This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C9C6B58DA6B11F0B6A5A4D2DAE4EC9C.roa File: 1C9C6B58DA6B11F0B6A5A4D2DAE4EC9C.roa (raw, json) Hash identifier: Rwo5C12C2USIzUnCvWKyoIPv9C1CJU+lwX/7cb9UEzg= Subject key identifier: C5:88:04:18:F7:4C:5B:A5:8C:34:37:DC:19:41:33:03:EF:C0:CD:E0 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AE85 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C9C6B58DA6B11F0B6A5A4D2DAE4EC9C.roa Signing time: Tue 16 Dec 2025 10:36:44 +0000 ROA not before: Tue 16 Dec 2025 10:36:37 +0000 ROA not after: Fri 26 Dec 2025 10:36:37 +0000 asID: 138915 IP address blocks: 154.223.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 21 Dec 2025 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110213 (0x1ae85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 16 10:36:37 2025 GMT Not After : Dec 26 10:36:37 2025 GMT Subject: CN=6941363c-89bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1a:f6:57:65:90:7b:f7:6d:00:20:8c:11:d3: 46:0f:74:b7:07:cd:43:c4:1c:20:6b:f9:00:83:cf: 26:3f:a8:da:34:62:24:5c:69:f9:1b:c1:15:9d:48: b0:ea:27:e9:5a:ff:d2:d4:ad:f2:c4:08:a0:f2:ce: ed:86:33:62:54:96:d2:f8:ec:f7:f0:be:31:62:b9: 70:db:98:dd:12:1e:b4:2f:f4:92:85:01:7e:63:dd: 4c:49:db:05:fb:ef:2e:e7:38:e8:54:7a:58:2f:70: a4:08:8e:c2:22:19:72:cc:e4:66:55:8b:af:57:64: fd:bf:50:15:bc:27:2a:7a:17:91:92:0a:86:74:72: cd:79:5d:1c:aa:c1:50:2f:1a:d0:d9:f9:3e:0d:48: e7:62:28:67:e3:c7:db:b2:b3:73:cd:3c:d8:3f:f4: a0:fe:6c:08:f4:c7:92:43:96:03:fa:a9:c7:25:c4: 68:06:ca:02:9f:29:f8:50:05:c7:ca:6c:ab:63:c0: 0a:73:d5:3b:c7:49:3b:36:06:15:28:d9:f4:7f:a4: ad:d3:aa:1c:65:eb:79:62:da:81:f5:16:3c:3d:7e: ee:b1:ee:e3:53:01:c7:17:eb:d2:10:12:2a:28:b2: e0:90:b7:78:6c:07:3e:1d:1e:42:a1:11:fc:ee:41: e2:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:88:04:18:F7:4C:5B:A5:8C:34:37:DC:19:41:33:03:EF:C0:CD:E0 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C9C6B58DA6B11F0B6A5A4D2DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.223.16.0/24 Signature Algorithm: sha256WithRSAEncryption b6:7f:ea:19:f8:42:83:0b:ee:44:3e:1e:a3:c0:a4:42:f5:3c: d3:9c:f8:ab:ba:73:4b:f1:71:41:20:b3:92:65:28:bf:c1:b9: 54:5b:e0:f8:e5:b6:77:5e:d2:40:55:83:60:0f:46:66:71:cf: cb:22:58:f1:af:22:e4:bf:e2:b7:6e:0f:2a:3b:24:28:ca:a2: 35:e1:08:cb:a2:30:b5:a1:56:6a:20:ba:15:09:8b:0b:1c:0f: c8:38:33:61:51:bf:de:77:c0:8f:04:4a:7d:0f:8c:0d:e4:de: e4:65:21:23:3c:f0:3d:42:ac:9e:1d:11:4f:84:1d:70:a7:db: 90:19:63:6e:e2:fd:d4:96:6f:c6:b7:dd:3c:05:36:5a:41:6e: 58:ea:9e:d5:e4:80:df:37:7e:02:89:51:5d:a7:c1:f4:77:da: 01:56:33:86:56:b8:48:78:71:17:dd:2a:51:04:58:18:92:d4: ab:86:58:49:ef:7d:8c:e4:41:49:f9:ae:68:0f:9b:cc:f3:53: 3d:ea:5c:06:fb:e3:a8:ef:0e:f8:c3:7f:a6:1f:be:87:8d:70: 1c:07:8d:21:ba:7a:d1:a3:e4:2c:70:89:bd:b9:28:a6:a8:e6: 6a:f7:78:c8:77:0e:33:da:1f:e0:ff:97:a3:c7:ef:51:fb:6c: 42:87:3a:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAa6FMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjE2MTAzNjM3WhcNMjUxMjI2MTAzNjM3WjAYMRYw FAYDVQQDEw02OTQxMzYzYy04OWJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAzxr2V2WQe/dtACCMEdNGD3S3B81DxBwga/kAg88mP6jaNGIkXGn5G8EV nUiw6ifpWv/S1K3yxAig8s7thjNiVJbS+Oz38L4xYrlw25jdEh60L/SShQF+Y91M SdsF++8u5zjoVHpYL3CkCI7CIhlyzORmVYuvV2T9v1AVvCcqeheRkgqGdHLNeV0c qsFQLxrQ2fk+DUjnYihn48fbsrNzzTzYP/Sg/mwI9MeSQ5YD+qnHJcRoBsoCnyn4 UAXHymyrY8AKc9U7x0k7NgYVKNn0f6St06ocZet5YtqB9RY8PX7use7jUwHHF+vS EBIqKLLgkLd4bAc+HR5CoRH87kHiRQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMWI BBj3TFuljDQ33BlBMwPvwM3gMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8xQzlDNkI1OERBNkIxMUYwQjZBNUE0RDJEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt8QMA0GCSqGSIb3DQEB CwUAA4IBAQC2f+oZ+EKDC+5EPh6jwKRC9TzTnPirunNL8XFBILOSZSi/wblUW+D4 5bZ3XtJAVYNgD0Zmcc/LIljxryLkv+K3bg8qOyQoyqI14QjLojC1oVZqILoVCYsL HA/IODNhUb/ed8CPBEp9D4wN5N7kZSEjPPA9QqyeHRFPhB1wp9uQGWNu4v3Ulm/G t908BTZaQW5Y6p7V5IDfN34CiVFdp8H0d9oBVjOGVrhIeHEX3SpRBFgYktSrhlhJ 732M5EFJ+a5oD5vM81M96lwG++Oo7w74w3+mH76HjXAcB40hunrRo+QscIm9uSim qOZq93jIdw4z2h/g/5ejx+9R+2xChzos -----END CERTIFICATE-----Generated at Fri Dec 19 20:24:47 2025 by rpki-client