This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/219C85AAD5B811F080A95ED9DAE4EC9C.roa File: 219C85AAD5B811F080A95ED9DAE4EC9C.roa (raw, json) Hash identifier: lfv5tvR+WJK9GXJYWnfGx+7E/G3jRxgjNazk2vWrXYI= Subject key identifier: F8:84:E5:8B:8D:8A:D0:67:C0:8A:AC:38:6D:20:8E:61:32:98:22:54 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AD9F Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/219C85AAD5B811F080A95ED9DAE4EC9C.roa Signing time: Wed 10 Dec 2025 11:05:27 +0000 ROA not before: Wed 10 Dec 2025 11:05:21 +0000 ROA not after: Sat 20 Dec 2025 11:05:21 +0000 asID: 140227 IP address blocks: 154.205.211.0/24 maxlen: 24 154.205.212.0/24 maxlen: 24 154.205.213.0/24 maxlen: 24 154.205.214.0/24 maxlen: 24 154.205.215.0/24 maxlen: 24 154.205.216.0/24 maxlen: 24 154.205.217.0/24 maxlen: 24 154.205.218.0/24 maxlen: 24 154.205.219.0/24 maxlen: 24 154.205.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 20 Dec 2025 11:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109983 (0x1ad9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 10 11:05:21 2025 GMT Not After : Dec 20 11:05:21 2025 GMT Subject: CN=693953f6-8897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7b:39:a0:70:46:91:89:a6:20:13:71:2e:4e: 1b:0b:b7:ba:6b:12:92:00:26:ac:39:a0:b6:f4:df: 51:28:08:00:54:6a:7c:ae:6b:c1:31:cf:dc:05:7c: 05:07:91:8d:65:ae:b5:b1:2c:3f:f5:2c:fd:85:42: 67:98:11:d8:7b:94:fe:1b:08:15:4c:99:18:1b:f9: dc:f9:b7:3a:72:24:d8:98:d9:7d:0c:1a:75:d4:b8: 9a:30:ee:55:53:59:06:71:7f:a1:78:3d:65:24:ba: 43:7e:ba:68:52:2a:5e:dc:dd:eb:48:1c:4a:96:45: d2:de:c9:54:ac:63:66:c5:ec:20:14:85:07:55:3b: 46:e0:96:2f:39:9f:32:85:de:07:62:42:b6:d1:92: 05:f7:63:6b:82:36:ad:b1:28:0b:ef:4f:4e:b4:b2: 29:1e:ea:20:3a:84:ac:a4:8f:8d:c8:36:97:23:2c: c6:e5:00:7f:12:97:89:a0:c6:e0:a1:c6:55:e0:50: 70:1a:b7:14:c1:d3:64:4b:49:e6:47:57:7c:86:d8: 3f:97:be:a3:2c:79:f8:10:12:84:31:f4:4e:9e:7b: db:0f:b4:b4:82:b9:24:15:0b:20:17:06:06:bb:b1: b4:7d:05:36:6d:03:84:51:c8:0f:c9:df:24:20:16: 7f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:84:E5:8B:8D:8A:D0:67:C0:8A:AC:38:6D:20:8E:61:32:98:22:54 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/219C85AAD5B811F080A95ED9DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.205.211.0-154.205.220.255 Signature Algorithm: sha256WithRSAEncryption 89:c5:e3:cb:a7:83:80:b6:fd:9c:ba:2d:de:50:96:13:40:91: 66:c4:06:c6:57:97:f5:6c:eb:bc:78:a9:59:1c:61:12:16:d8: 3b:b3:a3:34:2f:fd:35:0c:ac:44:aa:9a:95:f5:64:7e:91:a0: ea:da:26:12:65:be:06:21:79:a3:eb:ec:65:eb:93:fa:e5:d3: b9:31:74:fc:4c:99:ac:95:13:ff:b1:c4:f4:b7:08:51:94:e1: e7:4a:55:c9:62:88:23:c5:48:c6:5c:f4:ab:4c:0d:49:1a:21: 4e:d0:f1:6b:97:8c:b4:53:a2:f5:aa:13:ba:17:5f:dd:e8:fb: 59:bf:e4:a7:89:57:83:df:1b:10:72:a5:67:9c:c5:0c:17:2c: 8c:8f:d1:31:de:76:ca:f1:59:a7:50:10:8c:62:37:b5:9e:a2: 5d:d4:aa:3f:92:1b:b8:ca:c5:a1:a3:61:da:1d:81:a4:a8:85: 5a:ce:12:00:30:b6:f6:69:c8:37:d6:55:da:f6:f8:08:54:dd: 2f:c6:d3:0e:f2:07:19:a2:0f:53:9a:8d:9f:a1:ea:83:bf:8e: 9e:bb:74:fe:80:14:22:bb:dc:af:e9:e4:60:f1:0a:a6:a0:5c: 42:99:00:a0:9f:7b:15:7f:54:d9:a6:dc:00:61:56:bf:72:27: 50:f3:78:c0 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIDAa2fMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjEwMTEwNTIxWhcNMjUxMjIwMTEwNTIxWjAYMRYw FAYDVQQDEw02OTM5NTNmNi04ODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAv3s5oHBGkYmmIBNxLk4bC7e6axKSACasOaC29N9RKAgAVGp8rmvBMc/c BXwFB5GNZa61sSw/9Sz9hUJnmBHYe5T+GwgVTJkYG/nc+bc6ciTYmNl9DBp11Lia MO5VU1kGcX+heD1lJLpDfrpoUipe3N3rSBxKlkXS3slUrGNmxewgFIUHVTtG4JYv OZ8yhd4HYkK20ZIF92NrgjatsSgL709OtLIpHuogOoSspI+NyDaXIyzG5QB/EpeJ oMbgocZV4FBwGrcUwdNkS0nmR1d8htg/l76jLHn4EBKEMfROnnvbD7S0grkkFQsg FwYGu7G0fQU2bQOEUcgPyd8kIBZ/uQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPiE 5YuNitBnwIqsOG0gjmEymCJUMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8yMTlDODVBQUQ1QjgxMUYwODBBOTVFRDlEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACazdMDBACazdwwDQYJ KoZIhvcNAQELBQADggEBAInF48ung4C2/Zy6Ld5QlhNAkWbEBsZXl/Vs67x4qVkc YRIW2DuzozQv/TUMrESqmpX1ZH6RoOraJhJlvgYheaPr7GXrk/rl07kxdPxMmayV E/+xxPS3CFGU4edKVcliiCPFSMZc9KtMDUkaIU7Q8WuXjLRTovWqE7oXX93o+1m/ 5KeJV4PfGxBypWecxQwXLIyP0THedsrxWadQEIxiN7Weol3Uqj+SG7jKxaGjYdod gaSohVrOEgAwtvZpyDfWVdr2+AhU3S/G0w7yBxmiD1OajZ+h6oO/jp67dP6AFCK7 3K/p5GDxCqagXEKZAKCfexV/VNmm3ABhVr9yJ1DzeMA= -----END CERTIFICATE-----Generated at Fri Dec 19 20:24:48 2025 by rpki-client