This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFE7FBC0D03911F08083A6E7DAE4EC9C.roa File: AFE7FBC0D03911F08083A6E7DAE4EC9C.roa (raw, json) Hash identifier: 6jT2ZLKGHlt3DNl60n2YXkaHIZ84fTHP1D0J6IaOh/g= Subject key identifier: 5E:FB:7B:F5:E9:E7:09:88:73:47:3A:30:01:9D:A4:22:8E:B5:7E:60 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC4F Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFE7FBC0D03911F08083A6E7DAE4EC9C.roa Signing time: Wed 03 Dec 2025 11:17:43 +0000 ROA not before: Wed 03 Dec 2025 11:17:34 +0000 ROA not after: Sat 25 Nov 2028 11:17:34 +0000 asID: 17561 IP address blocks: 154.83.149.0/24 maxlen: 24 154.83.156.0/24 maxlen: 24 154.83.188.0/24 maxlen: 24 154.83.189.0/24 maxlen: 24 154.83.208.0/24 maxlen: 24 154.83.212.0/24 maxlen: 24 154.83.214.0/24 maxlen: 24 154.83.246.0/24 maxlen: 24 154.94.128.0/24 maxlen: 24 154.94.129.0/24 maxlen: 24 154.94.130.0/24 maxlen: 24 154.94.132.0/24 maxlen: 24 154.94.141.0/24 maxlen: 24 154.94.145.0/24 maxlen: 24 154.94.147.0/24 maxlen: 24 154.94.149.0/24 maxlen: 24 154.94.151.0/24 maxlen: 24 154.94.158.0/24 maxlen: 24 154.94.161.0/24 maxlen: 24 154.94.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109647 (0x1ac4f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 11:17:34 2025 GMT Not After : Nov 25 11:17:34 2028 GMT Subject: CN=69301c57-6b33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:c2:a6:e3:e4:6e:59:d6:27:a9:1d:0e:d0: e4:ba:9a:fc:8d:5e:31:82:23:1e:3c:56:93:d9:d7: 32:98:88:97:2b:aa:c6:3e:cd:3e:a7:5e:ec:46:42: 3b:e4:3d:47:78:9a:c4:26:d8:21:5c:24:41:3e:7f: 53:dd:06:b7:03:55:46:2b:2c:36:c6:e4:ff:51:9e: 42:40:ca:17:62:59:ec:32:25:a8:bc:d2:03:20:cc: bd:b4:17:5f:ad:36:df:b4:5e:82:4b:f9:92:50:36: ef:90:22:20:d4:e2:38:ca:62:47:ce:7f:03:d1:e0: 70:c8:7f:9e:26:06:97:22:90:eb:6e:36:73:be:4b: 5a:44:7e:84:84:53:70:68:88:48:4d:e3:87:ce:2f: 42:81:61:55:8b:ca:7f:62:6f:f3:ec:a1:4b:94:f5: d9:eb:c1:c3:c9:3e:43:d9:9a:2f:82:e1:ee:21:de: 7f:47:a3:df:fa:83:ca:75:c2:1e:0a:69:d3:d9:72: 14:f7:18:9a:57:b2:6c:1c:77:db:34:1f:33:72:bb: c3:92:06:d2:9e:ba:c3:15:97:ec:a1:d9:c1:ab:ec: 58:4b:07:d0:2c:bd:97:09:2c:61:a9:cd:05:f8:5d: 60:5e:e0:25:b9:e4:71:ff:f5:b9:5a:bf:96:64:f3: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FB:7B:F5:E9:E7:09:88:73:47:3A:30:01:9D:A4:22:8E:B5:7E:60 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AFE7FBC0D03911F08083A6E7DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.83.149.0/24 154.83.156.0/24 154.83.188.0/23 154.83.208.0/24 154.83.212.0/24 154.83.214.0/24 154.83.246.0/24 154.94.128.0-154.94.130.255 154.94.132.0/24 154.94.141.0/24 154.94.145.0/24 154.94.147.0/24 154.94.149.0/24 154.94.151.0/24 154.94.158.0/24 154.94.161.0/24 154.94.165.0/24 Signature Algorithm: sha256WithRSAEncryption ad:86:fb:db:94:89:56:34:c5:e0:88:0b:c1:d2:e6:36:e7:6b: 1b:8b:de:75:78:a5:8b:4d:12:2d:83:ba:f9:c8:4f:4f:ca:97: 4c:4a:ca:12:df:61:c5:fb:a6:76:f8:0c:ae:ae:fd:e0:c5:3f: 02:2a:9d:6a:89:d5:2d:3c:03:7a:86:3b:3f:b9:7b:49:b7:b0: 9b:7f:3d:92:26:39:57:67:2c:0a:dc:ab:f7:2e:4a:13:0d:77: 04:8a:af:5b:dc:31:75:d6:b8:80:c6:19:09:e0:87:c0:cb:a4: cc:d7:3f:fd:aa:7b:bb:38:89:e6:10:ac:8d:b3:5c:bf:cc:d2: 31:4c:2f:2d:54:46:0f:c6:8b:e1:9b:ab:81:cb:b5:e7:7b:c3: 6f:a2:0e:08:90:72:c5:e9:33:a8:4e:d5:62:f9:48:08:2b:2a: 46:98:bb:58:24:44:16:cc:df:ea:26:3e:36:8f:93:79:cb:0b: 0a:9c:86:3a:a9:d3:d8:07:35:4d:5e:0e:b1:03:24:d6:96:cf: b1:e1:2b:3e:31:ae:d7:e1:3c:da:d4:e7:e6:01:74:0b:ca:f8: 0c:d9:1d:1e:62:1f:60:c6:a2:5d:71:bb:24:91:db:46:56:de: e9:cb:75:92:ac:8b:a9:d2:b8:44:dd:b4:38:41:0c:c7:94:e3: 85:a8:dc:82 -----BEGIN CERTIFICATE----- MIIF7TCCBNWgAwIBAgIDAaxPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMTExNzM0WhcNMjgxMTI1MTExNzM0WjAYMRYw FAYDVQQDEw02OTMwMWM1Ny02YjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAuj/CpuPkblnWJ6kdDtDkupr8jV4xgiMePFaT2dcymIiXK6rGPs0+p17s RkI75D1HeJrEJtghXCRBPn9T3Qa3A1VGKyw2xuT/UZ5CQMoXYlnsMiWovNIDIMy9 tBdfrTbftF6CS/mSUDbvkCIg1OI4ymJHzn8D0eBwyH+eJgaXIpDrbjZzvktaRH6E hFNwaIhITeOHzi9CgWFVi8p/Ym/z7KFLlPXZ68HDyT5D2ZovguHuId5/R6Pf+oPK dcIeCmnT2XIU9xiaV7JsHHfbNB8zcrvDkgbSnrrDFZfsodnBq+xYSwfQLL2XCSxh qc0F+F1gXuAlueRx//W5Wr+WZPOBpwIDAQABo4IDDjCCAwowHQYDVR0OBBYEFF77 e/Xp5wmIc0c6MAGdpCKOtX5gMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9BRkU3RkJDMEQwMzkxMUYwODA4M0E2RTdEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAJpTlQMEAJpTnAMEAZpT vAMEAJpT0AMEAJpT1AMEAJpT1gMEAJpT9jAMAwQHml6AAwQAml6CAwQAml6EAwQA ml6NAwQAml6RAwQAml6TAwQAml6VAwQAml6XAwQAml6eAwQAml6hAwQAml6lMA0G CSqGSIb3DQEBCwUAA4IBAQCthvvblIlWNMXgiAvB0uY252sbi951eKWLTRItg7r5 yE9PypdMSsoS32HF+6Z2+Ayurv3gxT8CKp1qidUtPAN6hjs/uXtJt7Cbfz2SJjlX ZywK3Kv3LkoTDXcEiq9b3DF11riAxhkJ4IfAy6TM1z/9qnu7OInmEKyNs1y/zNIx TC8tVEYPxovhm6uBy7Xne8Nvog4IkHLF6TOoTtVi+UgIKypGmLtYJEQWzN/qJj42 j5N5ywsKnIY6qdPYBzVNXg6xAyTWls+x4Ss+Ma7X4Tza1OfmAXQLyvgM2R0eYh9g xqJdcbskkdtGVt7py3WSrIup0rhE3bQ4QQzHlOOFqNyC -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:54 2025 by rpki-client