This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F67ECFCECF5211F0A1571DC1DAE4EC9C.roa File: F67ECFCECF5211F0A1571DC1DAE4EC9C.roa (raw, json) Hash identifier: 43VRuCdSqBRNRaCyMlL51BqrIt2OjYjmtYQpeTnoROA= Subject key identifier: BC:B3:AE:0C:AB:4A:31:8E:DA:66:8D:DF:F7:C9:D9:6A:20:85:5C:D9 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AB6D Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F67ECFCECF5211F0A1571DC1DAE4EC9C.roa Signing time: Tue 02 Dec 2025 07:46:08 +0000 ROA not before: Tue 02 Dec 2025 07:46:03 +0000 ROA not after: Wed 31 Dec 2025 07:46:03 +0000 asID: 62240 IP address blocks: 154.196.29.0/24 maxlen: 24 154.196.32.0/24 maxlen: 24 154.196.34.0/24 maxlen: 24 154.196.35.0/24 maxlen: 24 154.196.37.0/24 maxlen: 24 154.196.38.0/24 maxlen: 24 154.196.39.0/24 maxlen: 24 154.196.89.0/24 maxlen: 24 154.196.90.0/24 maxlen: 24 154.196.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109421 (0x1ab6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 2 07:46:03 2025 GMT Not After : Dec 31 07:46:03 2025 GMT Subject: CN=692e9940-7020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:99:96:18:69:5d:45:47:39:27:36:c6:67:d3: 74:1d:93:2c:28:c9:79:94:86:1c:66:d5:8c:81:8d: 14:b8:02:b1:79:82:87:e6:ff:d5:ac:d4:93:e9:dc: 8b:75:4a:c6:59:a3:0c:0a:b1:cb:a0:3a:91:b6:a4: be:9a:ac:4c:e2:63:cd:a7:01:27:a9:c8:68:e7:a0: b7:59:38:2d:3b:d3:e1:69:91:65:d8:b1:6a:a3:93: 95:34:4c:52:09:61:5c:08:aa:72:2a:85:6e:65:84: 9b:8d:78:e8:c4:fe:44:ff:5b:af:10:14:68:29:01: fb:83:14:8b:9a:a1:13:6d:7f:14:45:d6:7d:5e:23: bb:a1:2c:5c:cf:e3:5a:48:47:d4:6d:f5:12:6f:c1: 74:c0:8f:89:eb:dc:ae:43:ac:5e:1d:94:da:00:1f: e5:17:68:96:ad:26:a9:e5:06:44:1f:d6:9d:82:f2: 0c:b2:2e:a0:e0:a3:28:58:48:6b:4e:7a:58:89:27: c3:38:5d:31:c6:da:55:ab:19:be:85:d3:4d:88:53: 27:a1:17:5c:77:2d:52:73:29:2f:33:52:97:c4:66: c9:61:20:a9:62:c4:2a:cd:63:c7:50:b0:4b:6c:ee: 37:1f:73:5c:ad:28:82:dd:b3:5c:f1:a2:c7:d6:8e: 36:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B3:AE:0C:AB:4A:31:8E:DA:66:8D:DF:F7:C9:D9:6A:20:85:5C:D9 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F67ECFCECF5211F0A1571DC1DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.196.29.0/24 154.196.32.0/24 154.196.34.0/23 154.196.37.0-154.196.39.255 154.196.89.0-154.196.91.255 Signature Algorithm: sha256WithRSAEncryption c8:5c:9e:98:62:9d:d9:89:02:3b:ff:69:79:81:ba:c2:00:2e: a8:f2:88:fd:ad:75:b1:1d:d7:aa:7e:a2:ed:fa:b8:f5:db:b4: df:60:9a:96:cb:92:ca:25:e5:70:0f:05:cb:cc:61:bf:d0:b5: a2:30:10:03:8b:c5:ac:f2:62:97:a4:cb:97:ab:60:4d:ff:1d: 8a:81:df:11:7a:c3:46:37:a1:da:46:bc:8e:e7:98:7a:7b:a8: 09:75:17:1e:36:1e:5c:6d:c9:68:fe:35:2b:dc:50:e5:59:4f: 8d:44:30:a0:57:c3:a0:bb:86:74:7e:6c:f9:9a:86:53:e6:db: 0e:c1:6f:5a:80:c7:26:ac:8b:ae:91:d4:72:05:81:85:69:af: 60:d8:96:c2:7d:a7:35:a5:d1:c5:47:ed:fc:2f:7b:98:a8:57: 5e:a8:6b:a7:15:b8:d8:94:ec:86:77:36:cb:e7:ab:89:51:6a: bb:bb:37:12:5b:5f:02:bc:93:01:a5:33:bc:c9:04:50:d8:a4: 3c:c7:86:42:cc:f7:2c:5b:14:e4:58:0a:99:1f:d1:65:0b:ae: 41:ae:e1:7b:6f:9c:12:36:7a:37:58:9c:65:17:fc:8a:05:b8: 18:8f:13:87:00:f5:ad:90:99:b9:a4:44:dd:6b:3c:76:75:f3: 26:70:95:36 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgIDAattMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAyMDc0NjAzWhcNMjUxMjMxMDc0NjAzWjAYMRYw FAYDVQQDEw02OTJlOTk0MC03MDIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAtJmWGGldRUc5JzbGZ9N0HZMsKMl5lIYcZtWMgY0UuAKxeYKH5v/VrNST 6dyLdUrGWaMMCrHLoDqRtqS+mqxM4mPNpwEnqcho56C3WTgtO9PhaZFl2LFqo5OV NExSCWFcCKpyKoVuZYSbjXjoxP5E/1uvEBRoKQH7gxSLmqETbX8URdZ9XiO7oSxc z+NaSEfUbfUSb8F0wI+J69yuQ6xeHZTaAB/lF2iWrSap5QZEH9adgvIMsi6g4KMo WEhrTnpYiSfDOF0xxtpVqxm+hdNNiFMnoRdcdy1ScykvM1KXxGbJYSCpYsQqzWPH ULBLbO43H3NcrSiC3bNc8aLH1o42mQIDAQABo4ICzTCCAskwHQYDVR0OBBYEFLyz rgyrSjGO2maN3/fJ2WoghVzZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9GNjdFQ0ZDRUNGNTIxMUYwQTE1NzFEQzFEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuAwQAmsQdAwQAmsQgAwQBmsQi MAwDBACaxCUDBAOaxCAwDAMEAJrEWQMEAprEWDANBgkqhkiG9w0BAQsFAAOCAQEA yFyemGKd2YkCO/9peYG6wgAuqPKI/a11sR3Xqn6i7fq49du032CalsuSyiXlcA8F y8xhv9C1ojAQA4vFrPJil6TLl6tgTf8dioHfEXrDRjeh2ka8jueYenuoCXUXHjYe XG3JaP41K9xQ5VlPjUQwoFfDoLuGdH5s+ZqGU+bbDsFvWoDHJqyLrpHUcgWBhWmv YNiWwn2nNaXRxUft/C97mKhXXqhrpxW42JTshnc2y+eriVFqu7s3EltfAryTAaUz vMkEUNikPMeGQsz3LFsU5FgKmR/RZQuuQa7he2+cEjZ6N1icZRf8igW4GI8ThwD1 rZCZuaRE3Ws8dnXzJnCVNg== -----END CERTIFICATE-----Generated at Wed Dec 3 11:06:33 2025 by rpki-client