This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA0CE0DCD13411F0B431128CDAE4EC9C.roa File: CA0CE0DCD13411F0B431128CDAE4EC9C.roa (raw, json) Hash identifier: LpcbZSjw526Im5tu9C9y4OfPMwXY/JzIG5/h15clDnU= Subject key identifier: 86:46:55:FA:03:AB:52:32:E3:59:70:0C:20:5C:1E:FA:3D:A1:9C:D2 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ACF8 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA0CE0DCD13411F0B431128CDAE4EC9C.roa Signing time: Thu 04 Dec 2025 17:15:11 +0000 ROA not before: Thu 04 Dec 2025 17:15:06 +0000 ROA not after: Sat 13 Dec 2025 17:15:06 +0000 asID: 54801 IP address blocks: 154.86.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109816 (0x1acf8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 4 17:15:06 2025 GMT Not After : Dec 13 17:15:06 2025 GMT Subject: CN=6931c19f-e28a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:16:e2:56:f9:3a:fd:8e:0e:21:15:14:9b: 2b:8a:47:01:ec:94:1b:30:44:38:35:d7:6b:fd:87: de:ab:a4:b2:12:e3:e1:e2:70:50:78:78:bc:e6:6a: 81:f4:5c:a6:75:f3:92:e2:fc:5d:08:fb:b9:e2:e2: ad:93:b8:85:d4:f5:a6:37:78:2f:b2:33:3e:da:72: 29:85:f0:a5:66:7a:f4:6c:80:8d:ec:6c:34:29:c5: 24:51:f5:78:74:55:fc:8f:dc:2d:13:8d:e5:00:6a: 5c:3d:65:16:2d:b3:60:21:65:66:43:3a:a8:75:c0: 2b:5d:1e:ee:48:8f:f4:2e:9c:b4:7f:63:ac:bc:cf: 16:e9:8c:ad:66:d9:04:e6:2c:72:e3:ac:4e:8c:dc: eb:69:54:ed:91:52:f4:ef:ca:8b:ce:8c:56:d7:83: 91:8b:95:63:31:d2:39:b8:29:21:b4:07:62:d9:95: 66:cd:57:95:d1:e1:93:ea:ec:11:23:c1:a6:c3:bc: 45:83:40:d0:f9:df:78:c1:80:17:20:c0:d9:1b:8d: 67:49:b6:46:72:63:92:15:cd:d4:a6:98:b6:2b:15: 2d:68:7b:89:b4:4c:f5:96:27:58:89:ae:84:d4:37: e5:ee:a6:3d:a7:8a:62:57:51:ac:04:cb:9b:68:f8: 25:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:46:55:FA:03:AB:52:32:E3:59:70:0C:20:5C:1E:FA:3D:A1:9C:D2 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CA0CE0DCD13411F0B431128CDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.86.0.0/24 Signature Algorithm: sha256WithRSAEncryption 58:6e:33:25:5e:fa:3d:8d:eb:eb:10:ee:50:10:dc:10:05:f8: ce:22:94:f4:86:ef:6d:df:72:76:5d:8a:43:0f:d7:49:84:1b: 63:9b:55:b7:27:9e:b0:7d:71:db:00:32:11:17:59:b0:a2:21: 84:85:ba:db:4b:1b:52:c6:39:b0:71:8d:e3:d6:86:32:56:b2: db:f9:ae:f0:2d:55:b2:64:58:d7:b1:27:97:84:bb:b1:8a:68: 06:96:3e:1b:9a:e7:04:4a:88:1f:d2:47:ee:a4:d8:ce:57:b0: 61:ea:c5:de:0d:aa:50:ff:ad:c7:2b:ab:fb:a9:98:91:a8:80: 09:b7:82:68:a9:8b:82:42:a6:bd:cc:16:43:72:fa:cc:9e:dc: ab:70:18:cd:99:75:27:06:5a:04:c1:b3:4d:de:52:0e:7a:bf: cc:df:e5:ec:b7:b4:86:1a:9b:81:c1:cb:ea:5e:a9:84:cc:c1: f7:1c:d6:97:d9:72:4d:49:0d:3c:df:1e:bf:d6:35:96:e5:b9: 7e:e3:5a:5a:1b:d1:ab:78:44:be:45:aa:be:6d:9d:5e:1e:ef: d4:50:5a:e3:bc:e0:ad:0c:a8:e3:a8:7c:01:a5:17:c6:3e:d0: 33:52:68:42:cd:1d:1d:62:34:93:75:23:ed:5e:01:4e:0b:0b: 1f:6e:c0:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAaz4MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjA0MTcxNTA2WhcNMjUxMjEzMTcxNTA2WjAYMRYw FAYDVQQDEw02OTMxYzE5Zi1lMjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAwDgW4lb5Ov2ODiEVFJsrikcB7JQbMEQ4Nddr/Yfeq6SyEuPh4nBQeHi8 5mqB9FymdfOS4vxdCPu54uKtk7iF1PWmN3gvsjM+2nIphfClZnr0bICN7Gw0KcUk UfV4dFX8j9wtE43lAGpcPWUWLbNgIWVmQzqodcArXR7uSI/0Lpy0f2OsvM8W6Yyt ZtkE5ixy46xOjNzraVTtkVL078qLzoxW14ORi5VjMdI5uCkhtAdi2ZVmzVeV0eGT 6uwRI8Gmw7xFg0DQ+d94wYAXIMDZG41nSbZGcmOSFc3Uppi2KxUtaHuJtEz1lidY ia6E1Dfl7qY9p4piV1GsBMubaPglswIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFIZG VfoDq1Iy41lwDCBcHvo9oZzSMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DQTBDRTBEQ0QxMzQxMUYwQjQzMTEyOENEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlYAMA0GCSqGSIb3DQEB CwUAA4IBAQBYbjMlXvo9jevrEO5QENwQBfjOIpT0hu9t33J2XYpDD9dJhBtjm1W3 J56wfXHbADIRF1mwoiGEhbrbSxtSxjmwcY3j1oYyVrLb+a7wLVWyZFjXsSeXhLux imgGlj4bmucESogf0kfupNjOV7Bh6sXeDapQ/63HK6v7qZiRqIAJt4JoqYuCQqa9 zBZDcvrMntyrcBjNmXUnBloEwbNN3lIOer/M3+Xst7SGGpuBwcvqXqmEzMH3HNaX 2XJNSQ083x6/1jWW5bl+41paG9GreES+Raq+bZ1eHu/UUFrjvOCtDKjjqHwBpRfG PtAzUmhCzR0dYjSTdSPtXgFOCwsfbsAI -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:45 2025 by rpki-client