This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5D58952CAC811F0B32830CFDAE4EC9C.roa File: F5D58952CAC811F0B32830CFDAE4EC9C.roa (raw, json) Hash identifier: Idld9XcNQq+viCbq0u4E3eSg2yCNQ24OUPY2oj4bIns= Subject key identifier: 3F:A6:BA:CE:69:E8:6E:08:14:8F:B2:FF:56:EF:D6:50:6F:B8:06:A9 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AAB9 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5D58952CAC811F0B32830CFDAE4EC9C.roa Signing time: Wed 26 Nov 2025 13:08:12 +0000 ROA not before: Wed 26 Nov 2025 13:08:07 +0000 ROA not after: Fri 05 Dec 2025 13:08:07 +0000 asID: 62240 IP address blocks: 154.223.208.0/24 maxlen: 24 154.223.209.0/24 maxlen: 24 154.223.210.0/24 maxlen: 24 154.223.211.0/24 maxlen: 24 154.223.212.0/24 maxlen: 24 154.223.213.0/24 maxlen: 24 154.223.214.0/24 maxlen: 24 154.223.215.0/24 maxlen: 24 154.223.216.0/24 maxlen: 24 154.223.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109241 (0x1aab9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Nov 26 13:08:07 2025 GMT Not After : Dec 5 13:08:07 2025 GMT Subject: CN=6926fbbc-1bb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c7:7a:ec:cb:d6:8b:0f:3b:b3:30:9a:62:e1: 14:08:50:d2:87:3d:1c:67:b2:19:6e:d0:b7:17:29: ec:9d:02:bf:14:cc:bb:7f:ba:63:f2:7f:da:b5:6c: 55:5c:e9:15:e1:22:75:b2:77:22:e7:0b:f5:0e:ae: ce:2f:a2:49:ef:8f:73:d6:92:5d:9e:0b:c9:6e:63: ee:a5:fa:f7:06:c0:91:52:bd:45:48:cb:f6:bd:81: 07:fc:05:05:fd:eb:6e:cd:2b:3e:d8:85:ef:ec:90: ee:f3:63:c0:69:e3:c6:bc:61:3c:ea:3e:7d:50:c7: 5f:53:af:18:ac:83:92:5c:bf:9c:28:8b:72:92:bd: 91:37:a8:5f:37:37:c2:63:a4:fb:de:b0:8f:96:06: 8b:15:1e:12:8e:d9:d8:bb:7a:da:d9:4e:8b:61:c0: 43:be:17:70:6b:e6:a5:27:9f:4c:bd:da:e9:89:1e: 1a:c8:31:02:8c:ca:03:bd:34:8f:8a:63:18:c9:fd: c3:d0:eb:f2:27:17:11:2c:77:10:bc:b5:ba:44:06: b8:4d:06:ab:0a:2a:ed:dd:85:89:83:7e:28:4f:ec: 6e:3a:fe:42:05:74:d5:9a:07:c4:90:e7:52:1d:97: ba:af:1c:ea:b7:fe:6e:bd:55:e3:18:c0:17:80:85: 10:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A6:BA:CE:69:E8:6E:08:14:8F:B2:FF:56:EF:D6:50:6F:B8:06:A9 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F5D58952CAC811F0B32830CFDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.223.208.0-154.223.217.255 Signature Algorithm: sha256WithRSAEncryption 96:57:d1:c6:d7:e7:7e:a1:6e:fe:8b:34:59:2a:03:1b:e5:19: 58:d6:85:58:55:06:56:9b:c6:49:87:dd:b0:1a:b4:16:2e:99: ce:74:4e:fc:f7:cd:5b:f9:f2:1f:0b:97:66:8e:2e:d8:8e:78: 73:eb:f5:78:f9:28:a5:94:ca:19:ab:39:e4:3b:d9:c7:c1:d8: a2:70:7f:e5:f1:31:93:65:a7:26:92:47:13:a2:40:09:9c:78: 5e:bd:cc:5f:4e:d9:56:ce:31:fa:9a:42:81:68:2e:8b:a6:64: a5:81:b5:00:1e:51:9e:9e:d4:e4:4b:b7:7b:fe:d7:19:fd:1f: 8f:99:46:43:ef:15:64:7c:f6:1e:6a:c6:50:a5:0f:a8:04:50: e0:81:8b:76:09:db:20:17:24:a9:9f:e5:d1:bf:e0:39:21:31: 3b:85:c7:6c:d3:22:3a:93:be:5a:96:2e:ad:9e:4e:cf:46:cc: 69:55:2d:1d:a1:58:5a:48:4c:b2:a3:3c:d0:95:a4:6f:cd:a4: 9b:dd:2f:2a:df:bc:ba:a3:79:da:a6:d6:03:14:94:1c:ef:72: 55:96:12:d4:6b:8f:b4:92:d3:22:b2:d0:87:54:be:d5:4f:17: 71:1c:7e:9f:90:9a:7b:ca:92:ba:cd:63:be:09:b9:64:51:10: 27:19:cc:00 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIDAaq5MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMTI2MTMwODA3WhcNMjUxMjA1MTMwODA3WjAYMRYw FAYDVQQDEw02OTI2ZmJiYy0xYmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA5sd67MvWiw87szCaYuEUCFDShz0cZ7IZbtC3FynsnQK/FMy7f7pj8n/a tWxVXOkV4SJ1snci5wv1Dq7OL6JJ749z1pJdngvJbmPupfr3BsCRUr1FSMv2vYEH /AUF/etuzSs+2IXv7JDu82PAaePGvGE86j59UMdfU68YrIOSXL+cKItykr2RN6hf NzfCY6T73rCPlgaLFR4SjtnYu3ra2U6LYcBDvhdwa+alJ59MvdrpiR4ayDECjMoD vTSPimMYyf3D0OvyJxcRLHcQvLW6RAa4TQarCirt3YWJg34oT+xuOv5CBXTVmgfE kOdSHZe6rxzqt/5uvVXjGMAXgIUQRQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFD+m us5p6G4IFI+y/1bv1lBvuAapMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9GNUQ1ODk1MkNBQzgxMUYwQjMyODMwQ0ZEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASa39ADBAGa39gwDQYJ KoZIhvcNAQELBQADggEBAJZX0cbX536hbv6LNFkqAxvlGVjWhVhVBlabxkmH3bAa tBYumc50Tvz3zVv58h8Ll2aOLtiOeHPr9Xj5KKWUyhmrOeQ72cfB2KJwf+XxMZNl pyaSRxOiQAmceF69zF9O2VbOMfqaQoFoLoumZKWBtQAeUZ6e1ORLt3v+1xn9H4+Z RkPvFWR89h5qxlClD6gEUOCBi3YJ2yAXJKmf5dG/4DkhMTuFx2zTIjqTvlqWLq2e Ts9GzGlVLR2hWFpITLKjPNCVpG/NpJvdLyrfvLqjedqm1gMUlBzvclWWEtRrj7SS 0yKy0IdUvtVPF3Ecfp+QmnvKkrrNY74JuWRRECcZzAA= -----END CERTIFICATE-----Generated at Wed Dec 3 11:07:11 2025 by rpki-client