This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9FCD404CEB211F0BFCDE5CEDAE4EC9C.roa File: D9FCD404CEB211F0BFCDE5CEDAE4EC9C.roa (raw, json) Hash identifier: wjmIxlutZkugDcDJExNxfZGsz8oABtMPql6N0/6Knrw= Subject key identifier: 1B:95:96:1E:EC:13:E2:05:DA:17:94:D4:63:BA:39:33:E1:C4:2D:55 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AB3A Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9FCD404CEB211F0BFCDE5CEDAE4EC9C.roa Signing time: Mon 01 Dec 2025 12:40:01 +0000 ROA not before: Mon 01 Dec 2025 12:39:54 +0000 ROA not after: Wed 31 Dec 2025 12:39:54 +0000 asID: 62240 IP address blocks: 154.194.80.0/24 maxlen: 24 154.194.81.0/24 maxlen: 24 154.194.83.0/24 maxlen: 24 154.194.84.0/24 maxlen: 24 154.194.85.0/24 maxlen: 24 154.194.118.0/24 maxlen: 24 154.195.121.0/24 maxlen: 24 154.195.122.0/24 maxlen: 24 154.195.123.0/24 maxlen: 24 154.195.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109370 (0x1ab3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 1 12:39:54 2025 GMT Not After : Dec 31 12:39:54 2025 GMT Subject: CN=692d8ca1-3635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:7e:d8:01:1b:c1:9a:56:3a:94:7b:0f:28: 3a:7d:68:d4:27:07:23:e8:51:14:33:ca:18:6d:f6: 9f:d0:44:dd:64:32:89:04:12:71:7c:61:0e:e5:fd: c1:3e:85:1a:c7:47:3a:16:01:56:3f:dc:12:7f:d5: 62:7d:1c:28:61:6d:b7:11:00:6b:8a:73:07:4e:9c: e4:96:b1:52:2b:4c:08:40:a8:25:09:bd:0e:06:72: b1:5a:84:27:c6:53:e5:f6:fb:aa:d9:60:de:b2:fd: fb:54:4a:7d:d0:0d:24:a4:65:24:5c:c6:22:d2:d3: 44:77:0b:8b:60:96:76:3e:12:39:71:e9:a0:42:11: 34:44:1e:ea:01:f1:7d:a5:df:3a:6c:b8:f9:a0:aa: ca:73:1a:fb:97:97:48:8c:95:0a:e3:7e:4a:05:c0: 90:46:3d:fb:df:00:56:d4:d9:ed:e3:db:f0:00:66: 5c:51:2e:c4:47:9f:7f:fb:70:9c:72:97:d3:4a:a9: 05:50:be:c9:df:cf:26:4a:f3:38:7b:4f:3f:b1:f0: be:57:f5:53:36:0b:c3:f9:07:d2:dd:7f:70:36:19: 52:3d:c1:a7:19:ec:35:f9:1c:c4:ab:92:1b:31:fd: f2:a8:76:33:f8:1a:a4:26:a8:f9:15:ed:79:27:7f: db:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:95:96:1E:EC:13:E2:05:DA:17:94:D4:63:BA:39:33:E1:C4:2D:55 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9FCD404CEB211F0BFCDE5CEDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.194.80.0/23 154.194.83.0-154.194.85.255 154.194.118.0/24 154.195.121.0-154.195.123.255 154.195.125.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:07:1b:86:5a:b9:42:50:74:83:fd:da:a8:2c:17:80:5a:9f: c7:25:d9:8f:5a:19:e4:3b:f6:0f:1e:db:9e:a8:7b:e3:bd:42: 31:38:96:ea:fe:ed:ea:2e:5b:50:12:fa:4a:e7:72:4e:97:c0: 2a:b2:9b:64:a0:4f:cb:a1:aa:db:99:f0:85:86:84:a0:6a:d2: e5:b1:c4:56:3f:2c:05:56:07:98:79:3c:44:02:52:84:e7:98: 1d:21:5e:83:a2:90:55:2f:2b:56:dd:4c:73:09:6f:85:1c:c3: 4d:d8:74:77:87:52:bf:16:89:11:a5:6a:f7:a3:7c:23:71:26: 46:2b:87:ed:05:5d:8c:d3:16:01:55:c1:c8:37:3b:ad:40:cf: 2d:dd:0c:68:50:aa:fe:f3:7a:05:fa:70:fa:02:13:f8:a4:ea: 28:39:81:69:dc:9b:e5:ce:57:b2:90:0b:dc:d7:47:c2:f2:f3: 54:d7:9a:d3:04:45:4a:1d:b5:2d:2b:ac:0e:6b:bb:6f:09:a9: e8:5e:a0:b6:4a:85:00:a4:25:c3:6d:95:ee:e8:6c:ba:1d:14: 1b:ca:d8:bb:c5:42:12:b6:7f:12:16:08:86:93:14:f3:5e:29: 54:7a:94:b9:2c:db:57:78:a8:9d:2b:ad:aa:e8:07:35:4c:18: f7:72:c3:5d -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgIDAas6MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAxMTIzOTU0WhcNMjUxMjMxMTIzOTU0WjAYMRYw FAYDVQQDEw02OTJkOGNhMS0zNjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAt9R+2AEbwZpWOpR7Dyg6fWjUJwcj6FEUM8oYbfaf0ETdZDKJBBJxfGEO 5f3BPoUax0c6FgFWP9wSf9VifRwoYW23EQBrinMHTpzklrFSK0wIQKglCb0OBnKx WoQnxlPl9vuq2WDesv37VEp90A0kpGUkXMYi0tNEdwuLYJZ2PhI5cemgQhE0RB7q AfF9pd86bLj5oKrKcxr7l5dIjJUK435KBcCQRj373wBW1Nnt49vwAGZcUS7ER59/ +3CccpfTSqkFUL7J388mSvM4e08/sfC+V/VTNgvD+QfS3X9wNhlSPcGnGew1+RzE q5IbMf3yqHYz+BqkJqj5Fe15J3/beQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFBuV lh7sE+IF2heU1GO6OTPhxC1VMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9EOUZDRDQwNENFQjIxMUYwQkZDREU1Q0VEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQBmsJQMAwDBACawlMDBAGa wlQDBACawnYwDAMEAJrDeQMEAprDeAMEAJrDfTANBgkqhkiG9w0BAQsFAAOCAQEA LAcbhlq5QlB0g/3aqCwXgFqfxyXZj1oZ5Dv2Dx7bnqh7471CMTiW6v7t6i5bUBL6 SudyTpfAKrKbZKBPy6Gq25nwhYaEoGrS5bHEVj8sBVYHmHk8RAJShOeYHSFeg6KQ VS8rVt1McwlvhRzDTdh0d4dSvxaJEaVq96N8I3EmRiuH7QVdjNMWAVXByDc7rUDP Ld0MaFCq/vN6Bfpw+gIT+KTqKDmBadyb5c5XspAL3NdHwvLzVNea0wRFSh21LSus Dmu7bwmp6F6gtkqFAKQlw22V7uhsuh0UG8rYu8VCErZ/EhYIhpMU814pVHqUuSzb V3ionSutqugHNUwY93LDXQ== -----END CERTIFICATE-----Generated at Wed Dec 3 11:07:13 2025 by rpki-client