This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF895FF0D01B11F091DAF2B1DAE4EC9C.roa File: CF895FF0D01B11F091DAF2B1DAE4EC9C.roa (raw, json) Hash identifier: tZjH2wExjZDDh+qZIkrl0HG7tzIiJW7rN36exupDAI0= Subject key identifier: AF:05:D6:24:7C:1A:0C:C2:1A:A7:51:71:C7:7B:7C:72:4C:18:95:46 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC04 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF895FF0D01B11F091DAF2B1DAE4EC9C.roa Signing time: Wed 03 Dec 2025 07:43:53 +0000 ROA not before: Wed 03 Dec 2025 07:43:45 +0000 ROA not after: Thu 01 Jan 2026 07:43:45 +0000 asID: 44559 IP address blocks: 154.198.36.0/24 maxlen: 24 154.203.251.0/24 maxlen: 24 154.205.233.0/24 maxlen: 24 154.205.234.0/24 maxlen: 24 154.205.235.0/24 maxlen: 24 154.205.236.0/24 maxlen: 24 154.205.237.0/24 maxlen: 24 154.205.238.0/24 maxlen: 24 154.205.239.0/24 maxlen: 24 154.205.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109572 (0x1ac04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 07:43:45 2025 GMT Not After : Jan 1 07:43:45 2026 GMT Subject: CN=692fea39-c0cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:97:20:a4:10:ab:23:e9:ef:1a:39:16:f3:1a: 4b:cd:b3:a7:f7:06:3d:e8:1e:a0:70:f6:e1:b2:86: 4c:23:7e:0a:48:e7:be:1e:5a:a9:f4:9a:e9:5f:1d: c5:7a:77:c3:d9:50:40:f9:95:7f:af:d6:55:bd:08: 5f:d9:84:50:73:49:3c:6f:98:9c:3a:bb:79:bc:b2: 4a:d7:32:d1:4b:91:4b:f4:4c:36:16:4d:ea:d8:70: e4:d9:4a:29:c4:b2:3f:76:57:27:c5:3e:f2:5a:f2: b4:9a:b5:4b:94:0a:31:ec:84:62:a2:78:fa:57:07: ff:43:d4:a0:f3:5e:7b:6b:ca:dd:e2:8c:db:3b:58: 51:65:4d:2e:d6:df:01:c0:c4:05:12:7f:d0:b9:bc: d8:14:c7:8d:b2:28:1f:07:5d:ed:d8:64:63:de:c4: 80:bc:c3:f5:eb:b2:31:dd:c8:6e:aa:c2:90:0b:76: e4:61:57:b5:38:45:52:d7:3e:2a:fd:fc:6a:b3:15: 4e:a1:5c:4c:4a:1b:65:27:5d:54:f4:a8:8b:2a:6c: e3:9c:a1:87:88:44:1e:0e:0f:1d:87:b4:44:f9:fe: 85:3a:4a:2a:0b:0c:f1:c8:03:8f:2f:0f:75:f7:16: 3d:ad:59:60:ca:65:9e:2f:a9:95:21:72:cc:36:46: 51:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:05:D6:24:7C:1A:0C:C2:1A:A7:51:71:C7:7B:7C:72:4C:18:95:46 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF895FF0D01B11F091DAF2B1DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.198.36.0/24 154.203.251.0/24 154.205.233.0-154.205.240.255 Signature Algorithm: sha256WithRSAEncryption 1d:24:52:66:20:e2:fc:58:98:61:00:2b:de:5d:c1:01:2a:e3: f1:db:ea:71:3f:1c:48:4a:34:95:da:b4:3e:6d:55:7a:d1:47: 39:be:7a:be:8e:b8:f5:90:74:6e:3a:85:99:af:1f:b4:46:7a: 91:31:10:0d:ff:fd:ab:3f:55:39:d8:bb:53:d3:32:27:0c:24: 11:7a:d5:be:07:24:41:31:8f:b0:51:91:71:36:ac:07:b2:e5: f3:b7:d6:15:73:38:4a:39:10:f6:21:6a:c9:8d:4c:43:87:c5: 83:19:0a:4e:62:91:05:49:ea:df:fe:3d:7b:5d:67:df:6f:dc: 1b:d7:26:4e:8b:f5:5d:48:d9:40:79:1f:de:10:73:0d:ab:e3: b7:45:52:11:0a:e6:6c:b2:7f:1f:b7:0c:28:7c:60:a7:76:5a: a3:a8:e1:09:e8:a8:ad:bb:2c:ca:c9:35:4a:d9:58:90:b3:31: d9:de:f1:bc:6e:57:67:ab:3d:1a:f8:1d:17:93:46:46:d7:2a: ab:e9:ca:f4:27:6c:19:7b:60:9c:e2:4b:f6:f6:e4:80:fc:e3: 84:46:d0:b0:37:d2:69:11:b6:ba:6d:0d:f2:a6:fb:59:37:49: 39:ec:96:6b:0f:df:d8:0e:5b:62:8c:58:80:c5:ad:15:07:4a: 15:6f:4a:70 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgIDAawEMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMDc0MzQ1WhcNMjYwMTAxMDc0MzQ1WjAYMRYw FAYDVQQDEw02OTJmZWEzOS1jMGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAw5cgpBCrI+nvGjkW8xpLzbOn9wY96B6gcPbhsoZMI34KSOe+Hlqp9Jrp Xx3FenfD2VBA+ZV/r9ZVvQhf2YRQc0k8b5icOrt5vLJK1zLRS5FL9Ew2Fk3q2HDk 2UopxLI/dlcnxT7yWvK0mrVLlAox7IRionj6Vwf/Q9Sg8157a8rd4ozbO1hRZU0u 1t8BwMQFEn/QubzYFMeNsigfB13t2GRj3sSAvMP167Ix3chuqsKQC3bkYVe1OEVS 1z4q/fxqsxVOoVxMShtlJ11U9KiLKmzjnKGHiEQeDg8dh7RE+f6FOkoqCwzxyAOP Lw919xY9rVlgymWeL6mVIXLMNkZR1QIDAQABo4ICuTCCArUwHQYDVR0OBBYEFK8F 1iR8GgzCGqdRccd7fHJMGJVGMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DRjg5NUZGMEQwMUIxMUYwOTFEQUYyQjFEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAmsYkAwQAmsv7MAwDBACa zekDBACazfAwDQYJKoZIhvcNAQELBQADggEBAB0kUmYg4vxYmGEAK95dwQEq4/Hb 6nE/HEhKNJXatD5tVXrRRzm+er6OuPWQdG46hZmvH7RGepExEA3//as/VTnYu1PT MicMJBF61b4HJEExj7BRkXE2rAey5fO31hVzOEo5EPYhasmNTEOHxYMZCk5ikQVJ 6t/+PXtdZ99v3BvXJk6L9V1I2UB5H94Qcw2r47dFUhEK5myyfx+3DCh8YKd2WqOo 4QnoqK27LMrJNUrZWJCzMdne8bxuV2erPRr4HReTRkbXKqvpyvQnbBl7YJziS/b2 5ID844RG0LA30mkRtrptDfKm+1k3STnslmsP39gOW2KMWIDFrRUHShVvSnA= -----END CERTIFICATE-----Generated at Wed Dec 3 11:07:16 2025 by rpki-client