This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E998245ACFC911F09A970A9FDAE4EC9C.roa File: E998245ACFC911F09A970A9FDAE4EC9C.roa (raw, json) Hash identifier: Tu4DNAjMZ/Bs8QoRbkSWKZHBVYrjPWIhIydORfMem+0= Subject key identifier: 9A:4F:E0:3A:68:81:4D:20:B8:D1:4F:55:57:1B:E9:EE:AF:A2:4A:EC Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ABD9 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E998245ACFC911F09A970A9FDAE4EC9C.roa Signing time: Tue 02 Dec 2025 21:57:37 +0000 ROA not before: Tue 02 Dec 2025 21:57:32 +0000 ROA not after: Fri 03 Nov 2028 21:57:32 +0000 asID: 17561 IP address blocks: 154.198.137.0/24 maxlen: 24 154.198.138.0/24 maxlen: 24 154.198.139.0/24 maxlen: 24 154.198.140.0/24 maxlen: 24 154.198.141.0/24 maxlen: 24 154.198.142.0/24 maxlen: 24 154.198.143.0/24 maxlen: 24 154.198.144.0/24 maxlen: 24 154.198.145.0/24 maxlen: 24 154.198.146.0/24 maxlen: 24 154.198.147.0/24 maxlen: 24 154.198.148.0/24 maxlen: 24 154.198.149.0/24 maxlen: 24 154.198.150.0/24 maxlen: 24 154.198.151.0/24 maxlen: 24 154.198.152.0/24 maxlen: 24 154.198.153.0/24 maxlen: 24 154.198.154.0/24 maxlen: 24 154.198.155.0/24 maxlen: 24 154.198.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109529 (0x1abd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 21:57:32 2025 GMT Not After : Nov 3 21:57:32 2028 GMT Subject: CN=692f60d0-3acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:de:95:fa:01:9b:03:ac:17:b9:dc:67:25:1a: 2b:c8:a9:c9:fd:d1:48:aa:df:ad:20:0a:05:ce:fe: 92:73:fe:95:19:a4:93:67:58:61:55:2b:62:f9:36: aa:1e:41:ec:3d:f3:6c:f3:0b:c6:23:02:45:be:ba: 5c:da:08:73:d6:43:a6:26:47:6c:c0:05:4d:77:ca: d3:f2:33:e1:ca:15:34:8b:41:95:ce:f8:72:b5:ae: 53:3f:87:f9:7d:83:ab:bd:98:70:58:ef:14:22:08: c8:04:c3:af:b2:90:42:27:54:e6:b9:2c:16:d1:ab: 14:ec:17:9d:cd:bb:c3:1b:dd:5e:4e:2d:60:f4:1e: 86:7e:e2:69:00:07:f6:2f:01:54:5f:58:0f:5a:3a: 78:bb:81:d6:68:94:3d:36:2d:15:48:d2:7a:87:59: 53:94:29:00:7c:bb:64:78:0c:a1:33:5f:e2:8f:c9: 70:08:38:33:bd:a9:31:52:98:19:d8:3c:16:58:90: 2c:81:9b:e7:73:7a:55:92:87:90:2e:10:08:14:fc: 09:83:7a:94:b5:9f:e4:31:8d:ed:67:ad:47:6f:87: 3f:02:82:72:7e:66:b1:fb:85:6d:53:a3:fd:c5:69: 84:ed:78:68:f5:db:6e:00:fd:71:bc:04:8e:3a:9c: 55:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:4F:E0:3A:68:81:4D:20:B8:D1:4F:55:57:1B:E9:EE:AF:A2:4A:EC X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E998245ACFC911F09A970A9FDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.198.137.0-154.198.156.255 Signature Algorithm: sha256WithRSAEncryption 09:e3:5e:43:e5:e8:da:10:bd:29:f0:c7:8d:cd:cd:ca:81:eb: 01:6d:f2:5d:79:da:d8:15:eb:33:41:10:b9:33:40:c2:6a:03: 4e:d1:c2:a8:4b:fd:b9:79:91:38:b8:97:3d:2f:da:31:bd:c8: 38:63:c7:a9:00:2e:2b:8b:72:9d:37:5b:b0:69:be:f7:f2:72: 4a:8b:57:58:87:c7:53:bc:f6:80:50:cf:18:99:cb:da:ae:e2: 96:17:45:51:64:b9:f4:c2:0b:0f:c0:b8:f2:7a:66:07:8f:39: cf:12:ca:92:24:3f:06:21:3d:57:e3:ad:0f:13:86:8e:7b:a9: c0:f3:f1:47:ec:36:e9:95:ad:e9:7c:e9:d5:f1:11:2a:5e:42: c4:86:94:04:30:21:81:ff:18:3e:cb:9c:29:5e:0d:66:92:01: 49:96:cd:9e:b2:60:10:9a:47:03:2a:d0:03:ee:d2:b4:3b:ac: cd:d8:69:b9:a5:ed:e1:00:42:cb:0a:3d:dd:59:ec:6b:8f:12: 96:fd:eb:36:c2:9b:93:b2:d5:46:6b:03:cd:6a:09:9e:f3:cb: 96:07:06:ce:a9:04:52:da:96:28:7b:97:39:b3:bd:3c:61:58: b7:57:de:98:61:98:01:6d:1e:ac:5b:bb:cf:73:8b:31:56:9f: d0:ff:42:3c -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIDAavZMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMjE1NzMyWhcNMjgxMTAzMjE1NzMyWjAYMRYw FAYDVQQDEw02OTJmNjBkMC0zYWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAzt6V+gGbA6wXudxnJRoryKnJ/dFIqt+tIAoFzv6Sc/6VGaSTZ1hhVSti +TaqHkHsPfNs8wvGIwJFvrpc2ghz1kOmJkdswAVNd8rT8jPhyhU0i0GVzvhyta5T P4f5fYOrvZhwWO8UIgjIBMOvspBCJ1TmuSwW0asU7BedzbvDG91eTi1g9B6GfuJp AAf2LwFUX1gPWjp4u4HWaJQ9Ni0VSNJ6h1lTlCkAfLtkeAyhM1/ij8lwCDgzvakx UpgZ2DwWWJAsgZvnc3pVkoeQLhAIFPwJg3qUtZ/kMY3tZ61Hb4c/AoJyfmax+4Vt U6P9xWmE7Xho9dtuAP1xvASOOpxVBwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJpP 4DpogU0guNFPVVcb6e6vokrsMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9FOTk4MjQ1QUNGQzkxMUYwOUE5NzBBOUZEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACaxokDBACaxpwwDQYJ KoZIhvcNAQELBQADggEBAAnjXkPl6NoQvSnwx43NzcqB6wFt8l152tgV6zNBELkz QMJqA07RwqhL/bl5kTi4lz0v2jG9yDhjx6kALiuLcp03W7BpvvfyckqLV1iHx1O8 9oBQzxiZy9qu4pYXRVFkufTCCw/AuPJ6ZgePOc8SypIkPwYhPVfjrQ8Tho57qcDz 8UfsNumVrel86dXxESpeQsSGlAQwIYH/GD7LnCleDWaSAUmWzZ6yYBCaRwMq0APu 0rQ7rM3Yabml7eEAQssKPd1Z7GuPEpb96zbCm5Oy1UZrA81qCZ7zy5YHBs6pBFLa lih7lzmzvTxhWLdX3phhmAFtHqxbu89zizFWn9D/Qjw= -----END CERTIFICATE-----Generated at Wed Dec 3 10:25:11 2025 by rpki-client