This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8AAC3F4BEFE11F0A0C1EEF4DAE4EC9C.roa File: D8AAC3F4BEFE11F0A0C1EEF4DAE4EC9C.roa (raw, json) Hash identifier: YSlD3lxcwpmv5RcVIVBlWJnE/li76Tsk1oAB+ANx17o= Subject key identifier: 3D:2A:71:E2:1F:95:FC:0C:BD:55:20:3E:F9:6F:19:2D:72:8B:D0:26 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A848 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8AAC3F4BEFE11F0A0C1EEF4DAE4EC9C.roa Signing time: Tue 11 Nov 2025 13:03:42 +0000 ROA not before: Tue 11 Nov 2025 13:03:37 +0000 ROA not after: Mon 08 Dec 2025 13:03:37 +0000 asID: 14315 IP address blocks: 154.196.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108616 (0x1a848) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 11 13:03:37 2025 GMT Not After : Dec 8 13:03:37 2025 GMT Subject: CN=6913342e-853c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:cf:bf:ed:db:bd:9b:14:89:7b:e7:20:15:c9: 37:b1:85:cf:31:9c:cc:ce:07:e5:d2:8e:05:d7:14: 84:6a:b1:46:55:5e:c0:f1:3c:b5:12:b6:d7:0f:c9: fa:54:01:e7:f6:57:1c:32:2f:ec:a2:81:e6:49:c6: 57:35:69:aa:5c:47:a8:72:76:80:4b:21:04:8e:63: df:44:0a:a3:b7:69:1f:1e:0b:ea:07:d5:aa:58:a3: 2f:12:a4:29:06:b6:a3:50:50:37:db:87:04:53:9a: ef:07:98:3e:40:91:66:15:7b:ee:2d:b7:e3:83:72: f1:7b:5f:3d:9e:d6:23:d1:27:74:da:b6:0e:19:89: 36:53:ec:06:53:7f:c4:93:62:20:69:8a:23:aa:30: e1:03:89:dc:0d:78:d4:57:f5:1c:6f:c7:51:19:2c: bc:28:88:f8:a6:8c:95:13:a8:0c:12:3c:95:b8:17: 76:07:f2:83:3e:51:77:f4:92:ec:d2:0f:a1:fb:d5: 3d:d9:f8:53:76:02:e0:cd:0f:13:f4:f8:3e:11:99: 1b:88:56:2c:22:2f:2a:35:41:88:b8:72:fd:14:00: 3c:22:d9:10:f1:9a:e2:2b:e3:6d:c3:b6:fe:9b:22: 15:89:0d:d9:cb:66:53:c5:85:44:ed:67:1a:67:41: 8f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2A:71:E2:1F:95:FC:0C:BD:55:20:3E:F9:6F:19:2D:72:8B:D0:26 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8AAC3F4BEFE11F0A0C1EEF4DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.196.8.0/22 Signature Algorithm: sha256WithRSAEncryption b3:3a:26:ee:63:6a:b5:47:50:cb:cb:99:5b:bc:11:49:63:14: fa:56:d0:c9:21:ad:c0:c6:28:14:47:50:d0:ad:d6:3c:10:ae: c6:07:e5:1d:42:9b:e0:26:e1:52:85:c3:fe:20:4a:1d:4c:31: fd:ba:b5:2c:c4:1c:7d:fc:29:a3:4d:99:b8:3c:ac:d6:7c:9b: 03:b4:45:b8:5c:78:01:7a:57:ea:e3:4e:24:98:b3:8f:bf:23: 9d:29:69:75:81:de:d0:cf:0c:33:5a:7c:40:d9:9c:a9:d1:b2: 52:85:ad:b1:2e:ac:83:e9:d8:26:7a:1e:68:e2:d3:08:8c:fc: b7:06:3e:9f:51:3a:14:b9:fe:0c:ef:1c:06:21:9e:27:35:36: 9f:34:0f:ad:bf:3c:52:5d:b1:59:83:3c:76:2b:7e:ef:03:8e: 1f:16:e1:58:f0:db:3a:56:4d:30:e2:d5:62:12:28:28:fc:7a: f2:1f:a1:98:79:7b:01:a2:30:13:5e:5d:b7:1a:17:b2:6b:cc: a3:fa:8d:b1:d2:1e:b2:fc:33:9a:68:ac:7e:1a:bd:1f:bc:2f: 9d:d9:d2:e0:51:2c:ae:55:5b:43:8c:b7:1a:a6:33:9b:b1:dc: 72:4d:cc:bd:42:85:a5:ee:45:9c:ed:69:ef:c4:fe:a1:91:11: 71:3a:56:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAahIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTExMTMwMzM3WhcNMjUxMjA4MTMwMzM3WjAYMRYw FAYDVQQDEw02OTEzMzQyZS04NTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA08+/7du9mxSJe+cgFck3sYXPMZzMzgfl0o4F1xSEarFGVV7A8Ty1ErbX D8n6VAHn9lccMi/sooHmScZXNWmqXEeocnaASyEEjmPfRAqjt2kfHgvqB9WqWKMv EqQpBrajUFA324cEU5rvB5g+QJFmFXvuLbfjg3Lxe189ntYj0Sd02rYOGYk2U+wG U3/Ek2IgaYojqjDhA4ncDXjUV/Ucb8dRGSy8KIj4poyVE6gMEjyVuBd2B/KDPlF3 9JLs0g+h+9U92fhTdgLgzQ8T9Pg+EZkbiFYsIi8qNUGIuHL9FAA8ItkQ8ZriK+Nt w7b+myIViQ3Zy2ZTxYVE7WcaZ0GPWwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFD0q ceIflfwMvVUgPvlvGS1yi9AmMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9EOEFBQzNGNEJFRkUxMUYwQTBDMUVFRjREQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmsQIMA0GCSqGSIb3DQEB CwUAA4IBAQCzOibuY2q1R1DLy5lbvBFJYxT6VtDJIa3AxigUR1DQrdY8EK7GB+Ud QpvgJuFShcP+IEodTDH9urUsxBx9/CmjTZm4PKzWfJsDtEW4XHgBelfq404kmLOP vyOdKWl1gd7QzwwzWnxA2Zyp0bJSha2xLqyD6dgmeh5o4tMIjPy3Bj6fUToUuf4M 7xwGIZ4nNTafNA+tvzxSXbFZgzx2K37vA44fFuFY8Ns6Vk0w4tViEigo/HryH6GY eXsBojATXl23Gheya8yj+o2x0h6y/DOaaKx+Gr0fvC+d2dLgUSyuVVtDjLcapjOb sdxyTcy9QoWl7kWc7WnvxP6hkRFxOlbR -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:58 2025 by rpki-client