This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1BD8AAEE0C811F087CE24C2DAE4EC9C.roa File: D1BD8AAEE0C811F087CE24C2DAE4EC9C.roa (raw, json) Hash identifier: GMs+O6yxcX5wZdO8PxHDJOB7WW3PHmbbTlccoWMlYYE= Subject key identifier: 1E:E8:68:CB:FC:E2:4C:E1:6A:2B:11:84:CA:F9:F5:D6:E8:C5:2E:2C Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B0C8 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1BD8AAEE0C811F087CE24C2DAE4EC9C.roa Signing time: Wed 24 Dec 2025 13:02:37 +0000 ROA not before: Wed 24 Dec 2025 13:02:31 +0000 ROA not after: Sat 31 Jan 2026 13:02:31 +0000 asID: 62240 IP address blocks: 154.194.112.0/24 maxlen: 24 154.194.113.0/24 maxlen: 24 154.194.114.0/24 maxlen: 24 154.194.115.0/24 maxlen: 24 154.194.116.0/24 maxlen: 24 154.195.24.0/24 maxlen: 24 154.195.25.0/24 maxlen: 24 154.195.26.0/24 maxlen: 24 154.195.27.0/24 maxlen: 24 154.195.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 29 Dec 2025 00:06:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110792 (0x1b0c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 24 13:02:31 2025 GMT Not After : Jan 31 13:02:31 2026 GMT Subject: CN=694be46d-226c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:41:73:5c:e4:67:2e:47:dd:7a:2f:4b:0a:67: 6b:4c:65:ec:19:88:53:6a:89:bd:ad:9c:e3:9c:b9: 64:4a:86:e0:b3:2f:cd:a2:0a:3a:db:34:00:9d:77: c5:ae:5f:3b:0c:d8:39:32:59:32:f8:fc:b2:80:dc: 81:02:b1:d2:31:7d:fd:01:b7:0f:fd:9a:4c:2a:a1: 82:ff:34:8e:47:14:b4:79:7a:7c:db:39:42:72:29: 75:92:35:d1:6a:69:02:09:fd:c1:52:13:54:23:ce: ed:31:30:34:7f:84:aa:b6:39:7e:46:62:a0:b9:46: 6d:3a:53:f4:30:97:83:fc:5b:e4:94:a3:e7:b7:55: 06:31:7b:ae:55:88:bd:9a:a5:83:da:f1:14:fb:58: 34:e1:ec:3c:43:1b:9c:07:10:10:bd:e8:f6:1a:28: 86:61:04:a8:03:56:9f:c7:53:e0:4a:3c:b9:41:21: bd:f2:46:a6:03:71:09:e5:97:7e:4c:67:d6:b8:5b: ea:b5:fc:4c:19:ef:67:a8:ab:df:16:76:4b:b3:64: 95:df:32:b7:ec:56:e2:73:64:dc:78:3f:c7:f1:64: d1:56:b8:3d:5d:84:83:a4:2c:3e:d4:1b:d3:a6:a7: 1a:c5:8d:08:ec:a6:55:ef:7c:3f:37:be:90:c6:0f: 1f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E8:68:CB:FC:E2:4C:E1:6A:2B:11:84:CA:F9:F5:D6:E8:C5:2E:2C X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1BD8AAEE0C811F087CE24C2DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.194.112.0-154.194.116.255 154.195.24.0-154.195.28.255 Signature Algorithm: sha256WithRSAEncryption c9:0d:86:11:48:cc:3f:af:d2:6d:4e:42:0f:e8:cb:26:24:83: 01:01:26:da:f2:93:14:36:94:f7:e9:8e:8a:44:f4:79:69:03: d8:77:03:5b:7b:f6:fe:e9:9a:3b:95:4e:2e:d8:41:75:58:0b: 4d:4d:95:34:4e:90:91:ec:e3:8b:5a:93:b1:1a:70:a4:f1:b0: 2b:9a:3a:03:c1:34:77:11:f7:45:56:86:cc:94:12:ae:84:0e: d1:90:c3:97:59:c8:23:c8:33:0c:38:cc:75:05:80:4a:11:ca: 2f:04:39:56:be:c4:71:d8:4d:c0:87:9a:a2:c6:f9:67:8e:46: 78:9f:98:01:1d:7f:af:75:f3:a4:a2:08:40:6e:21:35:f0:82: ea:a3:33:dc:8c:7f:0c:18:4b:b2:16:1e:31:ad:49:10:79:8b: f1:1a:cc:30:a6:b9:77:49:c4:18:0d:78:b6:14:35:0e:f5:63: e8:41:62:c6:d0:83:82:6e:0b:26:0a:2c:3a:8a:a9:d0:0d:3b: 7c:f6:ea:e5:75:9e:dc:ff:52:fc:d4:c6:ac:af:4e:9b:f1:42: 7b:6e:3c:24:9b:27:81:4e:a9:5b:17:ec:bc:28:e3:35:1d:e3: 41:27:ff:6e:a3:e4:fd:1e:f3:e0:6a:fd:be:1a:e5:12:7e:44: 92:fa:c1:f3 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgIDAbDIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjI0MTMwMjMxWhcNMjYwMTMxMTMwMjMxWjAYMRYw FAYDVQQDEw02OTRiZTQ2ZC0yMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA20FzXORnLkfdei9LCmdrTGXsGYhTaom9rZzjnLlkSobgsy/Nogo62zQA nXfFrl87DNg5Mlky+PyygNyBArHSMX39AbcP/ZpMKqGC/zSORxS0eXp82zlCcil1 kjXRamkCCf3BUhNUI87tMTA0f4Sqtjl+RmKguUZtOlP0MJeD/FvklKPnt1UGMXuu VYi9mqWD2vEU+1g04ew8QxucBxAQvej2GiiGYQSoA1afx1PgSjy5QSG98kamA3EJ 5Zd+TGfWuFvqtfxMGe9nqKvfFnZLs2SV3zK37Fbic2TceD/H8WTRVrg9XYSDpCw+ 1BvTpqcaxY0I7KZV73w/N76Qxg8fKQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFB7o aMv84kzhaisRhMr59dboxS4sMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9EMUJEOEFBRUUwQzgxMUYwODdDRTI0QzJEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBASawnADBACawnQwDAME A5rDGAMEAJrDHDANBgkqhkiG9w0BAQsFAAOCAQEAyQ2GEUjMP6/SbU5CD+jLJiSD AQEm2vKTFDaU9+mOikT0eWkD2HcDW3v2/umaO5VOLthBdVgLTU2VNE6Qkezji1qT sRpwpPGwK5o6A8E0dxH3RVaGzJQSroQO0ZDDl1nII8gzDDjMdQWAShHKLwQ5Vr7E cdhNwIeaosb5Z45GeJ+YAR1/r3XzpKIIQG4hNfCC6qMz3Ix/DBhLshYeMa1JEHmL 8RrMMKa5d0nEGA14thQ1DvVj6EFixtCDgm4LJgosOoqp0A07fPbq5XWe3P9S/NTG rK9Om/FCe248JJsngU6pWxfsvCjjNR3jQSf/bqPk/R7z4Gr9vhrlEn5EkvrB8w== -----END CERTIFICATE-----Generated at Sat Dec 27 16:47:07 2025 by rpki-client