This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0EBD334BAF211F0A24975EEDAE4EC9C.roa File: D0EBD334BAF211F0A24975EEDAE4EC9C.roa (raw, json) Hash identifier: 44UzIc5gA/oanurM4nsBCpp5lCQSQTn27E+6Jcb8cp8= Subject key identifier: 49:4C:E1:5A:8E:48:E2:CB:B4:96:F9:52:7D:FC:FD:44:FB:D0:28:FD Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A7A6 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0EBD334BAF211F0A24975EEDAE4EC9C.roa Signing time: Thu 06 Nov 2025 09:27:30 +0000 ROA not before: Thu 06 Nov 2025 09:27:25 +0000 ROA not after: Thu 18 Dec 2025 09:27:25 +0000 asID: 20326 IP address blocks: 154.193.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108454 (0x1a7a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 6 09:27:25 2025 GMT Not After : Dec 18 09:27:25 2025 GMT Subject: CN=690c6a02-d095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:78:50:de:8e:41:a8:a6:0e:86:4e:9e:2a:64: bf:b0:9d:30:dc:b8:ed:8a:8b:de:a4:79:1a:8a:ca: 64:fe:c9:41:2a:5c:03:d9:1c:37:17:06:7b:1e:e4: fe:c3:b3:d9:bd:5d:05:46:4e:f6:94:97:b2:70:37: df:b0:9b:23:72:07:54:e5:03:83:46:10:73:04:3b: 81:ed:c6:2a:8d:50:7b:62:31:e6:eb:1d:fe:3e:02: fc:cd:5c:0f:39:87:33:61:4e:0d:a8:9d:99:d3:40: d9:fc:c3:a3:dd:f1:c7:9e:ab:dc:5d:23:14:06:79: 26:08:72:cc:96:5b:56:1f:4c:f9:f5:5f:93:a7:b2: 7c:2c:5c:05:a8:2d:21:1a:55:b7:00:e7:70:cd:a2: 7c:eb:21:ee:a5:e6:db:80:50:f2:15:6b:7f:28:7f: 7f:2d:e1:db:59:c6:cc:20:0e:4e:04:7a:9f:f8:d1: c9:6c:cf:fd:a9:33:b1:a9:84:ab:e3:a7:af:bc:83: d5:36:c7:13:0c:f1:be:78:db:1a:c7:50:fd:a6:00: 55:3f:1f:28:61:82:c2:5d:4b:8b:ed:f1:db:f5:f5: 71:a0:39:3e:9c:19:8e:12:88:55:d0:38:f7:1b:8f: 91:61:d3:f5:cf:df:ba:c8:3e:fa:5d:15:aa:ba:5a: 9d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4C:E1:5A:8E:48:E2:CB:B4:96:F9:52:7D:FC:FD:44:FB:D0:28:FD X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0EBD334BAF211F0A24975EEDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.193.130.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:5e:0c:cd:bb:46:1e:69:c0:70:9b:38:8f:b0:2e:e8:8a:32: 17:46:cf:40:06:de:f8:4e:be:68:73:d1:dc:fe:8a:aa:cd:fe: e1:35:fe:73:0a:2f:ee:57:07:f7:4e:54:e0:01:16:b2:1b:22: af:b1:cc:da:b1:54:43:82:cd:bd:48:1b:12:a7:65:37:9f:4d: 33:47:a4:e9:52:ae:9a:a0:26:55:15:0c:9b:ff:db:ac:ae:31: 2b:96:12:24:a7:aa:9b:e7:3f:f5:b5:51:81:7a:80:bf:9d:ea: 15:17:30:d9:1e:21:78:e0:62:bd:00:9d:f3:7e:b7:b0:a6:f9: 58:29:e7:d3:70:6a:43:24:ef:63:a7:e8:f7:72:82:13:42:62: 5a:4a:1a:1b:d2:c3:39:99:c6:ea:85:07:eb:c5:b1:48:f4:c2: 70:7d:a7:3d:e1:3f:6e:08:74:08:9f:9a:23:c2:d2:6a:95:bc: 98:13:6d:86:0e:68:39:57:13:6b:d5:eb:3e:25:14:05:13:41: 5f:c1:dd:58:a1:51:ba:dd:ff:45:d8:b9:47:af:e5:8e:0d:f7: ba:2c:ea:ad:9c:13:8c:7a:8e:ab:ef:7b:69:12:a9:07:31:06: f8:f3:3a:2f:11:ee:19:bc:b6:1b:7b:df:38:44:57:d6:d4:db: f8:49:bf:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAaemMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTA2MDkyNzI1WhcNMjUxMjE4MDkyNzI1WjAYMRYw FAYDVQQDEw02OTBjNmEwMi1kMDk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAwXhQ3o5BqKYOhk6eKmS/sJ0w3LjtiovepHkaispk/slBKlwD2Rw3FwZ7 HuT+w7PZvV0FRk72lJeycDffsJsjcgdU5QODRhBzBDuB7cYqjVB7YjHm6x3+PgL8 zVwPOYczYU4NqJ2Z00DZ/MOj3fHHnqvcXSMUBnkmCHLMlltWH0z59V+Tp7J8LFwF qC0hGlW3AOdwzaJ86yHupebbgFDyFWt/KH9/LeHbWcbMIA5OBHqf+NHJbM/9qTOx qYSr46evvIPVNscTDPG+eNsax1D9pgBVPx8oYYLCXUuL7fHb9fVxoDk+nBmOEohV 0Dj3G4+RYdP1z9+6yD76XRWqulqdQwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFElM 4VqOSOLLtJb5Un38/UT70Cj9MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9EMEVCRDMzNEJBRjIxMUYwQTI0OTc1RUVEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsGCMA0GCSqGSIb3DQEB CwUAA4IBAQCdXgzNu0YeacBwmziPsC7oijIXRs9ABt74Tr5oc9Hc/oqqzf7hNf5z Ci/uVwf3TlTgARayGyKvsczasVRDgs29SBsSp2U3n00zR6TpUq6aoCZVFQyb/9us rjErlhIkp6qb5z/1tVGBeoC/neoVFzDZHiF44GK9AJ3zfrewpvlYKefTcGpDJO9j p+j3coITQmJaShob0sM5mcbqhQfrxbFI9MJwfac94T9uCHQIn5ojwtJqlbyYE22G Dmg5VxNr1es+JRQFE0Ffwd1YoVG63f9F2LlHr+WODfe6LOqtnBOMeo6r73tpEqkH MQb48zovEe4ZvLYbe984RFfW1Nv4Sb8r -----END CERTIFICATE-----Generated at Wed Dec 3 11:06:30 2025 by rpki-client