This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D29AA2E4CF5311F0A04D25C7DAE4EC9C.roa File: D29AA2E4CF5311F0A04D25C7DAE4EC9C.roa (raw, json) Hash identifier: 3n/3X4vc4mN5owBJQ4gAIrK5Ha8kNhqFFS4xUzaFmLY= Subject key identifier: E0:EE:83:C7:59:EC:EE:C4:8A:FD:3D:A3:FD:ED:00:78:1D:06:2F:88 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AB6F Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D29AA2E4CF5311F0A04D25C7DAE4EC9C.roa Signing time: Tue 02 Dec 2025 07:52:17 +0000 ROA not before: Tue 02 Dec 2025 07:52:09 +0000 ROA not after: Wed 31 Dec 2025 07:52:09 +0000 asID: 62240 IP address blocks: 154.195.108.0/24 maxlen: 24 154.195.111.0/24 maxlen: 24 154.195.112.0/24 maxlen: 24 154.195.120.0/24 maxlen: 24 154.195.124.0/24 maxlen: 24 154.195.136.0/24 maxlen: 24 154.195.137.0/24 maxlen: 24 154.195.138.0/24 maxlen: 24 154.195.140.0/24 maxlen: 24 154.196.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109423 (0x1ab6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 07:52:09 2025 GMT Not After : Dec 31 07:52:09 2025 GMT Subject: CN=692e9ab1-6579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:71:33:c7:19:53:4a:8c:9d:e1:29:14:46: c0:c3:34:8a:f2:34:38:9f:3b:43:ae:e0:de:84:1a: de:c7:24:82:f9:c4:b6:9d:a9:ac:fd:1c:cd:4f:38: 7d:e5:58:90:1b:c4:fa:31:a9:dc:0f:04:c6:71:b0: 95:41:41:7b:8c:b3:f5:9f:84:35:e3:31:03:a9:6c: df:9e:16:ae:45:1e:a6:2a:c4:13:95:1b:cf:33:e5: 98:0d:11:30:09:e3:4a:7f:33:04:d5:2c:a4:e7:c0: 4d:ba:b1:ca:1f:b3:4f:98:3f:8a:ab:7d:9c:7a:98: d3:6b:2d:42:a6:aa:72:f1:9b:ec:74:5a:76:d3:96: e1:ce:c5:79:a7:64:01:a8:e7:d4:4a:5b:41:ad:6b: 47:ba:81:56:41:3d:9c:f3:cb:36:74:cd:4f:b9:3e: cf:7c:a2:ae:73:0b:a1:2c:05:d9:cd:c5:a3:cc:1a: 0a:ce:81:04:39:d0:ce:6a:c2:13:97:7d:62:ba:e0: 78:d9:3a:d5:31:b5:2e:d5:93:ae:ea:49:2f:80:70: ec:59:1b:52:81:9f:a2:70:00:7d:b2:bc:39:fa:7c: 14:9b:66:e3:f5:e8:03:9f:47:1f:93:5a:8d:d1:2c: f5:73:eb:2e:ec:d9:d9:e6:97:3d:3f:d5:73:af:a2: 3b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EE:83:C7:59:EC:EE:C4:8A:FD:3D:A3:FD:ED:00:78:1D:06:2F:88 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D29AA2E4CF5311F0A04D25C7DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.195.108.0/24 154.195.111.0-154.195.112.255 154.195.120.0/24 154.195.124.0/24 154.195.136.0-154.195.138.255 154.195.140.0/24 154.196.30.0/24 Signature Algorithm: sha256WithRSAEncryption 20:fb:bd:40:d2:51:cf:c3:82:4b:55:5f:5f:1b:32:a5:98:9d: b9:d7:78:0e:87:0c:76:5a:0e:64:16:d3:26:83:ff:21:58:12: 79:60:ec:2c:98:f0:78:cb:c9:16:f0:9a:e5:85:c5:b8:85:7c: 08:a3:77:e2:c9:83:15:bf:23:78:47:e3:68:1d:43:5e:cc:dd: 88:cd:62:a0:0d:2b:f3:16:d4:68:66:f0:50:9b:78:6f:d6:8f: 4c:97:e6:65:be:a0:cb:cf:64:8e:cd:0a:d8:95:d8:53:1c:35: d1:9e:1d:b2:db:43:5a:31:85:4d:c9:b5:ef:01:0d:ea:e8:2f: 0e:2a:f6:55:35:72:a1:54:b2:d4:44:99:c2:56:d3:a6:3d:f6: 14:8e:37:5a:ce:55:2c:d4:a8:5e:e0:f4:57:c4:c1:f0:7a:ca: 3e:08:34:c2:34:94:9e:28:cf:51:11:81:5a:03:32:0c:73:eb: 17:21:04:43:c0:96:82:1c:dd:90:2b:70:0f:6c:a7:d2:ff:a7: 4c:19:e4:ec:35:cf:95:98:4e:7f:fb:48:8a:b3:e5:32:7f:1c: bd:15:c3:be:b0:69:32:e9:d3:b2:b0:d6:dd:ec:21:d4:56:63: 95:44:2a:b2:2a:75:7d:05:34:cd:1f:a5:e7:8b:01:0a:4a:b1: e9:63:7b:c7 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgIDAatvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMDc1MjA5WhcNMjUxMjMxMDc1MjA5WjAYMRYw FAYDVQQDEw02OTJlOWFiMS02NTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEArzZxM8cZU0qMneEpFEbAwzSK8jQ4nztDruDehBrexySC+cS2nams/RzN Tzh95ViQG8T6MancDwTGcbCVQUF7jLP1n4Q14zEDqWzfnhauRR6mKsQTlRvPM+WY DREwCeNKfzME1Syk58BNurHKH7NPmD+Kq32cepjTay1Cpqpy8ZvsdFp205bhzsV5 p2QBqOfUSltBrWtHuoFWQT2c88s2dM1PuT7PfKKucwuhLAXZzcWjzBoKzoEEOdDO asITl31iuuB42TrVMbUu1ZOu6kkvgHDsWRtSgZ+icAB9srw5+nwUm2bj9egDn0cf k1qN0Sz1c+su7NnZ5pc9P9Vzr6I7jwIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFODu g8dZ7O7Eiv09o/3tAHgdBi+IMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9EMjlBQTJFNENGNTMxMUYwQTA0RDI1QzdEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQAmsNsMAwDBACaw28DBACa w3ADBACaw3gDBACaw3wwDAMEA5rDiAMEAJrDigMEAJrDjAMEAJrEHjANBgkqhkiG 9w0BAQsFAAOCAQEAIPu9QNJRz8OCS1VfXxsypZidudd4DocMdloOZBbTJoP/IVgS eWDsLJjweMvJFvCa5YXFuIV8CKN34smDFb8jeEfjaB1DXszdiM1ioA0r8xbUaGbw UJt4b9aPTJfmZb6gy89kjs0K2JXYUxw10Z4dsttDWjGFTcm17wEN6ugvDir2VTVy oVSy1ESZwlbTpj32FI43Ws5VLNSoXuD0V8TB8HrKPgg0wjSUnijPURGBWgMyDHPr FyEEQ8CWghzdkCtwD2yn0v+nTBnk7DXPlZhOf/tIirPlMn8cvRXDvrBpMunTsrDW 3ewh1FZjlUQqsip1fQU0zR+l54sBCkqx6WN7xw== -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:16 2025 by rpki-client