This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99F5ABBCD05911F09523E4ACDAE4EC9C.roa File: 99F5ABBCD05911F09523E4ACDAE4EC9C.roa (raw, json) Hash identifier: lH9U4QdyDNkgH9xmiFECyu1OfhIBzXcGiPUIMog2y4I= Subject key identifier: 3A:0A:B5:26:D6:E4:25:30:79:32:7A:AB:1B:37:A4:BC:CB:24:8E:AA Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC92 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99F5ABBCD05911F09523E4ACDAE4EC9C.roa Signing time: Wed 03 Dec 2025 15:06:11 +0000 ROA not before: Wed 03 Dec 2025 15:06:06 +0000 ROA not after: Sun 19 Nov 2028 15:06:06 +0000 asID: 17561 IP address blocks: 154.202.196.0/24 maxlen: 24 154.202.197.0/24 maxlen: 24 154.202.198.0/24 maxlen: 24 154.202.199.0/24 maxlen: 24 154.202.200.0/24 maxlen: 24 154.202.201.0/24 maxlen: 24 154.202.202.0/24 maxlen: 24 154.202.203.0/24 maxlen: 24 154.202.204.0/24 maxlen: 24 154.202.205.0/24 maxlen: 24 154.202.206.0/24 maxlen: 24 154.202.207.0/24 maxlen: 24 154.202.208.0/24 maxlen: 24 154.202.209.0/24 maxlen: 24 154.202.210.0/24 maxlen: 24 154.202.211.0/24 maxlen: 24 154.202.212.0/24 maxlen: 24 154.202.213.0/24 maxlen: 24 154.202.214.0/24 maxlen: 24 154.202.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109714 (0x1ac92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 15:06:06 2025 GMT Not After : Nov 19 15:06:06 2028 GMT Subject: CN=693051e2-f174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:97:91:9b:24:74:d6:d8:e6:9a:80:3e:e3:0b: 75:91:e7:1c:5b:43:0a:64:20:af:35:39:d8:ca:74: 67:81:40:a9:a4:a2:37:5c:92:7c:83:21:63:d4:a1: 5d:da:6f:1f:bc:ce:74:15:15:30:8d:8b:be:5e:ed: 46:95:c9:fb:8b:8b:c9:27:3c:05:f7:56:68:2a:7d: 5a:b6:7b:7d:5f:51:10:41:3b:bf:5b:e3:9c:d7:08: cb:2c:7f:cc:d1:d9:18:90:25:68:0d:f5:d5:3c:e0: a1:74:73:c3:90:a6:77:86:4c:4e:69:2e:d4:4f:ab: ac:10:70:e4:f2:2f:b2:3e:7e:71:f0:5d:88:0a:94: 88:5c:6a:cd:79:7e:52:09:47:2c:ef:7b:e5:74:3a: 0c:44:09:37:a0:53:b2:9c:08:74:26:b0:77:95:71: 52:77:f9:34:75:48:38:7e:1e:ea:13:22:8e:af:6a: 47:64:06:fa:32:75:2d:4a:a4:02:37:77:ec:a5:b5: c4:03:21:5f:ae:70:68:3c:88:fb:1e:5b:7e:a6:a4: 9d:da:45:68:24:21:b3:1e:e4:8f:f7:1b:1b:9f:de: af:58:ac:3c:0c:6e:19:88:54:2e:ac:c3:8f:3f:c1: bb:83:fd:31:ba:a1:a0:2e:00:77:a2:d1:61:e5:76: 83:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0A:B5:26:D6:E4:25:30:79:32:7A:AB:1B:37:A4:BC:CB:24:8E:AA X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99F5ABBCD05911F09523E4ACDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.202.196.0-154.202.215.255 Signature Algorithm: sha256WithRSAEncryption 9c:4a:d5:dc:5e:6e:45:b0:be:62:9e:e2:b1:d0:b2:51:7e:b3: 6b:ce:98:a7:45:51:4f:ab:a1:91:f3:1d:23:fe:b6:15:b6:68: 72:f9:37:1b:95:9d:0a:ad:e9:13:e1:31:ce:d4:5c:da:8d:9f: d4:65:a8:ca:c5:bc:9a:d1:2a:55:8b:d6:e9:05:ca:88:7a:c9: 9a:28:e9:13:ce:c1:93:e8:f1:0c:24:20:20:79:ad:1d:d3:ab: 92:54:20:4e:8a:c0:98:6a:ac:56:5d:69:e2:93:39:74:5f:6f: d6:a0:ab:d9:ac:7d:78:d0:eb:28:c6:8b:d5:06:ba:29:b6:57: df:b4:38:f3:96:86:de:13:60:22:45:82:0a:90:84:3e:f1:e3: b9:47:8b:04:6e:ff:87:84:66:c0:f1:78:b0:ef:2c:a4:1d:d0: b1:9d:30:69:f9:f0:79:14:a1:06:07:ee:fd:19:27:a3:d3:19: a5:61:3d:bb:79:d7:53:21:f0:37:ce:9b:dc:01:28:69:9b:b1: b9:da:56:96:9d:db:65:cf:9b:67:16:d5:a4:b7:42:66:d0:4d: 39:c4:7b:e4:bc:83:01:c0:56:be:45:9c:2c:18:46:35:49:bd: 37:78:e6:60:10:df:65:a3:d3:8b:fd:53:3d:0c:a4:e4:74:63: a4:4f:20:fb -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIDAaySMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMTUwNjA2WhcNMjgxMTE5MTUwNjA2WjAYMRYw FAYDVQQDEw02OTMwNTFlMi1mMTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAppeRmyR01tjmmoA+4wt1keccW0MKZCCvNTnYynRngUCppKI3XJJ8gyFj 1KFd2m8fvM50FRUwjYu+Xu1Glcn7i4vJJzwF91ZoKn1atnt9X1EQQTu/W+Oc1wjL LH/M0dkYkCVoDfXVPOChdHPDkKZ3hkxOaS7UT6usEHDk8i+yPn5x8F2ICpSIXGrN eX5SCUcs73vldDoMRAk3oFOynAh0JrB3lXFSd/k0dUg4fh7qEyKOr2pHZAb6MnUt SqQCN3fspbXEAyFfrnBoPIj7Hlt+pqSd2kVoJCGzHuSP9xsbn96vWKw8DG4ZiFQu rMOPP8G7g/0xuqGgLgB3otFh5XaD/QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDoK tSbW5CUweTJ6qxs3pLzLJI6qMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC85OUY1QUJCQ0QwNTkxMUYwOTUyM0U0QUNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKaysQDBAOaytAwDQYJ KoZIhvcNAQELBQADggEBAJxK1dxebkWwvmKe4rHQslF+s2vOmKdFUU+roZHzHSP+ thW2aHL5NxuVnQqt6RPhMc7UXNqNn9RlqMrFvJrRKlWL1ukFyoh6yZoo6RPOwZPo 8QwkICB5rR3Tq5JUIE6KwJhqrFZdaeKTOXRfb9agq9msfXjQ6yjGi9UGuim2V9+0 OPOWht4TYCJFggqQhD7x47lHiwRu/4eEZsDxeLDvLKQd0LGdMGn58HkUoQYH7v0Z J6PTGaVhPbt511Mh8DfOm9wBKGmbsbnaVpad22XPm2cW1aS3QmbQTTnEe+S8gwHA Vr5FnCwYRjVJvTd45mAQ32Wj04v9Uz0MpOR0Y6RPIPs= -----END CERTIFICATE-----Generated at Sat Dec 6 14:54:42 2025 by rpki-client