This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F252A7AD02F11F08611DDA8DAE4EC9C.roa File: 3F252A7AD02F11F08611DDA8DAE4EC9C.roa (raw, json) Hash identifier: CpZi1K8nGgf+bbLEMUy/m8Qb+p2TOpITkTTrFxgcnsI= Subject key identifier: 48:9C:F9:49:B5:4D:0A:85:75:2D:CA:0F:30:39:AE:35:D6:45:ED:EE Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC31 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F252A7AD02F11F08611DDA8DAE4EC9C.roa Signing time: Wed 03 Dec 2025 10:03:00 +0000 ROA not before: Wed 03 Dec 2025 10:02:50 +0000 ROA not after: Fri 25 Aug 2028 10:02:50 +0000 asID: 17561 IP address blocks: 154.82.128.0/24 maxlen: 24 154.82.129.0/24 maxlen: 24 154.82.140.0/24 maxlen: 24 154.82.141.0/24 maxlen: 24 154.82.142.0/24 maxlen: 24 154.82.143.0/24 maxlen: 24 154.82.144.0/24 maxlen: 24 154.82.145.0/24 maxlen: 24 154.82.146.0/24 maxlen: 24 154.82.147.0/24 maxlen: 24 154.82.149.0/24 maxlen: 24 154.82.192.0/24 maxlen: 24 154.82.194.0/24 maxlen: 24 154.84.172.0/24 maxlen: 24 154.84.185.0/24 maxlen: 24 154.84.187.0/24 maxlen: 24 154.84.191.0/24 maxlen: 24 154.90.68.0/24 maxlen: 24 154.90.69.0/24 maxlen: 24 154.93.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109617 (0x1ac31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 10:02:50 2025 GMT Not After : Aug 25 10:02:50 2028 GMT Subject: CN=69300ad4-4063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:00:66:09:c4:78:eb:96:04:76:b1:f9:1e:bd: 66:34:f9:13:a0:7e:e9:b5:57:0c:67:1c:34:db:56: b7:56:26:ea:6e:93:c6:f3:0a:7f:0a:9d:a3:a5:ab: 10:01:74:94:36:cf:1a:48:3c:20:82:b0:48:15:95: 5e:16:e1:d6:7b:f3:ee:03:6c:8a:e7:33:d0:8b:f4: 92:26:63:4b:a6:7c:a4:a4:d2:ea:58:11:7e:56:63: 43:65:60:1b:35:e5:f3:83:c7:e3:9f:39:37:55:3b: 66:f6:e7:e5:75:4e:86:f8:2a:95:18:7d:9f:3b:43: 7e:5d:d2:c3:92:13:c3:86:8e:c2:ab:8f:cc:17:13: 69:75:00:99:6b:92:b1:c4:77:d0:d4:fb:54:0c:4e: 0c:d6:7b:6b:62:3e:e9:5b:35:ef:ca:e8:c2:c3:0b: 97:45:52:06:5d:e8:a7:be:92:2e:54:bb:3b:10:31: 4f:47:a1:71:fb:2e:32:c9:ae:0c:35:81:6e:4a:37: 42:a2:ab:ec:a1:4d:a6:8d:c6:8d:df:37:57:1b:2b: ad:01:ca:00:dc:1f:b7:32:f7:87:2c:34:0d:92:58: 61:2d:7c:56:08:ce:e8:b0:89:9e:dd:4c:0c:1f:fb: ca:ed:b4:21:97:f4:b8:f3:3c:49:54:5d:e5:23:fe: 8a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:9C:F9:49:B5:4D:0A:85:75:2D:CA:0F:30:39:AE:35:D6:45:ED:EE X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F252A7AD02F11F08611DDA8DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.82.128.0/23 154.82.140.0-154.82.147.255 154.82.149.0/24 154.82.192.0/24 154.82.194.0/24 154.84.172.0/24 154.84.185.0/24 154.84.187.0/24 154.84.191.0/24 154.90.68.0/23 154.93.16.0/24 Signature Algorithm: sha256WithRSAEncryption 81:7d:99:90:42:c7:f7:79:d0:7e:43:d6:14:1c:06:c9:64:d1: 3d:84:b5:7a:26:b3:2c:d0:30:27:8e:f4:39:e3:aa:09:3b:1f: 56:1a:c0:0c:69:66:12:b7:43:01:4c:e0:03:1a:b8:a5:4f:76: 45:a6:16:a9:f1:19:40:ad:2b:26:6b:8b:f3:d1:a7:36:b7:6f: 0a:2d:5c:1a:c2:28:04:c9:71:ef:e6:8e:b6:24:5f:dd:ce:c4: a4:e1:cd:83:80:01:47:5c:98:61:f8:37:72:96:40:8e:ae:36: ba:e0:d9:0e:5f:90:ac:22:c3:bf:de:c6:51:ce:72:5f:a5:da: ac:2a:06:9b:7e:54:e1:f4:b1:76:b2:5b:45:c3:e2:2a:b7:23: b4:aa:ff:d4:9e:ad:d6:ac:0c:e9:12:6c:ff:94:20:c3:84:3a: 0e:39:f7:11:86:3a:c6:2e:1f:0f:e9:b5:a3:d3:2c:6b:78:53: 37:78:a6:5e:4a:74:91:48:69:0b:ca:23:6a:27:ee:6e:53:e5: c1:4e:75:77:cd:95:85:47:0d:7f:50:b7:b7:90:d8:3c:6f:5d: 9b:a2:73:74:85:75:b5:dc:03:87:02:23:6c:d1:64:8a:f7:b5: fa:b9:3d:26:e1:9c:33:89:eb:f3:75:47:aa:57:7b:39:89:de: 21:16:ba:0b -----BEGIN CERTIFICATE----- MIIFyDCCBLCgAwIBAgIDAawxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMTAwMjUwWhcNMjgwODI1MTAwMjUwWjAYMRYw FAYDVQQDEw02OTMwMGFkNC00MDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAxgBmCcR465YEdrH5Hr1mNPkToH7ptVcMZxw021a3VibqbpPG8wp/Cp2j pasQAXSUNs8aSDwggrBIFZVeFuHWe/PuA2yK5zPQi/SSJmNLpnykpNLqWBF+VmND ZWAbNeXzg8fjnzk3VTtm9ufldU6G+CqVGH2fO0N+XdLDkhPDho7Cq4/MFxNpdQCZ a5KxxHfQ1PtUDE4M1ntrYj7pWzXvyujCwwuXRVIGXeinvpIuVLs7EDFPR6Fx+y4y ya4MNYFuSjdCoqvsoU2mjcaN3zdXGyutAcoA3B+3MveHLDQNklhhLXxWCM7osIme 3UwMH/vK7bQhl/S48zxJVF3lI/6KrQIDAQABo4IC6TCCAuUwHQYDVR0OBBYEFEic +Um1TQqFdS3KDzA5rjXWRe3uMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8zRjI1MkE3QUQwMkYxMUYwODYxMUREQThEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQBmlKAMAwDBAKaUowDBAKa UpADBACaUpUDBACaUsADBACaUsIDBACaVKwDBACaVLkDBACaVLsDBACaVL8DBAGa WkQDBACaXRAwDQYJKoZIhvcNAQELBQADggEBAIF9mZBCx/d50H5D1hQcBslk0T2E tXomsyzQMCeO9Dnjqgk7H1YawAxpZhK3QwFM4AMauKVPdkWmFqnxGUCtKyZri/PR pza3bwotXBrCKATJce/mjrYkX93OxKThzYOAAUdcmGH4N3KWQI6uNrrg2Q5fkKwi w7/exlHOcl+l2qwqBpt+VOH0sXayW0XD4iq3I7Sq/9SerdasDOkSbP+UIMOEOg45 9xGGOsYuHw/ptaPTLGt4Uzd4pl5KdJFIaQvKI2on7m5T5cFOdXfNlYVHDX9Qt7eQ 2DxvXZuic3SFdbXcA4cCI2zRZIr3tfq5PSbhnDOJ6/N1R6pXezmJ3iEWugs= -----END CERTIFICATE-----Generated at Sat Dec 6 16:34:38 2025 by rpki-client