This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D4ED952D05811F0880218A8DAE4EC9C.roa File: 8D4ED952D05811F0880218A8DAE4EC9C.roa (raw, json) Hash identifier: y0w4EWIlJEN9LRhUnQLW60AwBy+ELwLu3DSqtb9t6xo= Subject key identifier: 05:28:2E:99:E4:F1:85:D3:C6:0F:6E:E9:A7:6D:AA:DC:57:21:57:95 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC90 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D4ED952D05811F0880218A8DAE4EC9C.roa Signing time: Wed 03 Dec 2025 14:58:40 +0000 ROA not before: Wed 03 Dec 2025 14:58:35 +0000 ROA not after: Sun 19 Nov 2028 14:58:35 +0000 asID: 17561 IP address blocks: 154.202.144.0/24 maxlen: 24 154.202.145.0/24 maxlen: 24 154.202.146.0/24 maxlen: 24 154.202.147.0/24 maxlen: 24 154.202.148.0/24 maxlen: 24 154.202.149.0/24 maxlen: 24 154.202.150.0/24 maxlen: 24 154.202.151.0/24 maxlen: 24 154.202.152.0/24 maxlen: 24 154.202.153.0/24 maxlen: 24 154.202.154.0/24 maxlen: 24 154.202.155.0/24 maxlen: 24 154.202.156.0/24 maxlen: 24 154.202.157.0/24 maxlen: 24 154.202.158.0/24 maxlen: 24 154.202.159.0/24 maxlen: 24 154.202.192.0/24 maxlen: 24 154.202.193.0/24 maxlen: 24 154.202.194.0/24 maxlen: 24 154.202.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109712 (0x1ac90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 14:58:35 2025 GMT Not After : Nov 19 14:58:35 2028 GMT Subject: CN=69305020-c489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3b:ca:ec:83:b3:f7:2e:52:69:7b:fc:9e:83: 28:6d:be:06:d4:9d:16:9e:14:89:9c:7e:5d:7d:92: 26:66:52:d7:70:64:3b:68:29:a9:ed:89:62:d3:6e: 1f:3e:ef:c3:10:69:2d:25:51:2c:6a:70:99:83:86: 0b:38:f5:b2:cb:22:0b:36:17:fb:af:d2:b3:96:80: f0:36:f3:a1:51:dd:5c:62:5c:95:e2:22:c8:0d:e6: 20:95:66:84:50:87:bf:f6:1a:36:7d:b6:f3:fd:17: fe:9c:8e:12:92:c5:f1:80:3b:d2:e6:b8:ad:69:78: 98:a2:3a:cc:4c:46:c4:68:1b:62:de:12:48:2a:11: b8:e2:c0:6c:98:32:1a:e7:5e:0a:25:f8:5a:75:94: 2d:11:73:a7:3e:23:50:cc:78:7d:4a:37:bb:b2:dd: 41:ad:97:46:d3:bf:ba:d2:9e:bf:21:05:15:be:b9: d1:a7:7f:75:ab:a7:57:ec:74:81:ae:04:54:cf:03: 11:da:b6:e4:79:05:3c:15:fb:9b:ac:b4:db:85:40: 95:cf:ad:91:7a:36:e3:77:a5:0a:f9:10:ca:fb:88: 86:d1:0f:8e:88:20:a4:6f:16:a6:50:d6:0f:59:5a: c7:ae:87:6f:07:9e:ad:bf:2d:a0:9f:9c:2d:2c:24: ff:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:28:2E:99:E4:F1:85:D3:C6:0F:6E:E9:A7:6D:AA:DC:57:21:57:95 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D4ED952D05811F0880218A8DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.202.144.0/20 154.202.192.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:03:55:0f:68:be:ff:5b:7a:38:e0:01:16:a0:04:02:de:89: 4c:c9:43:8e:dc:dd:c6:ba:ab:bc:6d:bd:5e:45:f4:90:c7:98: b2:18:c5:d7:d3:f4:c7:9b:16:76:73:e0:ef:42:ff:45:83:26: 71:75:d6:4c:59:eb:ea:d0:8d:f2:5d:58:40:19:cc:79:7b:0b: 96:d4:39:e4:a3:b3:27:17:b6:01:e6:b2:a9:99:2d:61:6d:b2: 8a:bc:30:56:16:e4:b3:24:05:bc:bf:52:06:a8:70:53:6f:44: 9a:10:97:ca:9e:64:d0:c8:b8:e7:fb:80:46:f9:fb:fb:2b:3e: 6a:b5:45:91:4f:98:25:6e:62:f0:a7:ac:f0:57:26:d6:fe:22: 2d:5f:5f:8a:7d:90:ae:ec:86:85:0b:d2:83:99:a5:44:25:36: 9b:13:0a:b7:a5:8d:bd:a8:fd:65:07:8f:4c:d7:e8:c2:f1:30: e1:48:9a:83:6f:ff:8f:35:64:41:46:dd:d8:6f:98:88:c7:c1: 37:e0:31:bc:21:71:4e:ab:9b:a1:59:d7:ef:f5:1b:dd:d7:e1: c0:27:f1:43:c3:9c:32:cd:20:7d:93:5a:f1:56:ae:59:c1:14: c1:36:86:a0:bd:fe:6c:a5:fa:e9:0c:72:ad:b6:71:16:db:a2: 02:cb:53:13 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAayQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMTQ1ODM1WhcNMjgxMTE5MTQ1ODM1WjAYMRYw FAYDVQQDEw02OTMwNTAyMC1jNDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAmTvK7IOz9y5SaXv8noMobb4G1J0WnhSJnH5dfZImZlLXcGQ7aCmp7Yli 024fPu/DEGktJVEsanCZg4YLOPWyyyILNhf7r9KzloDwNvOhUd1cYlyV4iLIDeYg lWaEUIe/9ho2fbbz/Rf+nI4SksXxgDvS5ritaXiYojrMTEbEaBti3hJIKhG44sBs mDIa514KJfhadZQtEXOnPiNQzHh9Sje7st1BrZdG07+60p6/IQUVvrnRp391q6dX 7HSBrgRUzwMR2rbkeQU8FfubrLTbhUCVz62Rejbjd6UK+RDK+4iG0Q+OiCCkbxam UNYPWVrHrodvB56tvy2gn5wtLCT/JwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFAUo Lpnk8YXTxg9u6adtqtxXIVeVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC84RDRFRDk1MkQwNTgxMUYwODgwMjE4QThEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEmsqQAwQCmsrAMA0GCSqG SIb3DQEBCwUAA4IBAQBMA1UPaL7/W3o44AEWoAQC3olMyUOO3N3Guqu8bb1eRfSQ x5iyGMXX0/THmxZ2c+DvQv9FgyZxddZMWevq0I3yXVhAGcx5ewuW1Dnko7MnF7YB 5rKpmS1hbbKKvDBWFuSzJAW8v1IGqHBTb0SaEJfKnmTQyLjn+4BG+fv7Kz5qtUWR T5glbmLwp6zwVybW/iItX1+KfZCu7IaFC9KDmaVEJTabEwq3pY29qP1lB49M1+jC 8TDhSJqDb/+PNWRBRt3Yb5iIx8E34DG8IXFOq5uhWdfv9Rvd1+HAJ/FDw5wyzSB9 k1rxVq5ZwRTBNoagvf5spfrpDHKttnEW26ICy1MT -----END CERTIFICATE-----Generated at Sat Dec 6 21:11:24 2025 by rpki-client