This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/486F198CC48C11F0BB6D2E87DAE4EC9C.roa File: 486F198CC48C11F0BB6D2E87DAE4EC9C.roa (raw, json) Hash identifier: VrtdTIL8YukfAEIY66y87o7ACJhDzLH7WJc4BTcb0w8= Subject key identifier: 37:39:81:7F:6B:7E:CE:11:B9:99:ED:34:CA:E1:DD:2C:3E:49:87:3C Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Certificate serial: 1CCC Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/486F198CC48C11F0BB6D2E87DAE4EC9C.roa Signing time: Tue 18 Nov 2025 14:38:44 +0000 ROA not before: Tue 18 Nov 2025 14:38:40 +0000 ROA not after: Sat 20 Nov 2027 14:38:40 +0000 asID: 212238 IP address blocks: 154.16.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7372 (0x1ccc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Validity Not Before: Nov 18 14:38:40 2025 GMT Not After : Nov 20 14:38:40 2027 GMT Subject: CN=691c84f4-c940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:21:59:52:7c:fb:a3:7d:5d:87:29:db:c9:3f: b1:53:a6:26:8d:72:b3:aa:21:16:a9:53:2b:67:8e: c7:32:1e:51:e3:ad:61:b9:da:0a:46:02:e6:d0:52: 86:08:bb:ba:9e:4c:91:20:34:06:97:01:93:3e:4e: 75:60:d8:e1:2a:d7:0a:73:a5:dd:28:e7:06:ed:4a: 8c:3c:bc:14:a4:55:b8:b7:da:98:70:a0:fc:db:a7: 6a:08:06:ac:c4:0c:a7:2d:a3:7e:78:02:c7:c1:6c: 32:e7:79:26:e0:b1:c6:d4:3c:84:28:e8:3c:80:8c: 42:b0:89:97:84:bf:70:53:7d:cd:45:76:3d:fe:b1: 0c:67:bb:31:d7:c2:f1:a7:50:e5:20:52:2f:34:ef: 4e:cd:46:70:33:32:6a:71:48:9e:40:d1:16:0f:41: 45:f7:a0:7e:b2:53:55:80:cf:e8:fe:92:0b:56:df: 46:dc:13:68:81:4d:22:79:7b:83:6c:be:43:42:9c: 2e:07:4c:6f:30:61:d9:ab:b2:6d:1b:f7:5b:07:c3: 46:79:53:cc:04:ab:35:94:06:e0:51:66:3c:bb:06: ce:e9:5e:a0:58:d0:6c:9f:45:60:9e:28:eb:45:62: 54:78:4b:00:c2:7c:fd:51:5d:b0:33:5e:5c:ae:c8: a8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:39:81:7F:6B:7E:CE:11:B9:99:ED:34:CA:E1:DD:2C:3E:49:87:3C X509v3 Authority Key Identifier: keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/486F198CC48C11F0BB6D2E87DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.16.60.0/24 Signature Algorithm: sha256WithRSAEncryption 48:52:3d:50:50:87:61:a3:56:04:b0:4e:37:f1:61:41:d6:49: e1:c5:fe:60:43:f3:7b:d4:68:e4:a1:07:ca:90:9a:7d:90:e5: e0:7e:9f:35:ba:df:04:ec:cf:c7:f2:a0:3d:57:d4:5b:04:7f: 8d:d8:8c:e7:2e:f2:09:2a:4f:a7:38:89:a2:24:9f:66:b5:5a: b5:7e:49:31:cf:2b:6a:bf:3f:fa:61:63:82:81:27:26:67:a6: 18:8c:c1:8a:e1:5a:96:74:dd:54:f2:69:11:8f:f6:6b:85:f2: 5f:d5:93:be:eb:95:96:dd:fc:4b:3d:72:67:0d:f8:a4:7b:88: 48:c6:5d:07:f7:9c:a3:8c:aa:fa:aa:9e:a6:bd:2e:6d:2a:05: 79:0d:f9:50:c3:02:56:a0:2d:03:44:86:a2:e1:af:70:15:a6: 1b:f0:1e:4a:ba:78:a7:08:76:97:92:90:87:da:24:e2:a0:14: 3c:02:26:77:a0:f6:0f:a0:dd:8e:92:1f:33:a3:9a:de:fd:c6: 9f:93:5e:a4:a4:17:23:e0:84:81:df:b9:2d:ef:79:fc:59:cf: 64:b5:93:a4:13:8d:f3:57:5f:24:00:7f:b0:f0:df:7d:c4:10: 2f:5e:fc:25:b6:3e:0e:bc:24:b0:04:7b:1e:d4:b9:32:14:74: 05:76:ac:85 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHMwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC MzRGM0Y5Q0E1MzAeFw0yNTExMTgxNDM4NDBaFw0yNzExMjAxNDM4NDBaMBgxFjAU BgNVBAMTDTY5MWM4NGY0LWM5NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDoIVlSfPujfV2HKdvJP7FTpiaNcrOqIRapUytnjscyHlHjrWG52gpGAubQ UoYIu7qeTJEgNAaXAZM+TnVg2OEq1wpzpd0o5wbtSow8vBSkVbi32phwoPzbp2oI BqzEDKcto354AsfBbDLneSbgscbUPIQo6DyAjEKwiZeEv3BTfc1Fdj3+sQxnuzHX wvGnUOUgUi80707NRnAzMmpxSJ5A0RYPQUX3oH6yU1WAz+j+kgtW30bcE2iBTSJ5 e4NsvkNCnC4HTG8wYdmrsm0b91sHw0Z5U8wEqzWUBuBRZjy7Bs7pXqBY0GyfRWCe KOtFYlR4SwDCfP1RXbAzXlyuyKhtAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUNzmB f2t+zhG5me00yuHdLD5JhzwwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5 ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4 QUVBMjI4LzQ4NkYxOThDQzQ4QzExRjBCQjZEMkU4N0RBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEDwwDQYJKoZIhvcNAQEL BQADggEBAEhSPVBQh2GjVgSwTjfxYUHWSeHF/mBD83vUaOShB8qQmn2Q5eB+nzW6 3wTsz8fyoD1X1FsEf43YjOcu8gkqT6c4iaIkn2a1WrV+STHPK2q/P/phY4KBJyZn phiMwYrhWpZ03VTyaRGP9muF8l/Vk77rlZbd/Es9cmcN+KR7iEjGXQf3nKOMqvqq nqa9Lm0qBXkN+VDDAlagLQNEhqLhr3AVphvwHkq6eKcIdpeSkIfaJOKgFDwCJneg 9g+g3Y6SHzOjmt79xp+TXqSkFyPghIHfuS3vefxZz2S1k6QTjfNXXyQAf7Dw333E EC9e/CW2Pg68JLAEex7UuTIUdAV2rIU= -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:17 2025 by rpki-client