This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9892F62C3BE11F08D765CF1DAE4EC9C.roa File: D9892F62C3BE11F08D765CF1DAE4EC9C.roa (raw, json) Hash identifier: 8ru8RUeD2nSw/cXdpk77zX3isKyCTsaVmFbKuQdZipw= Subject key identifier: 6B:90:00:82:9C:3E:4F:B1:C9:EF:27:A0:85:31:6B:B0:89:4D:21:7A Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A963 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9892F62C3BE11F08D765CF1DAE4EC9C.roa Signing time: Mon 17 Nov 2025 14:08:11 +0000 ROA not before: Mon 17 Nov 2025 14:08:06 +0000 ROA not after: Wed 24 Dec 2025 14:08:06 +0000 asID: 214432 IP address blocks: 154.89.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108899 (0x1a963) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 17 14:08:06 2025 GMT Not After : Dec 24 14:08:06 2025 GMT Subject: CN=691b2c4b-ae30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3a:bc:38:b3:6f:7f:1d:6b:d8:ed:21:ab:35: 39:28:0e:c8:de:fc:76:f1:24:fe:8c:ea:2b:64:ff: d2:09:76:9e:18:cb:11:ad:b4:37:c5:a9:69:48:af: a5:38:d5:fb:9a:23:a3:e1:2e:d7:de:58:d0:e7:88: fd:f8:26:86:0c:46:ec:dd:9a:26:12:18:8e:11:3f: 18:7e:41:39:e7:a4:e0:7c:83:b4:07:18:ce:44:81: 4c:70:f5:be:ec:8f:2c:c9:60:42:28:ef:5d:e6:3d: 92:55:37:22:11:31:f8:2b:41:42:b3:2c:53:55:29: ec:4a:e5:be:51:f9:4d:71:76:36:06:98:ff:fd:e5: 63:9c:b4:06:98:4b:ff:df:df:80:fd:48:82:44:7a: 96:94:e1:29:05:c5:b7:1c:3a:5a:83:45:37:ff:78: a3:de:14:37:eb:ae:3d:2a:d2:aa:c6:92:e5:1b:91: 4c:cd:09:35:31:87:64:e1:6a:a2:3a:9c:c9:45:a5: 76:5b:0e:d0:30:c9:53:1b:cd:cc:bc:e8:1b:b7:47: 61:f0:70:d7:95:76:16:60:a7:14:2a:79:59:80:31: c1:e6:29:5a:99:04:7a:2a:79:2b:da:5c:e3:b2:d0: be:e7:8f:ad:aa:3f:6c:35:35:ef:c7:df:64:1f:58: b6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:90:00:82:9C:3E:4F:B1:C9:EF:27:A0:85:31:6B:B0:89:4D:21:7A X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9892F62C3BE11F08D765CF1DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.89.194.0/24 Signature Algorithm: sha256WithRSAEncryption 44:71:0e:a8:91:1d:b9:ed:71:ea:d7:3d:31:6b:95:85:d7:02: ca:c9:0c:3e:49:87:8f:9e:5c:f0:fa:83:45:6a:12:fb:5a:fa: 92:db:a9:b9:d9:31:b6:f6:24:3b:39:91:54:f7:c9:d1:18:0a: 38:0e:56:3e:83:7c:e0:3d:7f:53:20:1b:09:62:08:25:53:f3: cf:d5:4f:c2:9a:b5:af:f1:32:74:ea:05:b3:03:29:97:40:4b: fc:1d:39:8a:6d:c0:d0:fb:d6:5e:77:c5:c4:c3:d5:6c:4c:c5: f4:db:02:ce:cd:24:03:ad:5f:66:61:94:d9:c6:ba:22:46:38: cb:4b:32:df:db:53:59:58:a9:53:32:c4:0b:a9:7b:8c:a3:0b: 56:6d:cb:10:59:3c:f8:e6:aa:ad:f5:b3:ea:2d:2f:ab:46:15: 5e:91:3a:dc:e2:55:71:83:fc:3f:34:fc:48:3f:56:c1:01:9b: d3:e7:bf:49:28:21:09:e2:15:75:9b:0f:0b:bf:99:9b:35:4d: 03:71:96:71:b4:25:36:0d:e5:70:94:a5:a2:b0:00:8a:01:f9: 45:31:91:f7:3e:8a:4e:c3:1f:16:64:b2:0b:e6:8f:50:fa:d4: 06:80:3b:58:a8:31:ae:cf:8a:d0:de:fc:c6:20:f0:a7:87:10: 9c:35:1f:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAaljMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTE3MTQwODA2WhcNMjUxMjI0MTQwODA2WjAYMRYw FAYDVQQDEw02OTFiMmM0Yi1hZTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAmTq8OLNvfx1r2O0hqzU5KA7I3vx28ST+jOorZP/SCXaeGMsRrbQ3xalp SK+lONX7miOj4S7X3ljQ54j9+CaGDEbs3ZomEhiOET8YfkE556TgfIO0BxjORIFM cPW+7I8syWBCKO9d5j2SVTciETH4K0FCsyxTVSnsSuW+UflNcXY2Bpj//eVjnLQG mEv/39+A/UiCRHqWlOEpBcW3HDpag0U3/3ij3hQ36649KtKqxpLlG5FMzQk1MYdk 4WqiOpzJRaV2Ww7QMMlTG83MvOgbt0dh8HDXlXYWYKcUKnlZgDHB5ilamQR6Knkr 2lzjstC+54+tqj9sNTXvx99kH1i2iQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGuQ AIKcPk+xye8noIUxa7CJTSF6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9EOTg5MkY2MkMzQkUxMUYwOEQ3NjVDRjFEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlnCMA0GCSqGSIb3DQEB CwUAA4IBAQBEcQ6okR257XHq1z0xa5WF1wLKyQw+SYePnlzw+oNFahL7WvqS26m5 2TG29iQ7OZFU98nRGAo4DlY+g3zgPX9TIBsJYgglU/PP1U/CmrWv8TJ06gWzAymX QEv8HTmKbcDQ+9Zed8XEw9VsTMX02wLOzSQDrV9mYZTZxroiRjjLSzLf21NZWKlT MsQLqXuMowtWbcsQWTz45qqt9bPqLS+rRhVekTrc4lVxg/w/NPxIP1bBAZvT579J KCEJ4hV1mw8Lv5mbNU0DcZZxtCU2DeVwlKWisACKAflFMZH3PopOwx8WZLIL5o9Q +tQGgDtYqDGuz4rQ3vzGIPCnhxCcNR9o -----END CERTIFICATE-----Generated at Wed Dec 3 11:06:36 2025 by rpki-client