This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CD02402D06511F08A53D9F3DAE4EC9C.roa File: 2CD02402D06511F08A53D9F3DAE4EC9C.roa (raw, json) Hash identifier: KvZJ3t3TXhNYQVUtnHdIDaAOIDATus9086JrT6LXggQ= Subject key identifier: B4:21:8E:BB:BA:7E:FB:AA:AD:2D:F6:91:44:F1:C5:B3:B2:2A:06:28 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ACB0 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CD02402D06511F08A53D9F3DAE4EC9C.roa Signing time: Wed 03 Dec 2025 16:29:01 +0000 ROA not before: Wed 03 Dec 2025 16:28:56 +0000 ROA not after: Mon 27 Nov 2028 16:28:56 +0000 asID: 17561 IP address blocks: 154.194.52.0/24 maxlen: 24 154.194.53.0/24 maxlen: 24 154.204.104.0/24 maxlen: 24 154.204.111.0/24 maxlen: 24 154.204.113.0/24 maxlen: 24 154.204.120.0/24 maxlen: 24 154.204.121.0/24 maxlen: 24 154.204.123.0/24 maxlen: 24 154.204.126.0/24 maxlen: 24 154.210.119.0/24 maxlen: 24 154.210.120.0/24 maxlen: 24 154.210.121.0/24 maxlen: 24 154.210.122.0/24 maxlen: 24 154.210.123.0/24 maxlen: 24 154.210.124.0/24 maxlen: 24 154.210.125.0/24 maxlen: 24 154.210.126.0/24 maxlen: 24 154.210.127.0/24 maxlen: 24 154.217.4.0/24 maxlen: 24 154.217.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109744 (0x1acb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 16:28:56 2025 GMT Not After : Nov 27 16:28:56 2028 GMT Subject: CN=6930654d-f805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e9:98:df:e4:65:05:2d:09:f0:30:f9:94:36: c6:b0:9a:10:3a:7a:77:7e:36:d3:c8:11:cd:39:0d: 46:6e:21:67:4a:8f:a3:06:09:4e:cb:24:80:16:6e: 83:07:f9:24:d7:3c:11:55:d9:40:33:0e:85:3f:56: f4:3e:b6:2c:99:5c:e0:d3:41:03:8a:83:54:26:0c: 77:c8:df:1b:06:c4:d8:b1:99:19:f3:f8:ac:cb:b8: 41:75:23:b9:9b:09:d4:56:76:2a:7d:12:3e:55:ac: 7c:27:43:ba:6b:b1:d9:8f:75:76:9e:13:9d:4a:25: e3:01:81:bd:fd:b6:32:0f:f0:9b:b1:ab:9d:33:23: ff:11:1c:48:53:a8:c8:75:66:4a:f8:f0:c7:48:a8: 39:c7:78:d2:e2:2b:4f:e1:7e:50:48:6e:e0:f6:ed: 26:96:f4:ab:3b:b6:c2:6a:98:fc:0c:c9:ed:a9:38: e1:e0:51:bc:23:86:62:6d:45:b1:7c:27:e9:c7:76: c6:41:57:7f:9e:ec:be:f5:59:4f:3a:b8:6a:59:ba: e3:ef:39:9b:b9:89:f2:cd:27:db:0e:a2:3c:1d:e2: 08:f7:90:dc:a5:1c:6d:d7:20:eb:38:cb:ab:05:54: 53:7a:d7:46:c6:17:28:73:b8:12:65:04:83:a7:1a: 9f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:21:8E:BB:BA:7E:FB:AA:AD:2D:F6:91:44:F1:C5:B3:B2:2A:06:28 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CD02402D06511F08A53D9F3DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.194.52.0/23 154.204.104.0/24 154.204.111.0/24 154.204.113.0/24 154.204.120.0/23 154.204.123.0/24 154.204.126.0/24 154.210.119.0-154.210.127.255 154.217.4.0/24 154.217.37.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:bc:40:f9:36:5c:d5:bc:0a:61:b6:71:0f:52:6a:37:54:b6: 08:ce:49:c7:df:af:6c:79:af:d6:be:b2:ab:b4:b6:1f:70:b8: 1a:b8:d5:bf:d8:97:f7:50:f0:43:7b:24:10:a3:63:10:48:17: c4:a4:fd:62:a6:d6:8f:3a:89:10:59:34:38:2e:36:b3:bb:2e: f9:fd:1d:b6:a4:fe:04:88:e7:a5:08:bc:de:73:11:ce:85:5d: 53:8d:bf:8e:ba:f7:bd:96:49:12:0e:56:ec:b0:8a:10:09:b3: ca:33:3c:ae:2a:a3:55:fd:b1:76:a6:fd:0a:a0:d9:17:f0:ec: 5d:9e:f5:0b:aa:1d:d5:27:f3:db:db:fa:f6:61:d0:ea:d9:92: 3b:f8:b4:f9:93:8f:80:8e:2c:ee:b8:b6:17:48:d0:e1:48:cf: 44:fd:be:1f:4c:52:85:c7:ff:dd:ce:29:d2:ee:89:01:0e:0a: 04:66:b4:8d:8d:20:86:47:49:82:f9:39:22:3f:b0:66:b1:1c: c0:33:88:2a:32:6b:0e:f1:10:e9:b2:f7:c7:88:81:26:cd:10: fa:a8:e1:e0:00:c6:a8:9d:7b:cf:f7:bd:53:19:27:1b:2f:26: 97:b4:a5:a2:d7:79:e9:53:9e:45:5f:c9:c7:86:e3:73:4a:9c: 57:8d:cb:80 -----BEGIN CERTIFICATE----- MIIFwjCCBKqgAwIBAgIDAaywMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMTYyODU2WhcNMjgxMTI3MTYyODU2WjAYMRYw FAYDVQQDEw02OTMwNjU0ZC1mODA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAuOmY3+RlBS0J8DD5lDbGsJoQOnp3fjbTyBHNOQ1GbiFnSo+jBglOyySA Fm6DB/kk1zwRVdlAMw6FP1b0PrYsmVzg00EDioNUJgx3yN8bBsTYsZkZ8/isy7hB dSO5mwnUVnYqfRI+Vax8J0O6a7HZj3V2nhOdSiXjAYG9/bYyD/CbsaudMyP/ERxI U6jIdWZK+PDHSKg5x3jS4itP4X5QSG7g9u0mlvSrO7bCapj8DMntqTjh4FG8I4Zi bUWxfCfpx3bGQVd/nuy+9VlPOrhqWbrj7zmbuYnyzSfbDqI8HeII95DcpRxt1yDr OMurBVRTetdGxhcoc7gSZQSDpxqfcQIDAQABo4IC4zCCAt8wHQYDVR0OBBYEFLQh jru6fvuqrS32kUTxxbOyKgYoMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8yQ0QwMjQwMkQwNjUxMUYwOEE1M0Q5RjNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQBmsI0AwQAmsxoAwQAmsxv AwQAmsxxAwQBmsx4AwQAmsx7AwQAmsx+MAwDBACa0ncDBAea0gADBACa2QQDBACa 2SUwDQYJKoZIhvcNAQELBQADggEBAE28QPk2XNW8CmG2cQ9SajdUtgjOScffr2x5 r9a+squ0th9wuBq41b/Yl/dQ8EN7JBCjYxBIF8Sk/WKm1o86iRBZNDguNrO7Lvn9 Hbak/gSI56UIvN5zEc6FXVONv466972WSRIOVuywihAJs8ozPK4qo1X9sXam/Qqg 2Rfw7F2e9QuqHdUn89vb+vZh0OrZkjv4tPmTj4COLO64thdI0OFIz0T9vh9MUoXH /93OKdLuiQEOCgRmtI2NIIZHSYL5OSI/sGaxHMAziCoyaw7xEOmy98eIgSbNEPqo 4eAAxqide8/3vVMZJxsvJpe0paLXeelTnkVfyceG43NKnFeNy4A= -----END CERTIFICATE-----Generated at Sat Dec 6 22:12:28 2025 by rpki-client