This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC1E80D6D05E11F0883CF6CDDAE4EC9C.roa File: DC1E80D6D05E11F0883CF6CDDAE4EC9C.roa (raw, json) Hash identifier: QbUlFsfIaaOg+EtOQhkjKZO+kXLn9ZUFKl6hoKeode0= Subject key identifier: D6:7C:7E:F8:EA:F4:C6:A2:5C:B9:F0:7A:72:6B:DD:83:93:B9:35:55 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ACA2 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC1E80D6D05E11F0883CF6CDDAE4EC9C.roa Signing time: Wed 03 Dec 2025 15:43:50 +0000 ROA not before: Wed 03 Dec 2025 15:43:44 +0000 ROA not after: Sun 19 Nov 2028 15:43:44 +0000 asID: 17561 IP address blocks: 154.199.78.0/24 maxlen: 24 154.199.79.0/24 maxlen: 24 154.222.32.0/24 maxlen: 24 154.222.39.0/24 maxlen: 24 154.222.68.0/24 maxlen: 24 154.222.71.0/24 maxlen: 24 154.222.86.0/24 maxlen: 24 154.222.89.0/24 maxlen: 24 154.222.90.0/24 maxlen: 24 154.222.93.0/24 maxlen: 24 154.222.112.0/24 maxlen: 24 154.222.113.0/24 maxlen: 24 154.222.114.0/24 maxlen: 24 154.222.116.0/24 maxlen: 24 154.222.123.0/24 maxlen: 24 154.222.124.0/24 maxlen: 24 154.222.125.0/24 maxlen: 24 154.222.126.0/24 maxlen: 24 154.222.127.0/24 maxlen: 24 154.222.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109730 (0x1aca2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 15:43:44 2025 GMT Not After : Nov 19 15:43:44 2028 GMT Subject: CN=69305ab5-1284 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:33:1c:84:bc:3e:56:e3:ea:4b:d9:7a:97: af:ea:24:28:0a:ae:92:aa:1f:1e:22:9f:73:c4:a0: 0c:9b:a1:41:50:b9:17:35:41:4a:a7:81:20:86:c7: 81:a5:5e:e3:e4:c1:20:9c:d5:3c:66:a8:9a:3c:97: 51:e2:72:ed:2f:fc:ae:39:0f:55:8e:9b:9d:78:db: 22:a1:52:e7:f8:ce:d8:af:a6:85:8e:aa:d3:db:64: d2:85:de:3f:67:ec:9b:bb:7a:12:cf:b4:58:12:a7: f7:3b:aa:d4:5e:7c:c9:1f:16:83:44:39:0c:1e:53: 28:56:bb:31:6e:dd:a6:6d:8d:34:56:49:43:a6:3b: 37:e9:e0:bc:7c:f6:68:45:d9:ba:75:71:13:ef:09: 19:13:d0:aa:24:8f:44:66:8f:ba:50:26:4e:d1:d3: 01:b3:07:e7:f4:17:d0:cc:04:03:61:65:f5:4e:92: e7:77:ae:7c:3d:6d:65:8c:25:8f:ec:70:18:31:ae: 78:ac:e9:ea:21:c8:19:21:64:ce:9d:31:c1:e1:7f: 0d:6b:fd:09:3d:90:6f:c5:9a:ab:3b:ab:af:cf:97: 5e:05:55:e9:81:3b:58:4f:ac:e1:53:8b:c7:46:6c: 01:cd:d5:e9:41:19:c0:cb:37:e6:00:e7:65:fe:53: dd:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7C:7E:F8:EA:F4:C6:A2:5C:B9:F0:7A:72:6B:DD:83:93:B9:35:55 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC1E80D6D05E11F0883CF6CDDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.199.78.0/23 154.222.32.0/24 154.222.39.0/24 154.222.68.0/24 154.222.71.0/24 154.222.86.0/24 154.222.89.0-154.222.90.255 154.222.93.0/24 154.222.112.0-154.222.114.255 154.222.116.0/24 154.222.123.0-154.222.128.255 Signature Algorithm: sha256WithRSAEncryption 5b:85:e2:f4:bb:fd:3c:0c:a5:6b:1c:0d:02:ca:5e:26:39:90: a3:16:8f:0b:c1:f5:0d:7b:b2:87:64:21:7c:35:e2:9f:88:ef: 57:18:b7:27:e0:2a:b9:21:8c:b9:77:8a:44:62:7d:39:76:eb: 8a:3b:3e:50:aa:7c:25:f8:ea:be:4c:72:2d:3a:f3:46:1b:a0: b3:de:03:de:c9:07:67:af:d1:64:59:fe:a7:39:9d:a4:1b:5e: 5f:99:a8:e7:f2:0c:01:11:17:12:2b:db:9f:4f:95:4f:02:23: cc:17:f5:fc:bc:0e:5d:05:ee:cc:5e:b9:5f:3c:ec:02:4b:91: 59:b1:e9:04:00:4f:a2:83:2b:68:5a:22:31:fd:50:1a:30:9c: 9e:3b:0d:f3:16:b6:ab:c1:55:e9:02:2b:90:0e:6d:a1:4a:5b: 8c:b7:36:94:15:dc:e9:57:a1:6e:4a:d7:b3:be:4c:ba:74:22: 9b:99:97:76:a8:0a:50:71:3d:92:98:a6:5e:db:07:47:06:d7: 9e:67:2c:81:c1:9e:6a:b8:9f:67:1e:8d:9a:82:6b:e4:ac:9f: f8:70:e7:ef:e7:a2:2b:a4:81:65:8c:ce:17:18:60:56:3e:98: 48:68:64:70:c8:2c:f9:b4:b2:9f:8a:50:64:07:a9:04:ad:a9: 17:7e:18:31 -----BEGIN CERTIFICATE----- MIIF2DCCBMCgAwIBAgIDAayiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMTU0MzQ0WhcNMjgxMTE5MTU0MzQ0WjAYMRYw FAYDVQQDEw02OTMwNWFiNS0xMjg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAuQIzHIS8Plbj6kvZepev6iQoCq6Sqh8eIp9zxKAMm6FBULkXNUFKp4Eg hseBpV7j5MEgnNU8ZqiaPJdR4nLtL/yuOQ9VjpudeNsioVLn+M7Yr6aFjqrT22TS hd4/Z+ybu3oSz7RYEqf3O6rUXnzJHxaDRDkMHlMoVrsxbt2mbY00VklDpjs36eC8 fPZoRdm6dXET7wkZE9CqJI9EZo+6UCZO0dMBswfn9BfQzAQDYWX1TpLnd658PW1l jCWP7HAYMa54rOnqIcgZIWTOnTHB4X8Na/0JPZBvxZqrO6uvz5deBVXpgTtYT6zh U4vHRmwBzdXpQRnAyzfmAOdl/lPdxwIDAQABo4IC+TCCAvUwHQYDVR0OBBYEFNZ8 fvjq9MaiXLnwenJr3YOTuTVVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9EQzFFODBENkQwNUUxMUYwODgzQ0Y2Q0REQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQBmsdOAwQAmt4gAwQAmt4n AwQAmt5EAwQAmt5HAwQAmt5WMAwDBACa3lkDBACa3loDBACa3l0wDAMEBJrecAME AJrecgMEAJredDAMAwQAmt57AwQAmt6AMA0GCSqGSIb3DQEBCwUAA4IBAQBbheL0 u/08DKVrHA0Cyl4mOZCjFo8LwfUNe7KHZCF8NeKfiO9XGLcn4Cq5IYy5d4pEYn05 duuKOz5Qqnwl+Oq+THItOvNGG6Cz3gPeyQdnr9FkWf6nOZ2kG15fmajn8gwBERcS K9ufT5VPAiPMF/X8vA5dBe7MXrlfPOwCS5FZsekEAE+igytoWiIx/VAaMJyeOw3z FrarwVXpAiuQDm2hSluMtzaUFdzpV6FuStezvky6dCKbmZd2qApQcT2SmKZe2wdH BteeZyyBwZ5quJ9nHo2agmvkrJ/4cOfv56IrpIFljM4XGGBWPphIaGRwyCz5tLKf ilBkB6kErakXfhgx -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:51 2025 by rpki-client