This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28BBEA38D0E511F0B2A2A9A1DAE4EC9C.roa File: 28BBEA38D0E511F0B2A2A9A1DAE4EC9C.roa (raw, json) Hash identifier: AuhntApmMgFSvMT4vrlDEP6kCMBOZ7Z1y89vk7kbipY= Subject key identifier: C2:DC:CE:6B:DA:22:7A:8A:66:11:11:0A:AD:D3:D8:E2:7F:AB:44:E0 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ACCC Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28BBEA38D0E511F0B2A2A9A1DAE4EC9C.roa Signing time: Thu 04 Dec 2025 07:45:10 +0000 ROA not before: Thu 04 Dec 2025 07:45:05 +0000 ROA not after: Sat 18 Nov 2028 07:45:05 +0000 asID: 17561 IP address blocks: 154.89.134.0/24 maxlen: 24 154.89.135.0/24 maxlen: 24 154.89.136.0/24 maxlen: 24 154.89.137.0/24 maxlen: 24 154.89.138.0/24 maxlen: 24 154.89.139.0/24 maxlen: 24 154.89.208.0/24 maxlen: 24 154.89.209.0/24 maxlen: 24 154.89.210.0/24 maxlen: 24 154.89.211.0/24 maxlen: 24 154.89.212.0/24 maxlen: 24 154.89.213.0/24 maxlen: 24 154.89.214.0/24 maxlen: 24 154.89.215.0/24 maxlen: 24 154.89.216.0/24 maxlen: 24 154.89.217.0/24 maxlen: 24 154.89.218.0/24 maxlen: 24 154.89.219.0/24 maxlen: 24 154.89.220.0/24 maxlen: 24 154.89.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109772 (0x1accc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 4 07:45:05 2025 GMT Not After : Nov 18 07:45:05 2028 GMT Subject: CN=69313c06-cbb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ea:da:fe:8a:25:ba:d6:c3:c3:20:2a:21:a5: 35:28:47:43:5a:13:a1:81:bb:83:d8:2b:c7:9d:f7: 82:10:0b:4b:ec:fb:0f:eb:ed:aa:df:46:a3:f9:90: a6:c4:db:da:de:a9:b2:f4:b1:22:01:43:85:e1:14: b3:67:41:c8:75:8a:97:78:8a:87:d2:d5:bb:8a:62: 46:b4:60:22:3b:36:f8:e3:4a:51:69:06:be:2a:08: 91:8e:b2:d6:2e:14:dd:81:af:75:84:0d:ce:68:e5: 65:e4:38:88:25:75:32:4c:6d:da:51:e9:3e:20:8f: 41:f5:99:33:f7:20:c2:5c:0f:25:05:50:f3:99:6e: a8:02:70:03:8c:78:2c:60:c1:f2:2e:05:b9:ad:81: 8f:e3:83:1e:c9:fa:5b:be:74:23:07:a1:e7:06:b9: f0:8f:0e:1e:9c:0c:2c:e5:b7:e8:34:fa:d8:c2:df: 0f:cc:80:4a:c5:57:f0:5f:66:eb:b5:03:2d:4d:4b: e9:1f:3d:4b:f0:98:e8:99:c4:50:96:2f:b1:0d:a8: 88:f1:2e:eb:37:4e:05:52:fe:fa:68:25:a9:50:8a: 63:ab:8f:f7:03:da:ad:bc:cb:ac:92:ff:7e:04:4f: ae:c0:2f:0a:11:fe:0e:55:48:91:a0:04:f5:1a:3e: 89:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DC:CE:6B:DA:22:7A:8A:66:11:11:0A:AD:D3:D8:E2:7F:AB:44:E0 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28BBEA38D0E511F0B2A2A9A1DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.89.134.0-154.89.139.255 154.89.208.0-154.89.221.255 Signature Algorithm: sha256WithRSAEncryption aa:48:b7:86:5a:b4:fd:ad:48:db:e8:08:6f:bb:70:8e:c5:4f: 25:ba:dc:f7:8e:e9:5f:b1:49:cf:dd:51:27:d9:cf:94:6e:25: e6:6e:8d:b0:da:b3:03:f2:1f:1b:5a:37:52:bf:b6:8d:ec:ec: 95:c0:ba:66:a2:57:38:6a:3e:10:0b:a1:9f:0e:1f:4b:fa:f9: 80:40:f4:7c:71:05:0c:92:d8:fd:09:ca:6f:86:12:5f:5c:c9: 0d:19:40:60:56:f6:4a:5c:6c:1e:d5:8e:9e:8c:21:c0:ee:cc: 48:89:36:4e:6b:5b:b2:50:b6:7f:a7:80:6a:ec:a6:29:05:99: 63:46:ca:2b:11:8f:dd:fc:0e:c9:43:46:3c:24:0d:37:8c:2b: 5d:7c:95:17:64:dd:74:b8:41:64:22:45:f9:96:bc:27:b3:57: 9b:c1:50:65:af:e8:5b:89:b4:87:2c:13:bb:53:f1:da:2c:e8: 2b:dd:34:81:85:8a:d5:f6:96:b9:ca:dd:1e:de:71:bb:e9:7f: c1:d8:b0:cb:cd:6a:57:6a:36:85:3f:d4:90:d7:d7:fd:7f:db: 54:66:92:59:56:77:83:2b:e3:9f:1b:49:b9:78:52:38:bc:63: 68:ab:8e:da:8c:36:82:49:e2:39:c2:c6:f9:6a:04:bc:5f:ec: ab:c0:35:f5 -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgIDAazMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjA0MDc0NTA1WhcNMjgxMTE4MDc0NTA1WjAYMRYw FAYDVQQDEw02OTMxM2MwNi1jYmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA2ura/oolutbDwyAqIaU1KEdDWhOhgbuD2CvHnfeCEAtL7PsP6+2q30aj +ZCmxNva3qmy9LEiAUOF4RSzZ0HIdYqXeIqH0tW7imJGtGAiOzb440pRaQa+KgiR jrLWLhTdga91hA3OaOVl5DiIJXUyTG3aUek+II9B9Zkz9yDCXA8lBVDzmW6oAnAD jHgsYMHyLgW5rYGP44MeyfpbvnQjB6HnBrnwjw4enAws5bfoNPrYwt8PzIBKxVfw X2brtQMtTUvpHz1L8JjomcRQli+xDaiI8S7rN04FUv76aCWpUIpjq4/3A9qtvMus kv9+BE+uwC8KEf4OVUiRoAT1Gj6JJQIDAQABo4ICuzCCArcwHQYDVR0OBBYEFMLc zmvaInqKZhERCq3T2OJ/q0TgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8yOEJCRUEzOEQwRTUxMUYwQjJBMkE5QTFEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAGaWYYDBAKaWYgwDAME BJpZ0AMEAZpZ3DANBgkqhkiG9w0BAQsFAAOCAQEAqki3hlq0/a1I2+gIb7twjsVP Jbrc947pX7FJz91RJ9nPlG4l5m6NsNqzA/IfG1o3Ur+2jezslcC6ZqJXOGo+EAuh nw4fS/r5gED0fHEFDJLY/QnKb4YSX1zJDRlAYFb2SlxsHtWOnowhwO7MSIk2Tmtb slC2f6eAauymKQWZY0bKKxGP3fwOyUNGPCQNN4wrXXyVF2TddLhBZCJF+Za8J7NX m8FQZa/oW4m0hywTu1Px2izoK900gYWK1faWucrdHt5xu+l/wdiwy81qV2o2hT/U kNfX/X/bVGaSWVZ3gyvjnxtJuXhSOLxjaKuO2ow2gkniOcLG+WoEvF/sq8A19Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:07:08 2025 by rpki-client