This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA20B4EEC6C111F0A2C368E8DAE4EC9C.roa File: DA20B4EEC6C111F0A2C368E8DAE4EC9C.roa (raw, json) Hash identifier: gYHVW1FpqJqJY8nKk9lE/c0UeABS6K0EwXk+2CB6eIo= Subject key identifier: 8A:B3:BC:7C:ED:40:36:F2:CC:B1:E2:51:C9:93:7C:02:B7:AD:26:65 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AA10 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA20B4EEC6C111F0A2C368E8DAE4EC9C.roa Signing time: Fri 21 Nov 2025 10:07:14 +0000 ROA not before: Fri 21 Nov 2025 10:07:06 +0000 ROA not after: Wed 02 Dec 2026 10:07:06 +0000 asID: 272816 IP address blocks: 154.85.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109072 (0x1aa10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 21 10:07:06 2025 GMT Not After : Dec 2 10:07:06 2026 GMT Subject: CN=692039d2-c269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cf:33:51:f5:27:85:4f:44:68:16:8d:61:73: 43:de:c9:fd:45:5e:71:29:c4:2e:9d:39:ba:43:87: e9:40:e9:0d:a1:47:87:47:73:ca:22:c9:c1:94:b9: 18:37:e0:48:0e:62:9f:8a:a1:54:27:07:6d:65:ba: 6f:5f:50:d2:46:aa:37:e3:36:68:54:47:52:56:73: 78:77:c8:ad:35:c7:f8:62:cc:c1:01:bb:63:95:33: 42:95:0e:bc:69:66:01:c1:e5:73:4f:25:12:d1:e1: 94:13:b8:fa:59:da:ca:85:da:b8:c1:0e:8e:fd:36: 22:49:7e:c7:ad:2c:9b:d8:94:b4:c0:a1:04:45:74: 5f:06:20:4d:4f:a9:7a:34:8e:a6:d1:75:90:7e:65: c9:ec:38:0f:6f:cc:22:c6:9b:09:6b:b6:90:6e:69: 12:d2:cc:7a:96:60:17:bd:58:2b:35:3c:fd:43:80: 11:f2:3e:ac:59:71:93:37:d5:e6:0c:20:03:ef:f0: 5a:05:7f:a8:bd:cb:54:11:2b:ea:97:d2:96:9e:d4: 59:a4:d8:b0:0b:dd:36:f7:e6:fe:18:ac:c9:25:58: 89:8f:d6:bf:43:d1:60:d8:3d:61:96:86:ce:66:57: ca:83:d9:3e:25:42:81:e9:9f:b2:07:6d:2d:a1:5d: 36:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B3:BC:7C:ED:40:36:F2:CC:B1:E2:51:C9:93:7C:02:B7:AD:26:65 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA20B4EEC6C111F0A2C368E8DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.85.2.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:10:7a:da:a8:61:a3:03:1c:5c:b2:0c:0f:b3:1c:4e:de:0a: 13:91:2b:37:35:67:2b:8b:26:e8:2b:11:95:3f:a3:63:e8:80: 0e:22:ff:8c:c2:3d:f8:ac:35:1f:b0:00:fa:78:aa:fc:9d:45: 49:28:0f:f0:90:54:70:7e:51:c4:5f:ae:15:f4:34:62:6d:98: 11:5c:10:88:eb:f6:75:8a:8c:15:35:8b:98:13:05:3a:68:3d: 1e:8d:72:59:dd:e0:05:7b:4e:00:5d:63:f1:ea:a0:5e:21:3d: 58:82:da:d4:82:bf:1c:2d:37:23:a7:cd:2b:63:4b:dc:ea:e8: 38:b9:c0:76:22:53:71:7b:2f:49:8a:8e:0f:64:d1:02:87:07: 5c:40:4e:58:cc:31:22:04:d7:1b:f0:f2:50:ab:9d:33:37:60: c2:39:47:b1:c6:f5:c5:4f:14:10:ce:ac:a4:3e:4d:49:ef:60: 73:ef:ab:ed:b5:cd:62:07:ac:a5:29:c3:89:85:4b:76:8d:93: 15:3a:07:c7:1d:38:88:a2:95:d0:5e:44:4a:1d:dd:8e:66:f5: f2:ac:42:c9:65:55:6c:28:3a:f6:93:0f:17:94:02:86:7e:a6: 47:c2:10:28:08:a6:bf:39:41:42:6c:b7:f4:3b:70:5f:8e:fc: 62:d4:d5:c3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAaoQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTIxMTAwNzA2WhcNMjYxMjAyMTAwNzA2WjAYMRYw FAYDVQQDEw02OTIwMzlkMi1jMjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA2c8zUfUnhU9EaBaNYXND3sn9RV5xKcQunTm6Q4fpQOkNoUeHR3PKIsnB lLkYN+BIDmKfiqFUJwdtZbpvX1DSRqo34zZoVEdSVnN4d8itNcf4YszBAbtjlTNC lQ68aWYBweVzTyUS0eGUE7j6WdrKhdq4wQ6O/TYiSX7HrSyb2JS0wKEERXRfBiBN T6l6NI6m0XWQfmXJ7DgPb8wixpsJa7aQbmkS0sx6lmAXvVgrNTz9Q4AR8j6sWXGT N9XmDCAD7/BaBX+ovctUESvql9KWntRZpNiwC9029+b+GKzJJViJj9a/Q9Fg2D1h lobOZlfKg9k+JUKB6Z+yB20toV02wwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIqz vHztQDbyzLHiUcmTfAK3rSZlMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9EQTIwQjRFRUM2QzExMUYwQTJDMzY4RThEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlUCMA0GCSqGSIb3DQEB CwUAA4IBAQCMEHraqGGjAxxcsgwPsxxO3goTkSs3NWcriyboKxGVP6Nj6IAOIv+M wj34rDUfsAD6eKr8nUVJKA/wkFRwflHEX64V9DRibZgRXBCI6/Z1iowVNYuYEwU6 aD0ejXJZ3eAFe04AXWPx6qBeIT1YgtrUgr8cLTcjp80rY0vc6ug4ucB2IlNxey9J io4PZNEChwdcQE5YzDEiBNcb8PJQq50zN2DCOUexxvXFTxQQzqykPk1J72Bz76vt tc1iB6ylKcOJhUt2jZMVOgfHHTiIopXQXkRKHd2OZvXyrELJZVVsKDr2kw8XlAKG fqZHwhAoCKa/OUFCbLf0O3Bfjvxi1NXD -----END CERTIFICATE-----Generated at Wed Dec 3 10:26:05 2025 by rpki-client