This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D806A6CCD04511F0B5EEB0B3DAE4EC9C.roa File: D806A6CCD04511F0B5EEB0B3DAE4EC9C.roa (raw, json) Hash identifier: FEWTpp9vfs3gI0cKeD2iDsJtbArh/Car+BkM01IhqM8= Subject key identifier: B3:F1:02:FF:25:DC:B2:48:B2:92:13:B8:16:3A:D6:B3:61:62:7D:89 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AC5C Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D806A6CCD04511F0B5EEB0B3DAE4EC9C.roa Signing time: Wed 03 Dec 2025 12:45:00 +0000 ROA not before: Wed 03 Dec 2025 12:44:40 +0000 ROA not after: Mon 05 Jan 2026 12:44:40 +0000 asID: 49505 IP address blocks: 154.209.218.0/24 maxlen: 24 154.209.219.0/24 maxlen: 24 154.209.220.0/24 maxlen: 24 154.209.221.0/24 maxlen: 24 154.209.222.0/24 maxlen: 24 154.209.223.0/24 maxlen: 24 154.211.9.0/24 maxlen: 24 154.211.10.0/24 maxlen: 24 154.211.11.0/24 maxlen: 24 154.211.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 09 Dec 2025 00:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109660 (0x1ac5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 12:44:40 2025 GMT Not After : Jan 5 12:44:40 2026 GMT Subject: CN=693030cc-d587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0d:05:2b:c1:e3:68:07:74:3d:71:07:44:31: 0e:3a:86:35:b4:71:bb:89:c3:da:70:d9:28:92:3d: 3d:aa:3f:22:60:34:aa:21:60:f5:de:7b:ba:67:7d: 93:03:7f:c1:56:93:e9:97:e2:38:08:f9:97:81:94: d4:86:a8:02:e1:66:bd:50:61:78:30:3a:4a:a9:e7: d2:13:47:52:8f:7d:2a:b2:38:5a:af:11:f0:70:48: 17:34:f6:be:50:cb:42:32:ab:26:95:b7:cb:b9:5f: 49:90:61:9e:38:9a:ed:fc:bc:2e:23:58:06:40:54: 72:c5:6c:83:91:f1:4e:54:7d:db:67:b2:b6:a8:00: f1:8d:cd:c0:8e:2b:fe:8d:e9:50:92:53:63:95:de: 46:c6:7a:13:cd:6d:29:57:6c:42:47:dc:c7:4b:ab: 97:ed:91:b2:81:c5:86:43:04:91:8c:b9:8e:9f:9e: bf:f0:0f:1d:3a:04:4d:9f:5b:c9:86:c5:3f:ec:57: 06:e9:b8:a6:4a:99:19:c8:9b:a6:35:29:45:6f:f9: 7d:57:eb:ee:b1:ba:1e:d9:8b:bd:e1:a9:bd:07:be: 0d:f7:c3:44:39:b6:31:d1:07:18:ab:18:ad:48:02: a8:f8:ca:dd:95:20:d9:7b:12:50:35:03:2a:35:fb: a3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F1:02:FF:25:DC:B2:48:B2:92:13:B8:16:3A:D6:B3:61:62:7D:89 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D806A6CCD04511F0B5EEB0B3DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.209.218.0-154.209.223.255 154.211.9.0-154.211.11.255 154.211.16.0/24 Signature Algorithm: sha256WithRSAEncryption d8:0b:8c:af:a0:7e:57:e6:18:2b:42:01:ad:e3:29:91:a0:03: 54:39:5e:26:86:af:50:03:9c:0b:63:62:76:ac:0d:94:2c:a6: 09:5c:ad:d8:fc:80:d8:45:a4:dd:0c:b7:a5:e4:f9:6e:86:04: 0a:4d:92:55:aa:f2:e9:ed:92:c6:79:21:cd:0e:35:d3:51:60: 79:01:70:fc:ff:5c:59:11:74:5e:3f:f6:37:a3:d2:f1:1f:e3: c5:20:01:e6:c9:bd:e8:eb:b4:fa:13:23:77:5d:45:d7:06:0d: ef:91:f2:d5:95:89:d2:5f:56:ab:e2:2c:51:0f:94:87:38:02: bd:aa:95:55:ec:bb:31:a0:4b:43:61:c5:d9:fa:b1:e0:04:cf: eb:70:6a:18:0d:45:f9:0e:14:67:b6:e6:c6:47:96:44:fe:f8: c6:eb:d6:43:c6:90:df:7a:a7:6a:ec:fd:bb:fc:d9:d0:1f:5c: 41:7d:3e:36:1f:97:09:34:b1:f1:50:49:27:7f:77:e1:fb:85: f7:7d:b1:58:87:c1:6e:7f:da:de:9e:c9:03:e7:d9:cd:b0:7d: 37:36:e7:28:90:b1:70:78:85:fa:b7:95:21:05:11:90:32:3a: 35:cf:78:3f:54:e8:9a:67:36:09:99:42:a7:0f:4f:54:09:69: 07:e2:0c:0f -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIDAaxcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMTI0NDQwWhcNMjYwMTA1MTI0NDQwWjAYMRYw FAYDVQQDEw02OTMwMzBjYy1kNTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA1w0FK8HjaAd0PXEHRDEOOoY1tHG7icPacNkokj09qj8iYDSqIWD13nu6 Z32TA3/BVpPpl+I4CPmXgZTUhqgC4Wa9UGF4MDpKqefSE0dSj30qsjharxHwcEgX NPa+UMtCMqsmlbfLuV9JkGGeOJrt/LwuI1gGQFRyxWyDkfFOVH3bZ7K2qADxjc3A jiv+jelQklNjld5GxnoTzW0pV2xCR9zHS6uX7ZGygcWGQwSRjLmOn56/8A8dOgRN n1vJhsU/7FcG6bimSpkZyJumNSlFb/l9V+vusboe2Yu94am9B74N98NEObYx0QcY qxitSAKo+MrdlSDZexJQNQMqNfuj1QIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFLPx Av8l3LJIspITuBY61rNhYn2JMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9EODA2QTZDQ0QwNDUxMUYwQjVFRUIwQjNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAGa0doDBAWa0cAwDAME AJrTCQMEAprTCAMEAJrTEDANBgkqhkiG9w0BAQsFAAOCAQEA2AuMr6B+V+YYK0IB reMpkaADVDleJoavUAOcC2NidqwNlCymCVyt2PyA2EWk3Qy3peT5boYECk2SVary 6e2SxnkhzQ4101FgeQFw/P9cWRF0Xj/2N6PS8R/jxSAB5sm96Ou0+hMjd11F1wYN 75Hy1ZWJ0l9Wq+IsUQ+UhzgCvaqVVey7MaBLQ2HF2fqx4ATP63BqGA1F+Q4UZ7bm xkeWRP74xuvWQ8aQ33qnauz9u/zZ0B9cQX0+Nh+XCTSx8VBJJ3934fuF932xWIfB bn/a3p7JA+fZzbB9NzbnKJCxcHiF+reVIQURkDI6Nc94P1Tommc2CZlCpw9PVAlp B+IMDw== -----END CERTIFICATE-----Generated at Sun Dec 7 03:33:55 2025 by rpki-client