This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEED607CCECD11F080BE9DF3DAE4EC9C.roa File: CEED607CCECD11F080BE9DF3DAE4EC9C.roa (raw, json) Hash identifier: TFg2nnbTuMWTFdf5Chogg+zUef9PC5oVYpSW9BZbnyI= Subject key identifier: 81:B5:68:28:C3:A6:6C:6C:D6:37:C0:3C:8F:19:F1:FE:B5:C4:F5:C7 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AB5C Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEED607CCECD11F080BE9DF3DAE4EC9C.roa Signing time: Mon 01 Dec 2025 15:52:59 +0000 ROA not before: Mon 01 Dec 2025 15:52:54 +0000 ROA not after: Wed 10 Dec 2025 15:52:54 +0000 asID: 151970 IP address blocks: 154.197.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109404 (0x1ab5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 1 15:52:54 2025 GMT Not After : Dec 10 15:52:54 2025 GMT Subject: CN=692db9db-dee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9d:62:3a:2a:cf:a2:d4:3b:38:e7:e9:81:0d: 36:a2:c0:3c:32:b3:f9:51:d3:d8:fd:d7:e5:bf:c1: d0:2b:e2:b4:fc:49:87:8b:03:2f:75:e3:b7:e9:a4: 8c:9b:d9:51:8d:70:bf:8f:0c:e2:48:6f:f3:06:80: b4:7d:66:dc:8d:6a:c0:8f:72:22:4e:9d:10:29:06: 39:60:ef:b4:e8:65:b7:25:ab:83:c5:bc:db:ca:41: be:7c:8a:b6:34:3d:dc:2f:dc:4f:b3:58:d1:3a:fd: 10:9f:34:fe:3c:00:48:15:53:c2:d7:6f:a8:1f:c4: 7a:51:cf:f9:cc:38:2d:92:94:10:23:6d:89:67:80: 00:56:e7:85:07:40:64:3c:85:63:21:2c:eb:db:0a: c7:81:bb:5f:25:b3:50:b0:d8:9a:32:75:99:40:c2: 51:9a:1d:67:52:54:be:43:24:b4:b2:bf:97:03:34: e4:b6:94:99:0b:1b:e5:bd:65:de:65:16:40:fe:82: 93:12:19:0b:8e:28:88:02:a2:2e:eb:c2:f2:a2:cd: db:44:e4:9e:51:6a:2b:ef:07:3b:cf:18:d0:66:15: 4d:ca:e0:45:3e:ef:98:2f:9d:70:6b:1a:e7:89:72: 2c:bc:fc:96:d6:0f:34:91:5f:99:60:ce:54:ad:c7: d4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:B5:68:28:C3:A6:6C:6C:D6:37:C0:3C:8F:19:F1:FE:B5:C4:F5:C7 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEED607CCECD11F080BE9DF3DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.197.74.0/24 Signature Algorithm: sha256WithRSAEncryption 28:33:95:0b:a1:71:74:de:c0:f0:83:8f:08:a6:2c:af:c6:55: aa:f2:3e:f9:fc:ee:44:cc:36:50:47:d3:8d:8f:c9:ad:5a:7d: a4:dc:5a:4d:d3:6c:7b:56:82:2f:1f:93:32:59:84:9b:23:17: c4:68:95:3f:81:4d:4b:cb:a6:67:0a:dc:f9:e5:ad:f0:83:a6: 12:72:a1:c3:36:0b:22:51:9e:9b:f9:01:14:6f:a2:8c:f8:bc: f3:7a:e4:6d:48:d7:e9:e4:5d:5f:48:ff:ba:51:5d:61:8c:c7: 4a:18:b5:d5:55:49:b5:a9:82:bf:f9:ab:3f:08:b2:e3:b0:3e: a1:89:d8:9c:77:7b:4f:0d:8d:75:8f:da:a6:c3:db:d2:28:38: 97:ae:17:cc:ea:0d:0e:ac:14:33:ec:00:e6:6a:c8:0d:15:41: 14:00:74:30:b5:5d:91:af:48:9e:30:40:8b:0f:46:6f:44:23: 04:a9:60:52:41:9f:c0:43:d5:0a:4d:ee:a0:4e:a5:91:82:58: 11:bd:88:72:88:93:be:d7:6f:c5:f4:30:7f:e3:cf:45:78:8a: 45:13:35:1d:d8:5a:83:7e:1e:3e:f4:f2:b3:ec:fe:5b:2e:e3: 89:b0:dc:0e:92:21:a7:26:f8:0d:bb:cf:df:37:01:dd:39:42: d5:97:c5:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAatcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAxMTU1MjU0WhcNMjUxMjEwMTU1MjU0WjAYMRYw FAYDVQQDEw02OTJkYjlkYi1kZWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA2Z1iOirPotQ7OOfpgQ02osA8MrP5UdPY/dflv8HQK+K0/EmHiwMvdeO3 6aSMm9lRjXC/jwziSG/zBoC0fWbcjWrAj3IiTp0QKQY5YO+06GW3JauDxbzbykG+ fIq2ND3cL9xPs1jROv0QnzT+PABIFVPC12+oH8R6Uc/5zDgtkpQQI22JZ4AAVueF B0BkPIVjISzr2wrHgbtfJbNQsNiaMnWZQMJRmh1nUlS+QyS0sr+XAzTktpSZCxvl vWXeZRZA/oKTEhkLjiiIAqIu68Lyos3bROSeUWor7wc7zxjQZhVNyuBFPu+YL51w axrniXIsvPyW1g80kV+ZYM5UrcfUZwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIG1 aCjDpmxs1jfAPI8Z8f61xPXHMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DRUVENjA3Q0NFQ0QxMUYwODBCRTlERjNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVKMA0GCSqGSIb3DQEB CwUAA4IBAQAoM5ULoXF03sDwg48IpiyvxlWq8j75/O5EzDZQR9ONj8mtWn2k3FpN 02x7VoIvH5MyWYSbIxfEaJU/gU1Ly6ZnCtz55a3wg6YScqHDNgsiUZ6b+QEUb6KM +LzzeuRtSNfp5F1fSP+6UV1hjMdKGLXVVUm1qYK/+as/CLLjsD6hidicd3tPDY11 j9qmw9vSKDiXrhfM6g0OrBQz7ADmasgNFUEUAHQwtV2Rr0ieMECLD0ZvRCMEqWBS QZ/AQ9UKTe6gTqWRglgRvYhyiJO+12/F9DB/489FeIpFEzUd2FqDfh4+9PKz7P5b LuOJsNwOkiGnJvgNu8/fNwHdOULVl8V/ -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:21 2025 by rpki-client