This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9442CB0D05F11F08EC6BAD2DAE4EC9C.roa File: E9442CB0D05F11F08EC6BAD2DAE4EC9C.roa (raw, json) Hash identifier: DdvM3NKSD/3H0IiYvlrXyeTvI6285DgO5om6nGhL17Y= Subject key identifier: E5:88:5A:E1:2B:FB:03:57:CA:16:D4:9D:53:FF:13:4F:FE:5B:3E:B3 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01ACA4 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9442CB0D05F11F08EC6BAD2DAE4EC9C.roa Signing time: Wed 03 Dec 2025 15:51:21 +0000 ROA not before: Wed 03 Dec 2025 15:51:13 +0000 ROA not after: Sun 19 Nov 2028 15:51:13 +0000 asID: 17561 IP address blocks: 154.193.0.0/24 maxlen: 24 154.193.1.0/24 maxlen: 24 154.193.4.0/24 maxlen: 24 154.193.6.0/24 maxlen: 24 154.193.7.0/24 maxlen: 24 154.193.8.0/24 maxlen: 24 154.193.9.0/24 maxlen: 24 154.193.10.0/24 maxlen: 24 154.193.11.0/24 maxlen: 24 154.193.12.0/24 maxlen: 24 154.193.13.0/24 maxlen: 24 154.222.129.0/24 maxlen: 24 154.222.130.0/24 maxlen: 24 154.222.134.0/24 maxlen: 24 154.222.138.0/24 maxlen: 24 154.222.139.0/24 maxlen: 24 154.222.140.0/24 maxlen: 24 154.222.141.0/24 maxlen: 24 154.222.142.0/24 maxlen: 24 154.222.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 08 Dec 2025 00:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109732 (0x1aca4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 3 15:51:13 2025 GMT Not After : Nov 19 15:51:13 2028 GMT Subject: CN=69305c78-82ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:d0:e4:c3:ea:e0:4d:85:b9:da:80:f0:fd: ee:38:7b:09:b0:c5:57:ef:71:51:cf:ea:30:37:26: 44:e9:d9:f7:8e:17:b2:7c:35:7d:75:58:39:25:73: dc:42:8f:87:fa:ac:44:05:6a:34:ab:01:dc:aa:e3: 6f:11:87:9b:2e:4c:7b:72:ec:67:56:a4:be:bf:42: 50:ff:1c:89:fe:96:a6:cb:b0:c5:ee:5f:9c:a4:94: 3a:fa:ce:ee:e8:6e:b2:10:b6:35:21:91:b5:61:57: bc:b4:a6:ea:36:00:20:7c:f4:01:a8:dc:63:ea:c2: 4f:8b:98:71:b2:8a:84:77:a6:29:23:96:56:d0:14: 62:de:12:f7:77:c9:6c:1e:1c:4a:58:24:1e:85:aa: ae:65:ad:a7:a3:fb:e2:c4:69:0e:be:5c:4e:a0:90: 37:f0:b8:d8:2d:5a:cf:c3:13:5b:96:54:20:3d:fc: 96:d9:df:8c:72:bc:c1:35:ce:07:c9:34:8d:4d:30: e6:18:f8:a2:2d:5d:04:91:8b:ee:df:fa:36:7c:7b: a7:77:62:07:0f:6a:86:7d:41:87:30:00:ef:0b:8d: a3:ae:7c:58:8a:f3:d7:3e:19:b5:11:f1:7f:31:89: d6:9a:5d:06:ea:2d:b5:b6:2e:f7:54:a0:5c:6a:a6: 38:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:88:5A:E1:2B:FB:03:57:CA:16:D4:9D:53:FF:13:4F:FE:5B:3E:B3 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9442CB0D05F11F08EC6BAD2DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.193.0.0/23 154.193.4.0/24 154.193.6.0-154.193.13.255 154.222.129.0-154.222.130.255 154.222.134.0/24 154.222.138.0-154.222.142.255 154.222.148.0/24 Signature Algorithm: sha256WithRSAEncryption d2:62:fe:bf:21:cc:60:f5:f4:6c:db:00:12:48:80:53:2e:4f: 67:8f:23:4f:43:df:49:af:74:4d:cf:e0:e3:57:2c:ce:2f:5a: ef:b0:fa:60:33:60:a5:07:01:86:2c:df:9e:60:88:95:80:93: 75:75:6c:20:24:a1:fa:65:1c:24:2d:7c:53:5a:13:f3:00:3e: d4:6c:59:f6:b3:a2:e2:6d:20:4f:a1:b5:7d:2a:88:ed:71:77: a3:1c:1d:37:e1:85:ba:77:2c:27:b9:94:01:ad:6d:0e:7a:6e: bc:c1:9a:04:a5:b9:98:a4:55:bd:77:45:72:9e:71:bc:bd:09: 03:6d:15:c4:e4:64:99:ff:b8:36:66:29:aa:90:19:93:b5:64: 37:71:fb:fb:6f:1a:9b:36:23:f9:18:e9:62:79:57:c0:05:a0: 5f:f8:6a:d1:78:5f:c3:29:6f:08:ba:5e:51:0f:a0:d8:77:74: 92:e2:7c:04:82:32:09:32:b3:22:4b:cb:35:8e:25:32:95:d9: 8f:5c:86:c5:99:a6:ce:16:d0:04:52:bb:02:93:96:a1:5d:1a: 04:db:bd:84:13:1c:ef:4e:32:c5:91:0a:ae:76:6b:ae:28:08: ca:ad:12:65:d4:e3:a5:f5:fc:6b:ed:aa:b4:61:da:1d:3c:5b: 85:32:46:cb -----BEGIN CERTIFICATE----- MIIFwDCCBKigAwIBAgIDAaykMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjAzMTU1MTEzWhcNMjgxMTE5MTU1MTEzWjAYMRYw FAYDVQQDEw02OTMwNWM3OC04MmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAxUrQ5MPq4E2FudqA8P3uOHsJsMVX73FRz+owNyZE6dn3jheyfDV9dVg5 JXPcQo+H+qxEBWo0qwHcquNvEYebLkx7cuxnVqS+v0JQ/xyJ/pamy7DF7l+cpJQ6 +s7u6G6yELY1IZG1YVe8tKbqNgAgfPQBqNxj6sJPi5hxsoqEd6YpI5ZW0BRi3hL3 d8lsHhxKWCQehaquZa2no/vixGkOvlxOoJA38LjYLVrPwxNbllQgPfyW2d+McrzB Nc4HyTSNTTDmGPiiLV0EkYvu3/o2fHund2IHD2qGfUGHMADvC42jrnxYivPXPhm1 EfF/MYnWml0G6i21ti73VKBcaqY4mQIDAQABo4IC4TCCAt0wHQYDVR0OBBYEFOWI WuEr+wNXyhbUnVP/E0/+Wz6zMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9FOTQ0MkNCMEQwNUYxMUYwOEVDNkJBRDJEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQBmsEAAwQAmsEEMAwDBAGa wQYDBAGawQwwDAMEAJregQMEAJreggMEAJrehjAMAwQBmt6KAwQAmt6OAwQAmt6U MA0GCSqGSIb3DQEBCwUAA4IBAQDSYv6/Icxg9fRs2wASSIBTLk9njyNPQ99Jr3RN z+DjVyzOL1rvsPpgM2ClBwGGLN+eYIiVgJN1dWwgJKH6ZRwkLXxTWhPzAD7UbFn2 s6LibSBPobV9KojtcXejHB034YW6dywnuZQBrW0Oem68wZoEpbmYpFW9d0VynnG8 vQkDbRXE5GSZ/7g2ZimqkBmTtWQ3cfv7bxqbNiP5GOlieVfABaBf+GrReF/DKW8I ul5RD6DYd3SS4nwEgjIJMrMiS8s1jiUyldmPXIbFmabOFtAEUrsCk5ahXRoE272E ExzvTjLFkQqudmuuKAjKrRJl1OOl9fxr7aq0YdodPFuFMkbL -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:52 2025 by rpki-client