This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D6E96676C48811F0B5418CEFDAE4EC9C.roa File: D6E96676C48811F0B5418CEFDAE4EC9C.roa (raw, json) Hash identifier: yY4WiGhIreBpOEQ1FnR5OVX7EKFZjqChvSXyUYSisAU= Subject key identifier: 84:6A:3A:BD:CF:AC:8D:F0:75:85:D1:1B:B0:1D:8B:CD:9C:7F:C2:9D Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Certificate serial: 1CBA Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D6E96676C48811F0B5418CEFDAE4EC9C.roa Signing time: Tue 18 Nov 2025 14:14:05 +0000 ROA not before: Tue 18 Nov 2025 14:14:01 +0000 ROA not after: Sat 20 Nov 2027 14:14:01 +0000 asID: 212238 IP address blocks: 154.16.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7354 (0x1cba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53 Validity Not Before: Nov 18 14:14:01 2025 GMT Not After : Nov 20 14:14:01 2027 GMT Subject: CN=691c7f2d-f00c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b7:e8:df:4a:cc:af:46:f6:76:5a:e5:ea:c7: ce:31:41:42:fb:44:c4:c4:5a:86:25:47:5c:59:0d: a2:b1:88:a3:55:bd:dd:ef:36:fe:6b:5b:d0:24:19: 52:07:b1:8d:54:53:0c:35:f1:3e:8b:0e:c2:e0:fc: 65:1b:3d:1f:cc:68:17:fa:81:10:f1:00:ee:79:f6: 69:32:ba:b6:15:38:38:b7:dc:4f:39:a8:38:24:ef: 65:fd:c9:d4:0e:da:fe:3b:f2:5c:39:a6:4f:40:9c: 6e:13:15:e7:b1:54:17:ab:6d:41:d0:d3:b7:18:4a: 8e:85:dc:c2:ef:8b:1e:a6:5f:e5:eb:da:98:d2:7e: 33:c1:d1:42:32:20:f8:22:f7:4f:4e:4c:58:f5:8a: 31:d2:42:4a:44:cf:87:8f:eb:68:3d:81:ec:df:c2: a7:f7:6e:63:46:49:dd:d6:2e:b0:e1:c2:dc:53:f9: 87:5f:cb:89:49:01:d0:5f:93:5e:56:e8:0d:3b:c8: d3:1f:09:08:55:11:bc:2a:76:a4:15:fc:a1:87:1a: 4c:de:28:d7:c6:31:4f:5d:5b:b0:aa:a6:1e:6c:44: 95:e7:b2:60:ff:ce:de:b9:ff:b5:6f:fd:c2:a0:de: 17:34:aa:63:d6:66:0d:5c:24:9b:5e:64:de:81:d9: 5d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:6A:3A:BD:CF:AC:8D:F0:75:85:D1:1B:B0:1D:8B:CD:9C:7F:C2:9D X509v3 Authority Key Identifier: keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D6E96676C48811F0B5418CEFDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.16.24.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:25:3f:ff:f4:1e:3c:53:7e:5c:47:58:22:4a:3e:bf:04:d6: 83:24:01:c2:43:85:77:c9:91:b8:df:ef:4f:05:0d:00:34:95: 77:9c:22:e7:a4:91:3c:e3:1a:33:7d:53:73:5d:0d:5c:38:5a: 67:84:70:e0:b4:03:ed:46:c9:4f:6d:39:e8:46:d5:ca:6e:9e: 56:39:4f:d9:14:9a:87:60:1e:1e:01:55:ba:86:9e:a1:1f:08: 2a:d2:a7:72:2a:0c:89:ea:12:13:e4:fd:d9:bf:35:d7:b1:f1: d4:2e:18:83:4e:eb:e1:11:78:2b:ec:37:21:a7:99:45:da:97: d1:32:cb:41:d1:1c:29:6b:ce:1a:34:32:7d:6a:85:44:52:e5: 12:f2:40:fe:fc:20:9c:ec:ff:80:43:b3:da:a9:ad:e3:d7:f8: cd:65:40:a2:2e:dd:ca:fc:8c:85:10:fc:69:e7:77:44:06:2a: c7:ff:32:47:2c:68:6d:19:49:4d:f6:44:b6:c7:93:f9:95:38: 32:9a:03:c9:f9:fc:ee:d1:d7:4c:47:10:ef:e0:26:67:d6:91: 26:7d:23:f3:b8:21:df:91:0a:6e:d7:16:13:72:03:89:2a:d6: de:13:c1:46:7e:9a:04:28:8d:57:90:13:94:73:e0:16:27:26: 6f:52:b9:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICHLowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC MzRGM0Y5Q0E1MzAeFw0yNTExMTgxNDE0MDFaFw0yNzExMjAxNDE0MDFaMBgxFjAU BgNVBAMTDTY5MWM3ZjJkLWYwMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQClt+jfSsyvRvZ2WuXqx84xQUL7RMTEWoYlR1xZDaKxiKNVvd3vNv5rW9Ak GVIHsY1UUww18T6LDsLg/GUbPR/MaBf6gRDxAO559mkyurYVODi33E85qDgk72X9 ydQO2v478lw5pk9AnG4TFeexVBerbUHQ07cYSo6F3MLvix6mX+Xr2pjSfjPB0UIy IPgi909OTFj1ijHSQkpEz4eP62g9gezfwqf3bmNGSd3WLrDhwtxT+Ydfy4lJAdBf k15W6A07yNMfCQhVEbwqdqQV/KGHGkzeKNfGMU9dW7Cqph5sRJXnsmD/zt65/7Vv /cKg3hc0qmPWZg1cJJteZN6B2V0PAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUhGo6 vc+sjfB1hdEbsB2LzZx/wp0wHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5 ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4 QUVBMjI4L0Q2RTk2Njc2QzQ4ODExRjBCNTQxOENFRkRBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEBgwDQYJKoZIhvcNAQEL BQADggEBAI8lP//0HjxTflxHWCJKPr8E1oMkAcJDhXfJkbjf708FDQA0lXecIuek kTzjGjN9U3NdDVw4WmeEcOC0A+1GyU9tOehG1cpunlY5T9kUmodgHh4BVbqGnqEf CCrSp3IqDInqEhPk/dm/Ndex8dQuGINO6+EReCvsNyGnmUXal9Eyy0HRHClrzho0 Mn1qhURS5RLyQP78IJzs/4BDs9qprePX+M1lQKIu3cr8jIUQ/Gnnd0QGKsf/Mkcs aG0ZSU32RLbHk/mVODKaA8n5/O7R10xHEO/gJmfWkSZ9I/O4Id+RCm7XFhNyA4kq 1t4TwUZ+mgQojVeQE5Rz4BYnJm9SuYA= -----END CERTIFICATE-----Generated at Sat Dec 6 18:22:17 2025 by rpki-client