This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFA78FCCC13B11F091F83D9CDAE4EC9C.roa File: DFA78FCCC13B11F091F83D9CDAE4EC9C.roa (raw, json) Hash identifier: Rg4CNjhhLdHkuRYmzpdhxbijA/T/9y/IvA0+sfLLlJ4= Subject key identifier: 85:A1:E1:36:74:33:06:3B:0B:32:A0:BE:DC:00:8D:81:46:98:47:08 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01A900 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFA78FCCC13B11F091F83D9CDAE4EC9C.roa Signing time: Fri 14 Nov 2025 09:25:35 +0000 ROA not before: Fri 14 Nov 2025 09:25:27 +0000 ROA not after: Tue 16 Dec 2025 09:25:27 +0000 asID: 22773 IP address blocks: 154.202.23.0/24 maxlen: 24 154.202.24.0/24 maxlen: 24 154.202.25.0/24 maxlen: 24 154.202.26.0/24 maxlen: 24 154.202.27.0/24 maxlen: 24 154.202.28.0/24 maxlen: 24 154.202.29.0/24 maxlen: 24 154.202.30.0/24 maxlen: 24 154.202.31.0/24 maxlen: 24 154.202.69.0/24 maxlen: 24 154.202.72.0/24 maxlen: 24 154.202.73.0/24 maxlen: 24 154.202.76.0/24 maxlen: 24 154.202.77.0/24 maxlen: 24 154.202.109.0/24 maxlen: 24 154.202.110.0/24 maxlen: 24 154.213.218.0/24 maxlen: 24 154.213.219.0/24 maxlen: 24 154.213.221.0/24 maxlen: 24 154.213.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108800 (0x1a900) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 14 09:25:27 2025 GMT Not After : Dec 16 09:25:27 2025 GMT Subject: CN=6916f58f-04c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:36:c3:02:95:c8:19:a1:ca:19:62:85:01:a0: 02:7c:91:5f:76:da:f9:a1:a5:f4:e2:76:af:0a:75: e6:a9:7b:14:b5:b2:09:73:4a:dd:c9:78:ee:8f:47: 49:8d:31:75:cd:66:13:7d:19:9c:a9:2b:b6:e7:e5: 02:72:be:69:c9:8d:8d:29:39:97:1b:8b:6d:f1:9a: fd:ab:5b:18:5f:14:79:75:03:0e:ff:21:13:98:43: 6b:92:e8:52:67:8f:fc:61:4f:30:87:ed:c5:c5:ab: 69:87:95:33:c1:21:91:91:49:7d:28:31:a2:2e:bb: dc:1f:60:17:32:4a:ae:62:15:ef:eb:9c:59:27:8e: b3:7c:66:be:63:9c:b4:6e:b0:ae:68:3f:2d:15:49: a0:51:1b:c6:39:58:65:d2:14:35:18:cf:e4:90:85: 4c:da:0e:51:fd:ef:45:bb:79:cd:c8:5e:2d:34:5b: ec:8c:74:78:24:d1:8c:a1:c9:77:28:19:76:8b:e5: 2b:a8:ce:e6:4a:46:c9:95:16:9b:f2:eb:61:4b:35: 54:ad:d8:f0:c7:6f:79:77:42:4b:e1:57:ff:a2:85: 59:00:ed:f1:63:de:6b:9a:11:05:fc:42:08:74:81: de:2a:02:6e:be:80:ea:c4:0e:4c:3e:eb:38:9e:cc: 8c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A1:E1:36:74:33:06:3B:0B:32:A0:BE:DC:00:8D:81:46:98:47:08 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFA78FCCC13B11F091F83D9CDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.202.23.0-154.202.31.255 154.202.69.0/24 154.202.72.0/23 154.202.76.0/23 154.202.109.0-154.202.110.255 154.213.218.0/23 154.213.221.0-154.213.222.255 Signature Algorithm: sha256WithRSAEncryption aa:7e:cb:97:4a:b6:34:86:2b:dd:a4:cd:e7:e2:b3:a0:2b:fa: 22:e8:a2:b4:aa:9f:3a:8b:bd:b4:de:bb:39:05:33:f7:89:60: 22:4c:6f:75:51:f1:00:58:17:b8:06:31:59:6f:cb:d6:85:88: bf:3c:f4:76:50:32:66:57:1e:59:1f:ec:22:1c:6f:bc:6d:4d: 4d:24:e3:34:f9:7b:2c:04:4e:3f:b1:98:76:4e:82:18:f0:79: 31:52:3a:62:68:16:43:94:bf:92:71:b3:a6:b9:34:77:a5:95: 27:db:cb:eb:22:c9:f0:60:59:b2:71:97:e2:bd:c8:30:be:af: 42:d9:ba:94:06:fa:c6:28:ea:dd:eb:5f:50:1d:43:e1:b0:6a: 20:b2:da:ec:3a:a1:25:8c:d1:21:66:c6:60:7b:d2:c3:34:26: bc:ee:72:09:63:31:3f:c0:27:1d:a1:be:65:2f:6c:88:b8:40: bf:4a:e9:ef:ae:15:61:bd:af:c0:36:0b:5b:de:99:ec:ea:ed: 8a:73:93:16:72:c6:21:5c:96:bd:93:d2:9a:de:dd:14:ed:7a: 70:1f:64:1a:a7:33:75:fa:2d:29:93:c2:23:89:5d:4c:52:8f: 21:5f:34:7d:43:0d:46:e9:d8:92:9e:1c:79:3b:d0:e2:23:01: 80:0a:e4:2a -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIDAakAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTE0MDkyNTI3WhcNMjUxMjE2MDkyNTI3WjAYMRYw FAYDVQQDEw02OTE2ZjU4Zi0wNGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAzzbDApXIGaHKGWKFAaACfJFfdtr5oaX04navCnXmqXsUtbIJc0rdyXju j0dJjTF1zWYTfRmcqSu25+UCcr5pyY2NKTmXG4tt8Zr9q1sYXxR5dQMO/yETmENr kuhSZ4/8YU8wh+3Fxatph5UzwSGRkUl9KDGiLrvcH2AXMkquYhXv65xZJ46zfGa+ Y5y0brCuaD8tFUmgURvGOVhl0hQ1GM/kkIVM2g5R/e9Fu3nNyF4tNFvsjHR4JNGM ocl3KBl2i+UrqM7mSkbJlRab8uthSzVUrdjwx295d0JL4Vf/ooVZAO3xY95rmhEF /EIIdIHeKgJuvoDqxA5MPus4nsyM7wIDAQABo4IC4TCCAt0wHQYDVR0OBBYEFIWh 4TZ0MwY7CzKgvtwAjYFGmEcIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9ERkE3OEZDQ0MxM0IxMUYwOTFGODNEOUNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCMAwDBACayhcDBAWaygADBACa ykUDBAGaykgDBAGaykwwDAMEAJrKbQMEAJrKbgMEAZrV2jAMAwQAmtXdAwQAmtXe MA0GCSqGSIb3DQEBCwUAA4IBAQCqfsuXSrY0hivdpM3n4rOgK/oi6KK0qp86i720 3rs5BTP3iWAiTG91UfEAWBe4BjFZb8vWhYi/PPR2UDJmVx5ZH+wiHG+8bU1NJOM0 +XssBE4/sZh2ToIY8HkxUjpiaBZDlL+ScbOmuTR3pZUn28vrIsnwYFmycZfivcgw vq9C2bqUBvrGKOrd619QHUPhsGogstrsOqEljNEhZsZge9LDNCa87nIJYzE/wCcd ob5lL2yIuEC/SunvrhVhva/ANgtb3pns6u2Kc5MWcsYhXJa9k9Ka3t0U7XpwH2Qa pzN1+i0pk8IjiV1MUo8hXzR9Qw1G6diSnhx5O9DiIwGACuQq -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:22 2025 by rpki-client