This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8DFA474D03A11F0BB8705EEDAE4EC9C.roa File: C8DFA474D03A11F0BB8705EEDAE4EC9C.roa (raw, json) Hash identifier: mjOTftDYb11H+M6oV+S502+ynfgrI/mArc+BNRBtXKo= Subject key identifier: 22:EE:AA:1E:61:1F:20:80:3F:E4:F5:1B:59:C4:03:36:58:1C:2B:38 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC51 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8DFA474D03A11F0BB8705EEDAE4EC9C.roa Signing time: Wed 03 Dec 2025 11:25:35 +0000 ROA not before: Wed 03 Dec 2025 11:25:29 +0000 ROA not after: Sat 25 Nov 2028 11:25:29 +0000 asID: 17561 IP address blocks: 154.90.192.0/24 maxlen: 24 154.90.193.0/24 maxlen: 24 154.90.194.0/24 maxlen: 24 154.90.195.0/24 maxlen: 24 154.94.166.0/24 maxlen: 24 154.94.168.0/24 maxlen: 24 154.94.169.0/24 maxlen: 24 154.94.170.0/24 maxlen: 24 154.94.174.0/24 maxlen: 24 154.94.175.0/24 maxlen: 24 154.94.176.0/24 maxlen: 24 154.94.178.0/24 maxlen: 24 154.94.180.0/24 maxlen: 24 154.94.181.0/24 maxlen: 24 154.94.183.0/24 maxlen: 24 154.94.184.0/24 maxlen: 24 154.94.185.0/24 maxlen: 24 154.94.187.0/24 maxlen: 24 154.94.188.0/24 maxlen: 24 154.94.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 01:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109649 (0x1ac51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 11:25:29 2025 GMT Not After : Nov 25 11:25:29 2028 GMT Subject: CN=69301e2f-2a4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d9:b0:68:3c:ec:06:80:36:be:fe:29:a1:75: 35:f6:fe:27:fd:82:37:2f:40:8a:32:de:64:53:48: 3c:aa:d5:a2:48:99:f0:5b:14:bf:3f:19:a7:33:fd: da:00:a5:a0:4a:32:90:cc:07:7f:e3:dc:84:68:96: 93:92:7c:10:fb:9e:fe:62:e5:89:28:ba:ba:e0:aa: c5:aa:83:e3:0e:b0:7d:3a:66:93:10:22:a3:7d:2a: b6:22:47:03:f4:8e:c1:d0:d1:42:e7:b7:16:98:eb: 40:d2:9f:89:81:b2:55:1f:f8:5b:0d:4e:4d:27:4f: 89:41:1a:79:d0:f9:d7:16:80:93:31:ea:65:55:59: 55:a0:ef:fb:22:e2:8d:10:c4:28:ca:c1:12:5a:21: 7f:e0:4d:4a:94:a8:1d:51:38:90:14:79:96:e9:85: c2:d0:54:ad:25:1c:56:b1:da:12:5b:26:fb:e8:12: ef:4d:bc:61:a8:ac:01:53:64:1a:e6:d2:60:00:35: a7:cf:ea:64:54:e5:17:7f:88:84:c3:29:d5:c2:96: 01:f1:b9:d9:ac:73:21:c4:0c:90:ab:b4:fc:36:73: 37:38:4a:59:9d:c7:6f:c1:f9:b3:ea:6b:1e:b5:b7: f9:4f:0a:38:1a:67:60:e2:bf:52:81:c8:28:c1:55: f1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EE:AA:1E:61:1F:20:80:3F:E4:F5:1B:59:C4:03:36:58:1C:2B:38 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8DFA474D03A11F0BB8705EEDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.90.192.0/22 154.94.166.0/24 154.94.168.0-154.94.170.255 154.94.174.0-154.94.176.255 154.94.178.0/24 154.94.180.0/23 154.94.183.0-154.94.185.255 154.94.187.0-154.94.188.255 154.94.191.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:bb:7e:30:52:74:4b:32:ce:ec:25:2e:5c:47:01:ba:42:ca: e9:7d:e7:8f:54:dc:56:23:c9:27:7e:0a:55:fd:9b:10:07:17: 2b:c4:1f:7f:f4:21:f4:85:60:0c:ec:78:d3:84:47:5d:17:58: 0c:d1:05:38:b5:7f:ba:ef:b0:04:70:43:5d:09:04:2f:a6:51: 1b:43:06:f8:98:88:90:c0:d7:8f:a5:fc:aa:d6:6b:55:75:11: 26:21:50:d6:4a:74:8b:e1:dd:e4:77:ce:13:cf:31:d9:7f:e4: 44:6b:c2:86:81:e6:4c:77:99:0a:45:8f:5a:ed:7b:ce:02:a8: 61:8f:36:14:78:d1:b8:0d:69:cf:93:51:8d:6d:43:e4:53:c1: b9:b1:87:c2:ef:a2:d5:8d:91:1c:58:48:78:14:53:ac:0d:b5: f5:f9:42:1e:22:3a:34:74:18:9a:9e:fa:e1:ff:ce:df:12:eb: d4:b8:4e:70:d8:6b:8c:12:85:b5:8b:bc:36:91:a7:0a:bb:7c: b7:a4:63:cf:c3:ce:c9:73:9a:01:15:bf:70:b7:81:f6:10:a6: a5:94:9c:21:dc:a0:5c:0e:87:07:1f:77:b9:00:cb:1f:73:85: 13:68:f8:28:7b:ac:15:55:b8:cb:46:6e:78:25:bd:df:f6:27: 6f:19:63:21 -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIDAaxRMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMTEyNTI5WhcNMjgxMTI1MTEyNTI5WjAYMRYw FAYDVQQDEw02OTMwMWUyZi0yYTRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAsNmwaDzsBoA2vv4poXU19v4n/YI3L0CKMt5kU0g8qtWiSJnwWxS/Pxmn M/3aAKWgSjKQzAd/49yEaJaTknwQ+57+YuWJKLq64KrFqoPjDrB9OmaTECKjfSq2 IkcD9I7B0NFC57cWmOtA0p+JgbJVH/hbDU5NJ0+JQRp50PnXFoCTMeplVVlVoO/7 IuKNEMQoysESWiF/4E1KlKgdUTiQFHmW6YXC0FStJRxWsdoSWyb76BLvTbxhqKwB U2Qa5tJgADWnz+pkVOUXf4iEwynVwpYB8bnZrHMhxAyQq7T8NnM3OEpZncdvwfmz 6msetbf5Two4Gmdg4r9SgcgowVXxGQIDAQABo4IC9TCCAvEwHQYDVR0OBBYEFCLu qh5hHyCAP+T1G1nEAzZYHCs4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DOERGQTQ3NEQwM0ExMUYwQkI4NzA1RUVEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQCmlrAAwQAml6mMAwDBAOa XqgDBACaXqowDAMEAZpergMEAJpesAMEAJpesgMEAZpetDAMAwQAml63AwQBml64 MAwDBACaXrsDBACaXrwDBACaXr8wDQYJKoZIhvcNAQELBQADggEBAEq7fjBSdEsy zuwlLlxHAbpCyul9549U3FYjySd+ClX9mxAHFyvEH3/0IfSFYAzseNOER10XWAzR BTi1f7rvsARwQ10JBC+mURtDBviYiJDA14+l/KrWa1V1ESYhUNZKdIvh3eR3zhPP Mdl/5ERrwoaB5kx3mQpFj1rte84CqGGPNhR40bgNac+TUY1tQ+RTwbmxh8LvotWN kRxYSHgUU6wNtfX5Qh4iOjR0GJqe+uH/zt8S69S4TnDYa4wShbWLvDaRpwq7fLek Y8/DzslzmgEVv3C3gfYQpqWUnCHcoFwOhwcfd7kAyx9zhRNo+Ch7rBVVuMtGbngl vd/2J28ZYyE= -----END CERTIFICATE-----Generated at Sun Dec 7 02:05:41 2025 by rpki-client