This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EADA8AECD76211F0A2FBF0C9DAE4EC9C.roa File: EADA8AECD76211F0A2FBF0C9DAE4EC9C.roa (raw, json) Hash identifier: 2Go7ot0TniH2ZgfvossZSlQyOQncDYL+yLltUyJeUkg= Subject key identifier: 53:36:F9:65:8F:D7:EC:48:55:F8:CE:96:D3:5E:D5:DE:BB:FA:FA:23 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AE08 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EADA8AECD76211F0A2FBF0C9DAE4EC9C.roa Signing time: Fri 12 Dec 2025 14:00:30 +0000 ROA not before: Fri 12 Dec 2025 14:00:25 +0000 ROA not after: Tue 12 Dec 2028 14:00:25 +0000 asID: 17561 IP address blocks: 154.202.70.0/24 maxlen: 24 154.202.71.0/24 maxlen: 24 154.202.86.0/24 maxlen: 24 154.202.87.0/24 maxlen: 24 154.207.243.0/24 maxlen: 24 154.207.244.0/24 maxlen: 24 154.207.245.0/24 maxlen: 24 154.207.246.0/24 maxlen: 24 154.207.247.0/24 maxlen: 24 154.207.248.0/24 maxlen: 24 154.207.249.0/24 maxlen: 24 154.207.250.0/24 maxlen: 24 154.207.251.0/24 maxlen: 24 154.207.254.0/24 maxlen: 24 154.207.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 21 Dec 2025 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110088 (0x1ae08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 12 14:00:25 2025 GMT Not After : Dec 12 14:00:25 2028 GMT Subject: CN=693c1ffe-6e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:19:62:38:47:bc:38:ff:2d:3a:85:ca:19: c0:4e:17:a1:8a:0a:92:ac:e4:60:b8:37:f6:b6:66: e8:39:28:4d:97:e7:c1:0a:7c:a7:bc:14:08:28:46: 9f:90:ed:71:c9:da:0f:b1:25:09:93:80:c0:45:7d: f5:3c:fc:ff:99:22:de:34:72:cd:f9:0a:6e:fe:07: bc:9c:8d:1a:4f:de:45:53:20:1a:0b:d1:64:42:42: 2e:1b:99:24:cc:6f:f7:30:b5:9f:fe:6f:63:64:80: dd:9c:5f:a7:cb:f3:48:2b:98:30:c4:46:42:66:4b: 29:4d:c1:b6:49:6d:f5:0f:f5:1b:3f:6c:8e:8e:15: 98:f2:2d:ab:6e:bd:a4:38:1d:78:12:3c:de:f0:fe: 29:d7:60:ab:fc:5b:72:ef:70:ee:df:c1:61:b6:be: f9:c8:f9:75:07:f4:82:af:a1:d6:60:17:51:62:33: 28:fd:4c:cf:84:8c:4e:e5:a2:f0:9b:72:33:c1:32: ae:da:23:29:a7:ab:a9:61:b6:6f:74:cb:a3:4c:98: 0c:8d:c9:b9:d0:33:2c:82:60:cc:21:b4:74:19:6f: 01:31:a7:79:d7:eb:f7:c9:da:3d:e0:0b:29:30:c6: bc:b0:e2:55:c5:1a:7b:29:46:66:14:84:ac:22:a3: 87:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:36:F9:65:8F:D7:EC:48:55:F8:CE:96:D3:5E:D5:DE:BB:FA:FA:23 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EADA8AECD76211F0A2FBF0C9DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.202.70.0/23 154.202.86.0/23 154.207.243.0-154.207.251.255 154.207.254.0/23 Signature Algorithm: sha256WithRSAEncryption 95:35:10:2a:ab:45:58:10:a2:bd:70:e1:ee:64:93:16:e4:42: 5e:41:c5:36:26:07:50:54:bc:fa:51:19:68:40:26:bb:e7:f4: 2e:c7:ce:1a:d1:be:dc:4f:2e:04:59:cb:cf:da:2a:d2:d6:d4: 0b:32:02:20:c4:6b:2b:9b:82:e8:96:1f:4e:35:e7:55:2f:19: 86:6a:b3:2e:e1:8e:ad:fa:d4:18:4b:a2:fe:47:5a:a6:1b:86: 9c:27:6d:d1:71:ae:84:19:04:f8:5c:2f:6d:94:65:00:bd:59: c3:12:6b:29:7e:e1:2f:70:69:8a:73:b1:70:39:74:9b:8b:51: 1b:30:41:16:b9:49:fe:c3:5a:fd:48:2f:ff:57:07:3a:80:41: 4b:96:97:d4:17:83:28:3f:92:75:67:69:57:49:8d:63:94:84: b5:69:91:e6:3d:f4:80:7f:7f:75:bc:3c:2b:81:6a:78:6e:bd: 58:12:8f:24:f9:03:f1:98:94:2c:ca:26:3e:e1:9c:0b:d8:b6: 43:72:d4:d6:ba:84:88:30:1b:7d:26:83:c1:60:15:39:2c:dd: b2:f7:ab:e1:43:ed:22:eb:f5:b9:e3:8b:25:c1:05:9b:5d:2f: 32:e8:b6:3b:32:9a:16:37:e1:20:96:d4:ae:8a:af:aa:fa:91: d1:aa:56:3d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIDAa4IMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjEyMTQwMDI1WhcNMjgxMjEyMTQwMDI1WjAYMRYw FAYDVQQDEw02OTNjMWZmZS02ZTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAwQcZYjhHvDj/LTqFyhnAThehigqSrORguDf2tmboOShNl+fBCnynvBQI KEafkO1xydoPsSUJk4DARX31PPz/mSLeNHLN+Qpu/ge8nI0aT95FUyAaC9FkQkIu G5kkzG/3MLWf/m9jZIDdnF+ny/NIK5gwxEZCZkspTcG2SW31D/UbP2yOjhWY8i2r br2kOB14Ejze8P4p12Cr/Fty73Du38Fhtr75yPl1B/SCr6HWYBdRYjMo/UzPhIxO 5aLwm3IzwTKu2iMpp6upYbZvdMujTJgMjcm50DMsgmDMIbR0GW8BMad51+v3ydo9 4AspMMa8sOJVxRp7KUZmFISsIqOHowIDAQABo4ICvzCCArswHQYDVR0OBBYEFFM2 +WWP1+xIVfjOltNe1d67+vojMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9FQURBOEFFQ0Q3NjIxMUYwQTJGQkYwQzlEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBmspGAwQBmspWMAwDBACa z/MDBAKaz/gDBAGaz/4wDQYJKoZIhvcNAQELBQADggEBAJU1ECqrRVgQor1w4e5k kxbkQl5BxTYmB1BUvPpRGWhAJrvn9C7HzhrRvtxPLgRZy8/aKtLW1AsyAiDEayub guiWH04151UvGYZqsy7hjq361BhLov5HWqYbhpwnbdFxroQZBPhcL22UZQC9WcMS ayl+4S9waYpzsXA5dJuLURswQRa5Sf7DWv1IL/9XBzqAQUuWl9QXgyg/knVnaVdJ jWOUhLVpkeY99IB/f3W8PCuBanhuvVgSjyT5A/GYlCzKJj7hnAvYtkNy1Na6hIgw G30mg8FgFTks3bL3q+FD7SLr9bnjiyXBBZtdLzLotjsymhY34SCW1K6Kr6r6kdGq Vj0= -----END CERTIFICATE-----Generated at Fri Dec 19 09:17:57 2025 by rpki-client