bc:1b:9e:01:1e:d1:b2:9c:7a:5b:bd:b9:af: ad:9d:59:12:7c:de:de:df:3f:1d:1f:7a:3d:8f:60:d4:d8:d3: c6:5f:24:ce:d6:a5:76:65:74:4e:60:85:b4:4b:8e:a2:98:ae: ad:5d:6f:be:dc:3e:db:0a:b3:ec:69:8a:65:0c:50:85:c2:87: 58:4f:28:d8:9d:0f:47:e3:74:8b:d6:f4:94:6a:06:7a:52:fc: d4:c3:20:08:1a:ad:88:51:7b:e4:f8:0b:e7:49:4f:db:dd:4a: 30:c7:d8:cb:05:d8:d0:09:85:68:27:52:ce:7d:5c:b4:55:7f: 5a:23:0f:05 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIDAavVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMjE0MjI4WhcNMjgxMTAzMjE0MjI4WjAYMRYw FAYDVQQDEw02OTJmNWQ0OS1kMzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAxoVQ6J/HyN2eYFr7UJilXjvxuiybQnVQukm7P6dRwMwHp2CnpcNOMkJW RX0Vug0HZivldfap5hHC/S2fOMh5BOBjXJiHf68yWFayf51Z8yJBLVgU+hJg9b3R 75GOIz/XbFg4SRKG2cR0l/hiIUkcy8KFF4sdWe5crOvLTxwCWNSW4V0pi4jRUjJV ZanpFd+YvbvK5N3XCEqlxI6WtUf+0ClgEv1LD/Skn+G6i58MIAfOSHLfrtl4fBWO BhjHitq/+wLmwbgBXT0QT55oCfSlW9pNaR3QCB/FwnQ/kNV4HrFKMpuQei4k6n9l WodIP5axxgTsH+QvGDWbbGm047LWmwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJg/ OS67aAgJ9Y4us0lkXI+052mtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DRUUyNUI2RUNGQzcxMUYwODQwMjgzOTJEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACa1CEDBACa1DQwDQYJ KoZIhvcNAQELBQADggEBAJk74GIbLHLNDjaTPQphr5erGE5y19aLFFsZTNf9sX7W Pbh5AaQw3eofx8a0BwIPnSdUKJQBWuPG+EVx9jQtCQ7k4KKmwg7UVyiHSbf0qTz/ 8ERrE3s35+qeBtzCyXDI6pQsTDyvbGpaybymS054CH6BZpfSNS8zHCEvEFJVxOFV S8LQvBueAR7Rspx6W725r62dWRJ83t7fPx0fej2PYNTY08ZfJM7WpXZldE5ghbRL jqKYrq1db77cPtsKs+xpimUMUIXCh1hPKNidD0fjdIvW9JRqBnpS/NTDIAgarYhR e+T4C+dJT9vdSjDH2MsF2NAJhWgnUs59XLRVf1ojDwU= -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:06 2025 by rpki-client