This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1B568DADA7011F0A6F71F79DAE4EC9C.roa File: F1B568DADA7011F0A6F71F79DAE4EC9C.roa (raw, json) Hash identifier: Bad43V6d6BkdaCZBrff6vUn+Ca+SDMqd0XZ/liehmHk= Subject key identifier: 69:58:54:D2:FB:69:B2:C0:31:57:92:CE:D6:F7:29:3A:DB:6C:38:05 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AE8D Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1B568DADA7011F0A6F71F79DAE4EC9C.roa Signing time: Tue 16 Dec 2025 11:18:28 +0000 ROA not before: Tue 16 Dec 2025 11:18:23 +0000 ROA not after: Tue 12 Dec 2028 11:18:23 +0000 asID: 17561 IP address blocks: 154.197.120.0/24 maxlen: 24 154.203.63.0/24 maxlen: 24 154.203.95.0/24 maxlen: 24 154.204.37.0/24 maxlen: 24 154.204.40.0/24 maxlen: 24 154.204.42.0/24 maxlen: 24 154.204.48.0/24 maxlen: 24 154.204.51.0/24 maxlen: 24 154.209.16.0/24 maxlen: 24 154.209.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 21 Dec 2025 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110221 (0x1ae8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 16 11:18:23 2025 GMT Not After : Dec 12 11:18:23 2028 GMT Subject: CN=69414004-a8c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:17:65:65:6e:ab:c5:65:77:6f:9f:c4:a9:6a: 4b:00:9d:b3:7c:06:28:2b:34:04:ed:4b:71:48:c0: 8a:a0:26:96:b4:00:45:2c:d2:d2:4f:4e:6b:d7:49: e3:a4:5a:ab:36:44:ac:40:96:37:bc:91:7a:72:d7: 1f:c3:f6:49:64:f6:ad:3b:3b:90:fb:e2:60:cf:85: ad:5b:88:72:86:18:8f:74:fe:9c:84:28:92:1b:6a: b1:06:7e:b7:c7:de:3e:6d:99:93:e5:1a:65:72:f7: ea:a1:12:fa:0b:84:bf:93:52:a8:6b:fe:87:b0:f8: 60:a1:87:bc:dd:bb:e2:d8:4a:09:3f:79:cb:2a:26: a7:4a:fe:0e:b4:30:68:ed:e8:8e:4e:7a:a0:91:8a: 46:ec:a2:79:a5:52:03:30:36:93:72:1d:00:53:f9: b0:44:51:b8:68:05:88:74:b0:26:5d:fd:e5:41:55: e2:77:97:90:40:5e:b0:00:60:e4:b6:87:e1:29:ea: af:b3:a5:8c:e9:7b:55:85:5c:f0:b4:06:38:68:52: bf:67:aa:bf:8f:ec:50:da:c2:c9:f5:31:e8:62:75: 93:9d:b3:02:f1:8e:68:6d:25:e4:15:03:96:fe:97: d2:b6:ed:e7:10:34:0c:bf:4e:28:14:fa:43:2e:7a: 4b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:58:54:D2:FB:69:B2:C0:31:57:92:CE:D6:F7:29:3A:DB:6C:38:05 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1B568DADA7011F0A6F71F79DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.197.120.0/24 154.203.63.0/24 154.203.95.0/24 154.204.37.0/24 154.204.40.0/24 154.204.42.0/24 154.204.48.0/24 154.204.51.0/24 154.209.16.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:41:95:83:6d:c8:dc:11:e4:c0:39:19:bb:9d:46:f6:63:9c: 56:27:c4:b4:5d:d8:9c:e2:58:2f:1a:d7:79:f0:58:61:3a:6f: 69:f9:65:68:d5:58:9a:8d:82:e4:a7:a5:1b:1d:d9:1a:ba:ed: 80:2e:81:e5:2b:d6:4f:ab:14:66:af:6d:4b:b2:94:5e:66:d4: f0:d4:de:c9:61:94:55:8e:35:e9:87:2a:97:7c:dc:e7:30:3e: a8:72:33:34:0e:82:aa:b8:dd:6e:b4:0c:38:f5:74:85:39:f3: f7:40:7c:2e:fd:82:63:1d:7c:80:12:74:8f:4f:f9:57:7e:0b: 2c:53:13:35:b7:01:aa:ff:7f:be:c0:3a:a6:dc:b3:94:85:64: 56:60:67:22:77:16:55:c5:9b:a1:b2:95:9d:d9:ec:68:77:36: 4c:c8:e2:1c:a1:9f:a5:44:76:78:61:b4:37:04:55:aa:c6:bc: eb:8f:83:a9:be:5b:7f:31:93:c1:53:91:0e:63:c5:88:a8:32: 3f:39:3b:0b:26:70:77:f1:10:55:a2:a3:3b:97:47:62:26:70: 62:6b:34:2b:29:1c:05:fc:0f:75:51:74:a8:e5:c0:81:14:5c: c0:ae:d9:a0:dd:d3:51:fa:86:7d:73:77:fe:72:42:2e:a6:8b: 42:b6:3e:01 -----BEGIN CERTIFICATE----- MIIFtDCCBJygAwIBAgIDAa6NMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjE2MTExODIzWhcNMjgxMjEyMTExODIzWjAYMRYw FAYDVQQDEw02OTQxNDAwNC1hOGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAvBdlZW6rxWV3b5/EqWpLAJ2zfAYoKzQE7UtxSMCKoCaWtABFLNLST05r 10njpFqrNkSsQJY3vJF6ctcfw/ZJZPatOzuQ++Jgz4WtW4hyhhiPdP6chCiSG2qx Bn63x94+bZmT5RplcvfqoRL6C4S/k1Koa/6HsPhgoYe83bvi2EoJP3nLKianSv4O tDBo7eiOTnqgkYpG7KJ5pVIDMDaTch0AU/mwRFG4aAWIdLAmXf3lQVXid5eQQF6w AGDktofhKeqvs6WM6XtVhVzwtAY4aFK/Z6q/j+xQ2sLJ9THoYnWTnbMC8Y5obSXk FQOW/pfStu3nEDQMv04oFPpDLnpLHQIDAQABo4IC1TCCAtEwHQYDVR0OBBYEFGlY VNL7abLAMVeSztb3KTrbbDgFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9GMUI1NjhEQURBNzAxMUYwQTZGNzFGNzlEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAmsV4AwQAmss/AwQAmstf AwQAmswlAwQAmswoAwQAmswqAwQAmswwAwQAmswzAwQBmtEQMA0GCSqGSIb3DQEB CwUAA4IBAQBtQZWDbcjcEeTAORm7nUb2Y5xWJ8S0Xdic4lgvGtd58FhhOm9p+WVo 1ViajYLkp6UbHdkauu2ALoHlK9ZPqxRmr21LspReZtTw1N7JYZRVjjXphyqXfNzn MD6ocjM0DoKquN1utAw49XSFOfP3QHwu/YJjHXyAEnSPT/lXfgssUxM1twGq/3++ wDqm3LOUhWRWYGcidxZVxZuhspWd2exodzZMyOIcoZ+lRHZ4YbQ3BFWqxrzrj4Op vlt/MZPBU5EOY8WIqDI/OTsLJnB38RBVoqM7l0diJnBiazQrKRwF/A91UXSo5cCB FFzArtmg3dNR+oZ9c3f+ckIupotCtj4B -----END CERTIFICATE-----Generated at Fri Dec 19 09:09:30 2025 by rpki-client