This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58D5E786D02311F082EF6CDEDAE4EC9C.roa File: 58D5E786D02311F082EF6CDEDAE4EC9C.roa (raw, json) Hash identifier: YPCfX3/mffWHN3cDB5HWno4kuW3FKydx3SZePy2v38k= Subject key identifier: 38:5E:13:7C:39:E1:5C:5B:86:29:4A:72:72:59:E9:AB:ED:D6:A6:C2 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC17 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58D5E786D02311F082EF6CDEDAE4EC9C.roa Signing time: Wed 03 Dec 2025 08:37:48 +0000 ROA not before: Wed 03 Dec 2025 08:37:43 +0000 ROA not after: Wed 17 Dec 2025 08:37:43 +0000 asID: 54801 IP address blocks: 154.81.140.0/24 maxlen: 24 154.81.164.0/24 maxlen: 24 154.83.128.0/24 maxlen: 24 154.83.135.0/24 maxlen: 24 154.83.137.0/24 maxlen: 24 154.83.141.0/24 maxlen: 24 154.83.191.0/24 maxlen: 24 154.83.209.0/24 maxlen: 24 154.83.211.0/24 maxlen: 24 154.83.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109591 (0x1ac17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 08:37:43 2025 GMT Not After : Dec 17 08:37:43 2025 GMT Subject: CN=692ff6dc-eb6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:04:8e:d9:51:e4:a0:a4:74:8e:5f:40:2e:4c: 7f:16:c0:5b:fc:e9:7e:39:72:7a:1f:c6:c6:97:fe: ad:19:27:ad:05:09:f3:2d:87:ae:0d:c3:d4:49:c4: 38:e3:35:c5:d0:c4:5c:5f:24:2d:22:cf:69:4b:de: 5a:28:67:99:18:a6:2f:95:99:f4:4e:cd:88:68:a0: 58:8e:0a:71:53:fc:96:7a:72:f8:05:60:5a:96:71: fa:1b:c0:73:b2:3a:e2:e2:77:98:ba:02:6b:62:eb: da:bd:5d:3b:3d:b6:66:b6:03:a4:4e:6c:e5:f0:11: 4b:75:7e:47:f6:56:e4:e8:d0:f6:db:14:d2:9d:d2: 23:97:d8:23:fc:79:e0:63:1d:32:c5:85:15:16:6d: ed:0b:0b:b0:8c:61:14:89:6f:d6:a3:42:3d:33:6b: d0:a5:55:dc:91:f0:55:73:81:f4:f1:55:92:b0:bd: 12:15:82:5c:a3:7c:0d:9d:a1:09:c3:50:ba:1c:0a: 38:de:77:a1:25:58:35:4e:61:4a:c2:b5:6c:8f:d2: 0c:7b:39:df:fd:02:55:50:f5:3c:47:f2:dc:51:2b: 29:a3:75:ce:9e:1e:eb:6e:a0:58:1a:60:81:b6:1c: 5c:ff:ea:fb:ff:a5:73:36:6a:f6:cc:ad:48:9e:ee: b4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5E:13:7C:39:E1:5C:5B:86:29:4A:72:72:59:E9:AB:ED:D6:A6:C2 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/58D5E786D02311F082EF6CDEDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.81.140.0/24 154.81.164.0/24 154.83.128.0/24 154.83.135.0/24 154.83.137.0/24 154.83.141.0/24 154.83.191.0/24 154.83.209.0/24 154.83.211.0/24 154.83.247.0/24 Signature Algorithm: sha256WithRSAEncryption 65:00:be:08:8c:f9:f7:de:d8:16:2c:ea:52:43:ec:36:27:91: ad:db:14:c4:b1:33:f1:89:f0:33:08:e5:78:8c:f7:34:f8:47: fc:8e:65:52:76:05:c5:b9:c5:c9:57:97:84:db:8e:50:4f:c4: c9:41:09:ae:4f:a7:17:c0:9b:82:35:d7:66:e2:ea:4b:29:28: fa:60:03:38:7e:98:aa:67:02:8b:18:85:b2:ae:0e:7f:21:d3: 69:c6:39:e7:b8:d7:a5:96:53:d9:4c:86:fe:01:65:0e:d6:7a: fc:24:60:93:a5:1e:78:0e:2b:e7:46:ee:ab:f2:62:1d:0f:5b: 4d:6d:9f:90:c1:15:f2:64:b3:4d:77:fb:40:75:58:59:66:b4: 82:5c:ed:d3:96:28:12:42:59:13:10:49:06:97:f8:26:21:63: ed:ef:60:c9:b1:2e:ae:bf:4c:76:6e:e3:9b:29:b8:b9:01:82: e3:d7:78:28:19:ca:e7:32:42:6c:37:70:d5:fe:23:6f:ce:2a: 70:66:78:7f:7b:1e:3c:7b:48:67:54:c6:6c:2c:e5:eb:30:31: 65:34:6f:2a:bd:1e:f8:06:7f:9a:e9:69:28:27:e3:7e:d0:d8: 18:43:0a:3e:c2:e3:eb:57:41:54:6a:44:0b:7e:e7:9c:d9:49: 61:37:96:eb -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIDAawXMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMDgzNzQzWhcNMjUxMjE3MDgzNzQzWjAYMRYw FAYDVQQDEw02OTJmZjZkYy1lYjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA7gSO2VHkoKR0jl9ALkx/FsBb/Ol+OXJ6H8bGl/6tGSetBQnzLYeuDcPU ScQ44zXF0MRcXyQtIs9pS95aKGeZGKYvlZn0Ts2IaKBYjgpxU/yWenL4BWBalnH6 G8Bzsjri4neYugJrYuvavV07PbZmtgOkTmzl8BFLdX5H9lbk6ND22xTSndIjl9gj /HngYx0yxYUVFm3tCwuwjGEUiW/Wo0I9M2vQpVXckfBVc4H08VWSsL0SFYJco3wN naEJw1C6HAo43nehJVg1TmFKwrVsj9IMeznf/QJVUPU8R/LcUSspo3XOnh7rbqBY GmCBthxc/+r7/6VzNmr2zK1Inu60HwIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFDhe E3w54VxbhilKcnJZ6avt1qbCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC81OEQ1RTc4NkQwMjMxMUYwODJFRjZDREVEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAmlGMAwQAmlGkAwQAmlOA AwQAmlOHAwQAmlOJAwQAmlONAwQAmlO/AwQAmlPRAwQAmlPTAwQAmlP3MA0GCSqG SIb3DQEBCwUAA4IBAQBlAL4IjPn33tgWLOpSQ+w2J5Gt2xTEsTPxifAzCOV4jPc0 +Ef8jmVSdgXFucXJV5eE245QT8TJQQmuT6cXwJuCNddm4upLKSj6YAM4fpiqZwKL GIWyrg5/IdNpxjnnuNelllPZTIb+AWUO1nr8JGCTpR54DivnRu6r8mIdD1tNbZ+Q wRXyZLNNd/tAdVhZZrSCXO3TligSQlkTEEkGl/gmIWPt72DJsS6uv0x2buObKbi5 AYLj13goGcrnMkJsN3DV/iNvzipwZnh/ex48e0hnVMZsLOXrMDFlNG8qvR74Bn+a 6WkoJ+N+0NgYQwo+wuPrV0FUakQLfuec2UlhN5br -----END CERTIFICATE-----Generated at Sat Dec 6 10:51:44 2025 by rpki-client