This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBD99DE8C91711F0AD828D9FDAE4EC9C.roa File: DBD99DE8C91711F0AD828D9FDAE4EC9C.roa (raw, json) Hash identifier: kGdcQzV3XJckjRtdWbnGOg5swGw7gVspgft5tRAnICE= Subject key identifier: 22:9C:D9:CB:91:F0:00:B7:E1:A6:2D:3E:A7:3D:AE:A3:BB:75:53:F0 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AA45 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBD99DE8C91711F0AD828D9FDAE4EC9C.roa Signing time: Mon 24 Nov 2025 09:27:56 +0000 ROA not before: Mon 24 Nov 2025 09:27:51 +0000 ROA not after: Tue 30 Dec 2025 09:27:51 +0000 asID: 9304 IP address blocks: 154.193.35.0/24 maxlen: 24 154.196.179.0/24 maxlen: 24 154.196.180.0/24 maxlen: 24 154.200.43.0/24 maxlen: 24 154.203.241.0/24 maxlen: 24 154.203.242.0/24 maxlen: 24 154.208.76.0/22 maxlen: 24 154.208.84.0/22 maxlen: 24 154.212.144.0/23 maxlen: 24 154.212.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109125 (0x1aa45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 24 09:27:51 2025 GMT Not After : Dec 30 09:27:51 2025 GMT Subject: CN=6924251c-e71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a3:94:5d:a8:62:ca:84:81:f1:16:6e:4c:b3: 4e:db:40:ea:ae:d0:2d:da:30:07:5a:ed:7e:1f:76: c6:11:dc:33:c0:ef:b3:10:56:0e:e5:07:7a:5d:c4: 15:7e:ad:50:a9:77:4d:99:86:e7:53:e5:1c:ed:71: a0:d5:18:92:3e:fd:98:93:0c:59:f7:1e:71:a6:46: ff:49:e7:0b:90:e4:54:e1:89:72:32:9c:d0:8c:d5: 0f:d7:9e:15:50:bd:b5:5d:0c:99:f1:27:4c:87:d7: f2:15:8c:b5:f1:e1:f2:ba:0a:1b:d1:5f:a6:73:08: 13:4a:0b:15:ee:68:92:54:79:63:2d:fe:4e:0a:cf: d6:2c:97:62:54:b1:42:d0:f7:4d:05:b5:25:b3:e5: 28:0b:84:46:17:73:0d:92:77:82:16:07:db:fb:6f: ec:94:a6:a0:45:94:6c:69:3c:c6:fd:34:c4:38:58: a1:f9:3d:e8:1d:e7:67:2d:23:f7:10:17:80:4c:4b: a4:0c:b5:d4:e8:51:f3:0e:eb:a2:fc:f5:de:ca:2e: 06:2a:74:b5:87:6c:98:9c:06:51:07:24:f3:c7:bc: b1:58:41:00:69:d2:4f:59:86:3d:7d:d9:59:26:93: 90:a8:a7:ff:6f:b4:9e:bf:3e:c6:ab:ff:8b:0d:e0: 3f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9C:D9:CB:91:F0:00:B7:E1:A6:2D:3E:A7:3D:AE:A3:BB:75:53:F0 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DBD99DE8C91711F0AD828D9FDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.193.35.0/24 154.196.179.0-154.196.180.255 154.200.43.0/24 154.203.241.0-154.203.242.255 154.208.76.0/22 154.208.84.0/22 154.212.144.0/22 Signature Algorithm: sha256WithRSAEncryption b5:6b:d8:f1:ac:bd:58:64:70:a8:f7:e7:01:2d:28:f1:3f:5b: 0c:9e:35:f4:c4:63:aa:be:17:4e:a0:5b:ec:dd:7a:35:62:ee: 87:09:6c:05:b1:5b:5b:ca:20:15:28:3a:7f:fc:e1:6c:bf:38: 72:29:8b:45:5b:3c:7b:48:21:85:45:c0:f2:86:cd:19:e9:85: 62:06:ba:7f:1f:14:bd:4c:1d:32:90:12:48:6b:76:33:5e:fc: ec:f6:18:4e:32:1e:6c:85:2c:c0:f6:63:78:73:a9:76:91:b5: fe:43:c6:f0:23:29:02:0f:c2:a4:8a:45:5d:9c:78:b8:d7:db: e3:04:92:92:79:8f:c7:2f:02:95:ea:e7:37:d5:83:96:80:25: 9a:1a:aa:e1:6d:e7:69:27:c1:c2:45:2d:02:c9:cd:19:f4:48: 80:97:62:42:46:70:4e:c5:1e:3c:a1:d2:79:bd:4d:59:b6:dd: eb:27:fd:26:6f:70:9e:96:4c:ff:92:46:19:08:9d:a2:c0:8f: 9a:0d:b6:87:23:bd:73:67:04:a0:a9:df:3f:6b:88:99:7b:0c: fb:96:4b:cf:2c:b3:f6:ca:6b:67:0d:d7:6c:29:d8:4b:df:02: dd:19:ed:cc:ce:35:a8:70:28:22:c8:65:7b:90:38:9e:c2:c3: 6e:44:53:95 -----BEGIN CERTIFICATE----- MIIFuDCCBKCgAwIBAgIDAapFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTI0MDkyNzUxWhcNMjUxMjMwMDkyNzUxWjAYMRYw FAYDVQQDEw02OTI0MjUxYy1lNzFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA1qOUXahiyoSB8RZuTLNO20DqrtAt2jAHWu1+H3bGEdwzwO+zEFYO5Qd6 XcQVfq1QqXdNmYbnU+Uc7XGg1RiSPv2YkwxZ9x5xpkb/SecLkORU4YlyMpzQjNUP 154VUL21XQyZ8SdMh9fyFYy18eHyugob0V+mcwgTSgsV7miSVHljLf5OCs/WLJdi VLFC0PdNBbUls+UoC4RGF3MNkneCFgfb+2/slKagRZRsaTzG/TTEOFih+T3oHedn LSP3EBeATEukDLXU6FHzDuui/PXeyi4GKnS1h2yYnAZRByTzx7yxWEEAadJPWYY9 fdlZJpOQqKf/b7Sevz7Gq/+LDeA/ywIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFCKc 2cuR8AC34aYtPqc9rqO7dVPwMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9EQkQ5OURFOEM5MTcxMUYwQUQ4MjhEOUZEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMFMGCCsGAQUFBwEHAQH/BEQwQjBABAIAATA6AwQAmsEjMAwDBACaxLMDBACa xLQDBACayCswDAMEAJrL8QMEAJrL8gMEAprQTAMEAprQVAMEAprUkDANBgkqhkiG 9w0BAQsFAAOCAQEAtWvY8ay9WGRwqPfnAS0o8T9bDJ419MRjqr4XTqBb7N16NWLu hwlsBbFbW8ogFSg6f/zhbL84cimLRVs8e0ghhUXA8obNGemFYga6fx8UvUwdMpAS SGt2M1787PYYTjIebIUswPZjeHOpdpG1/kPG8CMpAg/CpIpFXZx4uNfb4wSSknmP xy8ClernN9WDloAlmhqq4W3naSfBwkUtAsnNGfRIgJdiQkZwTsUePKHSeb1NWbbd 6yf9Jm9wnpZM/5JGGQidosCPmg22hyO9c2cEoKnfP2uImXsM+5ZLzyyz9sprZw3X bCnYS98C3RntzM41qHAoIshle5A4nsLDbkRTlQ== -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:25 2025 by rpki-client