This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D433EA00E00D11F09017E4A7DAE4EC9C.roa File: D433EA00E00D11F09017E4A7DAE4EC9C.roa (raw, json) Hash identifier: +DyTft7XrEinA+AIlZcHJNqtjxCtLm+ylc6fbehxoVQ= Subject key identifier: 6A:1E:A8:9A:44:DE:5B:C3:F1:2A:5C:8D:B4:F9:52:E6:E1:B0:FB:CB Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B051 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D433EA00E00D11F09017E4A7DAE4EC9C.roa Signing time: Tue 23 Dec 2025 14:44:05 +0000 ROA not before: Tue 23 Dec 2025 14:44:00 +0000 ROA not after: Tue 27 Jan 2026 14:44:00 +0000 asID: 3257 IP address blocks: 154.206.240.0/21 maxlen: 24 154.206.248.0/21 maxlen: 24 154.208.64.0/21 maxlen: 24 154.208.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 04 Jan 2026 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110673 (0x1b051) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 23 14:44:00 2025 GMT Not After : Jan 27 14:44:00 2026 GMT Subject: CN=694aaab5-1700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:5b:51:08:be:f9:68:e5:32:88:50:5a:17:5c: b4:d7:46:ef:11:55:48:aa:a8:58:27:2c:e7:95:18: 2f:6e:39:a1:d6:85:8e:84:29:0a:23:ed:a6:9b:fc: 6e:09:65:46:26:c2:3b:ad:a7:67:9b:34:7e:94:9a: c2:8a:56:0e:17:06:4e:4d:b4:51:39:23:e8:98:64: c9:d7:bb:92:98:d8:b1:1b:65:71:a2:58:b8:c0:e6: 0b:dc:05:f5:fe:fb:13:8c:92:d6:f3:ed:46:5a:78: 6f:f8:4f:c0:ea:c0:79:68:08:7d:66:c3:07:9c:c1: fd:a3:45:cc:ef:2f:d8:5d:4b:f3:6d:09:ee:1f:d5: 6c:19:d0:c4:d4:ca:7a:9f:87:7e:e1:20:1d:87:af: a1:8c:bd:35:59:86:8e:be:b0:55:30:27:9c:02:86: d2:75:ac:24:b4:f8:2f:3a:7d:07:47:f7:91:87:8a: 7e:7a:17:6d:01:a4:fc:7e:0d:c3:09:e5:64:c1:a6: b3:97:97:2b:7a:5c:a5:b4:ee:63:7e:10:dc:46:45: 33:14:5a:a2:30:27:a2:ca:96:23:cc:ff:13:d3:7d: 97:15:ce:69:31:6d:55:4a:a5:35:64:99:df:b6:df: 1c:3d:94:55:08:11:fb:a7:9f:ad:db:1a:16:63:0e: 07:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:1E:A8:9A:44:DE:5B:C3:F1:2A:5C:8D:B4:F9:52:E6:E1:B0:FB:CB X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D433EA00E00D11F09017E4A7DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.206.240.0/20 154.208.64.0/21 154.208.112.0/21 Signature Algorithm: sha256WithRSAEncryption 4a:3f:de:b3:14:a4:67:1a:22:de:c9:16:bc:56:a3:c8:4e:e3: aa:64:9a:c4:2a:6c:1a:d7:d3:f1:16:89:b7:02:0b:ae:ef:9e: 11:e3:05:a3:cc:19:da:45:7e:b6:69:90:48:23:53:8e:b9:75: 15:d9:e0:09:d3:44:d5:4d:6b:41:ea:a2:cd:d7:70:0a:63:a8: 95:cd:17:44:25:9f:89:47:37:2f:6f:9e:e6:d5:0c:56:ae:b3: 7a:cb:89:2b:3d:85:c5:4e:32:62:45:e5:77:e9:e7:05:2b:2d: ed:6d:b8:e2:cb:98:d1:67:18:13:b6:db:ea:bf:f9:d2:5b:b0: 65:c3:69:86:fa:05:ae:0a:0c:99:41:c9:a4:03:d0:f8:91:42: 3d:11:df:8c:82:32:cc:26:ce:dd:ef:51:3c:8d:49:87:a2:88: 73:15:b8:9e:66:34:b9:63:fc:c9:a6:b9:e9:ca:67:0f:06:e2: 72:85:53:18:1b:ad:dc:9a:32:03:2c:68:f0:2a:12:0e:ad:d8: 90:79:61:20:5b:be:0b:cd:12:e8:e9:57:62:cc:be:1e:42:cc: f5:27:38:72:23:de:61:3d:90:f1:27:b1:22:39:2e:8c:1a:ef: f1:a4:90:b1:85:a6:01:f3:35:67:b6:de:94:1c:50:bd:8e:0e: ea:9e:3f:90 -----BEGIN CERTIFICATE----- MIIFkDCCBHigAwIBAgIDAbBRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjIzMTQ0NDAwWhcNMjYwMTI3MTQ0NDAwWjAYMRYw FAYDVQQDEw02OTRhYWFiNS0xNzAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA/FtRCL75aOUyiFBaF1y010bvEVVIqqhYJyznlRgvbjmh1oWOhCkKI+2m m/xuCWVGJsI7radnmzR+lJrCilYOFwZOTbRROSPomGTJ17uSmNixG2Vxoli4wOYL 3AX1/vsTjJLW8+1GWnhv+E/A6sB5aAh9ZsMHnMH9o0XM7y/YXUvzbQnuH9VsGdDE 1Mp6n4d+4SAdh6+hjL01WYaOvrBVMCecAobSdawktPgvOn0HR/eRh4p+ehdtAaT8 fg3DCeVkwaazl5crelyltO5jfhDcRkUzFFqiMCeiypYjzP8T032XFc5pMW1VSqU1 ZJnftt8cPZRVCBH7p5+t2xoWYw4H3QIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFGoe qJpE3lvD8SpcjbT5UubhsPvLMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9ENDMzRUEwMEUwMEQxMUYwOTAxN0U0QTdEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEms7wAwQDmtBAAwQDmtBw MA0GCSqGSIb3DQEBCwUAA4IBAQBKP96zFKRnGiLeyRa8VqPITuOqZJrEKmwa19Px Fom3Aguu754R4wWjzBnaRX62aZBII1OOuXUV2eAJ00TVTWtB6qLN13AKY6iVzRdE JZ+JRzcvb57m1QxWrrN6y4krPYXFTjJiReV36ecFKy3tbbjiy5jRZxgTttvqv/nS W7Blw2mG+gWuCgyZQcmkA9D4kUI9Ed+MgjLMJs7d71E8jUmHoohzFbieZjS5Y/zJ prnpymcPBuJyhVMYG63cmjIDLGjwKhIOrdiQeWEgW74LzRLo6VdizL4eQsz1Jzhy I95hPZDxJ7EiOS6MGu/xpJCxhaYB8zVntt6UHFC9jg7qnj+Q -----END CERTIFICATE-----Generated at Fri Jan 2 16:27:19 2026 by rpki-client