This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FD38404DA5411F0A69AB0C4DAE4EC9C.roa File: 0FD38404DA5411F0A69AB0C4DAE4EC9C.roa (raw, json) Hash identifier: sewGhOUgRwqhxdKEzPHXKM/gMz5OMI5/MrZ1Rrnsnr0= Subject key identifier: C5:65:06:71:B5:4E:D5:0F:5B:40:B8:41:1B:ED:F6:86:E2:9B:C4:B2 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AE60 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FD38404DA5411F0A69AB0C4DAE4EC9C.roa Signing time: Tue 16 Dec 2025 07:51:43 +0000 ROA not before: Tue 16 Dec 2025 07:51:38 +0000 ROA not after: Fri 16 Jan 2026 07:51:38 +0000 asID: 22773 IP address blocks: 154.198.29.0/24 maxlen: 24 154.198.30.0/24 maxlen: 24 154.198.31.0/24 maxlen: 24 154.198.44.0/24 maxlen: 24 154.198.45.0/24 maxlen: 24 154.198.46.0/24 maxlen: 24 154.198.47.0/24 maxlen: 24 154.202.2.0/24 maxlen: 24 154.202.5.0/24 maxlen: 24 154.202.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 21 Dec 2025 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110176 (0x1ae60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 16 07:51:38 2025 GMT Not After : Jan 16 07:51:38 2026 GMT Subject: CN=69410f8f-63dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1e:63:71:a2:4f:b7:d1:db:08:10:6c:0c:b2: 38:43:8d:64:79:86:14:bc:b9:8d:9b:2e:30:0e:df: a2:66:3e:b9:2f:67:f2:f9:a2:7d:84:ba:95:c1:2b: 67:9a:eb:68:50:95:92:f6:34:42:aa:5d:34:42:e9: e0:c0:9a:47:db:74:72:5b:22:cd:81:a3:f1:bd:b6: 43:70:f6:96:1e:cc:47:58:17:d8:bc:6c:d7:ce:9b: ef:e8:66:7e:df:4b:ef:cc:f3:a1:7f:e4:14:33:fc: 8f:31:80:e3:47:f8:36:4d:35:12:24:a5:b1:c5:01: 37:7f:f5:06:ec:22:c2:c8:73:75:85:2b:93:34:eb: b8:b3:01:35:71:a4:49:dc:37:df:fe:3f:80:c4:ea: de:01:15:7e:1b:0e:49:b1:66:c7:39:04:48:41:03: ec:65:fd:7c:18:8f:c0:f6:aa:69:c3:16:ef:8a:20: 86:fc:c1:b2:05:f5:28:99:22:ff:9a:90:f2:db:52: af:fb:96:b0:97:f1:ec:30:36:95:9b:bb:6a:69:c0: aa:42:f7:bf:7f:c4:f8:2d:d2:65:f8:bc:10:35:03: 4d:a0:ba:e0:03:cd:f2:41:94:77:d7:04:2e:37:91: 29:d5:5c:c0:33:23:68:7e:39:76:92:4d:50:ff:b5: 73:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:65:06:71:B5:4E:D5:0F:5B:40:B8:41:1B:ED:F6:86:E2:9B:C4:B2 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FD38404DA5411F0A69AB0C4DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.198.29.0-154.198.31.255 154.198.44.0/22 154.202.2.0/24 154.202.5.0/24 154.202.12.0/24 Signature Algorithm: sha256WithRSAEncryption 47:d6:f5:03:ce:49:be:9a:ec:2f:54:be:9d:9b:55:e4:ff:7d: c4:46:3e:cf:5d:cd:ab:35:35:97:b3:3f:2e:ea:7f:41:e8:7e: 95:78:e2:43:b8:51:4f:fc:88:2a:6d:0e:4a:57:5d:0a:72:9d: 5b:01:2e:df:07:34:48:11:f9:f4:5e:b1:4d:7e:bc:25:46:01: 3c:5a:7c:60:da:ae:f5:9f:46:87:ac:27:4f:e3:36:ce:33:80: c5:b4:01:f9:69:22:31:4d:fe:88:04:f9:06:a2:67:2b:f4:21: 4e:05:49:fe:b3:56:99:06:d0:a5:b6:63:16:09:cc:cf:9f:11: 9c:df:0c:3c:6a:00:5a:c5:7a:98:09:10:4f:6a:0b:db:81:b1: 6b:4d:aa:b8:bf:cd:35:86:da:63:9b:13:44:e2:7e:85:ed:b0: e6:50:2f:f6:1b:e1:80:17:2f:91:d2:eb:ed:77:77:04:05:f6: 21:dc:68:5c:12:b7:9f:c9:19:d7:3d:5b:dc:6d:11:c7:19:72: 7e:49:cf:71:28:7d:af:18:ef:5b:18:4c:19:26:62:99:c1:b1: 2f:25:e0:88:21:b1:48:20:f8:32:a4:c7:6a:19:90:c5:5e:f9: 5b:8f:da:03:d6:87:f0:08:d7:3e:64:9d:dc:e3:5e:29:00:9f: 1e:9e:ea:8a -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgIDAa5gMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjE2MDc1MTM4WhcNMjYwMTE2MDc1MTM4WjAYMRYw FAYDVQQDEw02OTQxMGY4Zi02M2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAwB5jcaJPt9HbCBBsDLI4Q41keYYUvLmNmy4wDt+iZj65L2fy+aJ9hLqV wStnmutoUJWS9jRCql00QungwJpH23RyWyLNgaPxvbZDcPaWHsxHWBfYvGzXzpvv 6GZ+30vvzPOhf+QUM/yPMYDjR/g2TTUSJKWxxQE3f/UG7CLCyHN1hSuTNOu4swE1 caRJ3Dff/j+AxOreARV+Gw5JsWbHOQRIQQPsZf18GI/A9qppwxbviiCG/MGyBfUo mSL/mpDy21Kv+5awl/HsMDaVm7tqacCqQve/f8T4LdJl+LwQNQNNoLrgA83yQZR3 1wQuN5Ep1VzAMyNofjl2kk1Q/7VzAwIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFMVl BnG1TtUPW0C4QRvt9obim8SyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8wRkQzODQwNERBNTQxMUYwQTY5QUIwQzREQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBACaxh0DBAWaxgADBAKa xiwDBACaygIDBACaygUDBACaygwwDQYJKoZIhvcNAQELBQADggEBAEfW9QPOSb6a 7C9Uvp2bVeT/fcRGPs9dzas1NZezPy7qf0HofpV44kO4UU/8iCptDkpXXQpynVsB Lt8HNEgR+fResU1+vCVGATxafGDarvWfRoesJ0/jNs4zgMW0AflpIjFN/ogE+Qai Zyv0IU4FSf6zVpkG0KW2YxYJzM+fEZzfDDxqAFrFepgJEE9qC9uBsWtNqri/zTWG 2mObE0TifoXtsOZQL/Yb4YAXL5HS6+13dwQF9iHcaFwSt5/JGdc9W9xtEccZcn5J z3Eofa8Y71sYTBkmYpnBsS8l4IghsUgg+DKkx2oZkMVe+VuP2gPWh/AI1z5kndzj XikAnx6e6oo= -----END CERTIFICATE-----Generated at Fri Dec 19 20:24:21 2025 by rpki-client