This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/2DD1E2A2C11811F09F7B83BEDAE4EC9C.roa File: 2DD1E2A2C11811F09F7B83BEDAE4EC9C.roa (raw, json) Hash identifier: wvL1zVkk4PrEbO1hOI+/jbrgVbiJrtyBQ/7aczeZOJg= Subject key identifier: 7B:7D:B9:69:F1:96:FB:DE:5C:5F:02:53:B9:F1:83:A6:2E:AB:9E:EC Certificate issuer: /CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E Certificate serial: 029D Authority key identifier: 80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E Authority info access: rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/2DD1E2A2C11811F09F7B83BEDAE4EC9C.roa Signing time: Fri 14 Nov 2025 05:10:04 +0000 ROA not before: Fri 14 Nov 2025 05:09:58 +0000 ROA not after: Thu 30 Nov 2028 05:09:58 +0000 asID: 328331 IP address blocks: 102.135.168.0/25 maxlen: 25 102.135.168.128/25 maxlen: 25 102.135.169.0/25 maxlen: 25 102.135.169.128/25 maxlen: 25 102.135.173.0/25 maxlen: 25 102.135.173.128/25 maxlen: 25 102.135.174.0/25 maxlen: 25 102.135.174.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 669 (0x29d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3654AD1AF, serialNumber=80D435BBC77094E85B7BF3082580D127B910779E Validity Not Before: Nov 14 05:09:58 2025 GMT Not After : Nov 30 05:09:58 2028 GMT Subject: CN=6916b9ac-4cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1d:85:16:25:09:00:d8:e4:f7:27:b8:4d:27: 24:e3:88:8c:bf:8f:bd:cb:22:88:2d:97:a4:11:27: f2:66:ed:f8:6a:75:d4:69:08:91:83:8e:50:a4:7d: 34:95:57:77:8c:ea:84:f3:0a:01:9d:5f:6a:5c:ff: 43:28:1f:bc:dc:22:a0:0e:09:3c:ae:6d:54:9d:60: 0b:c2:ea:89:7b:73:67:8f:1a:74:f3:36:2e:93:87: 32:a6:71:30:fe:72:56:ee:04:03:c8:44:ee:8d:e3: f1:54:0f:67:ce:f1:8b:ad:cf:8a:5e:e5:10:e2:f8: 4e:8e:8a:7e:53:0d:1b:08:98:47:27:d7:7a:8b:b8: 3e:f4:49:8e:e7:2d:8b:35:3d:4d:38:63:3c:3c:16: 31:7a:4c:31:79:d5:66:5e:1c:52:3a:ac:d7:45:a6: ba:94:77:57:ab:0f:81:1f:4b:11:6a:e7:e6:61:07: 2d:d9:e4:da:ed:d1:ab:80:5d:2c:4a:bb:ce:21:24: 6c:4b:1f:ad:f0:17:18:91:39:31:08:21:0d:0b:4d: 3e:16:d7:ad:c1:bc:6a:10:d8:fc:35:60:d8:68:ec: 75:e8:75:bb:2b:87:64:96:e4:4b:ac:59:90:2f:b0: a4:88:08:1f:f4:a0:80:7f:3f:4f:c0:0f:70:be:4a: c2:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:7D:B9:69:F1:96:FB:DE:5C:5F:02:53:B9:F1:83:A6:2E:AB:9E:EC X509v3 Authority Key Identifier: keyid:80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/2DD1E2A2C11811F09F7B83BEDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 102.135.168.0/23 102.135.173.0-102.135.174.255 Signature Algorithm: sha256WithRSAEncryption 58:22:01:e8:99:69:bf:2b:ff:67:00:99:72:71:b8:b1:81:79: 20:57:1e:03:6e:41:c1:d2:d2:90:a7:20:22:4d:fd:5a:39:25: a8:14:85:14:9a:1a:3d:22:47:cb:b6:89:8c:3f:51:87:db:94: d4:37:65:51:f5:c7:ef:69:f4:21:8d:a5:d7:5e:0e:79:49:51: dc:f0:05:10:8d:6a:78:52:b8:b7:6f:b9:ed:21:44:a4:f5:5f: e6:84:41:79:fc:09:52:bf:6e:6c:ad:40:d3:6b:7f:e9:53:c2: 3b:2f:b1:f8:d5:01:9a:1e:27:f5:8f:a4:c7:81:16:3e:45:c8: cd:5e:d1:cf:ca:a0:87:e6:f6:41:71:03:ca:74:b3:53:66:3b: ef:0e:ef:a1:17:55:bc:88:d9:b8:67:99:31:b2:13:92:95:72: 58:db:c1:51:a1:e3:b6:34:08:16:54:6a:f5:a9:6e:f9:f0:9a: c2:da:48:44:8f:d7:2c:bc:f7:c2:a0:27:76:26:82:30:d9:51: 5a:40:c4:c3:a7:6a:1a:0a:ee:b7:f8:15:6a:16:d0:b6:7a:e4: be:a7:f6:26:e9:d4:b2:00:77:cb:62:81:25:d7:25:ba:8d:31: a3:5c:79:dc:c7:db:0e:6c:b0:8c:2a:d1:06:c1:fd:eb:5b:3f: 6a:69:81:4d -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICAp0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NTRBRDFBRjExMC8GA1UEBRMoODBENDM1QkJDNzcwOTRFODVCN0JGMzA4MjU4MEQx MjdCOTEwNzc5RTAeFw0yNTExMTQwNTA5NThaFw0yODExMzAwNTA5NThaMBgxFjAU BgNVBAMTDTY5MTZiOWFjLTRjYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDuHYUWJQkA2OT3J7hNJyTjiIy/j73LIogtl6QRJ/Jm7fhqddRpCJGDjlCk fTSVV3eM6oTzCgGdX2pc/0MoH7zcIqAOCTyubVSdYAvC6ol7c2ePGnTzNi6ThzKm cTD+clbuBAPIRO6N4/FUD2fO8Yutz4pe5RDi+E6Oin5TDRsImEcn13qLuD70SY7n LYs1PU04Yzw8FjF6TDF51WZeHFI6rNdFprqUd1erD4EfSxFq5+ZhBy3Z5Nrt0auA XSxKu84hJGxLH63wFxiROTEIIQ0LTT4W163BvGoQ2Pw1YNho7HXodbsrh2SW5Eus WZAvsKSICB/0oIB/P0/AD3C+SsJ9AgMBAAGjggKzMIICrzAdBgNVHQ4EFgQUe325 afGW+95cXwJTufGDpi6rnuwwHwYDVR0jBBgwFoAUgNQ1u8dwlOhbe/MIJYDRJ7kQ d54wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjU0QUQxLzIyOEY1QjMyQ0YwMTExRUU5NEY1ODZCOTc3NTQxMkU2L2dOUTF1 OGR3bE9oYmVfTUlKWURSSjdrUWQ1NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2dOUTF1OGR3bE9oYmVfTUlKWURSSjdrUWQ1NC5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjU0QUQxLzIyOEY1QjMyQ0YwMTExRUU5NEY1ODZCOTc3 NTQxMkU2LzJERDFFMkEyQzExODExRjA5RjdCODNCRURBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwLQYIKwYBBQUHAQcBAf8EHjAcMBoEAgABMBQDBAFmh6gwDAMEAGaHrQMEAGaH rjANBgkqhkiG9w0BAQsFAAOCAQEAWCIB6Jlpvyv/ZwCZcnG4sYF5IFceA25BwdLS kKcgIk39WjklqBSFFJoaPSJHy7aJjD9Rh9uU1DdlUfXH72n0IY2l114OeUlR3PAF EI1qeFK4t2+57SFEpPVf5oRBefwJUr9ubK1A02t/6VPCOy+x+NUBmh4n9Y+kx4EW PkXIzV7Rz8qgh+b2QXEDynSzU2Y77w7voRdVvIjZuGeZMbITkpVyWNvBUaHjtjQI FlRq9alu+fCawtpIRI/XLLz3wqAndiaCMNlRWkDEw6dqGgrut/gVahbQtnrkvqf2 JunUsgB3y2KBJdcluo0xo1x53MfbDmywjCrRBsH961s/ammBTQ== -----END CERTIFICATE-----Generated at Mon Dec 8 18:04:39 2025 by rpki-client