This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/298DC77EDA6311F0AA32B9A3DAE4EC9C.roa File: 298DC77EDA6311F0AA32B9A3DAE4EC9C.roa (raw, json) Hash identifier: tByPXgVdZGJ1yf/9JC6pNmKBcqQARqZF2MlFSFH2KFk= Subject key identifier: 23:E5:35:63:46:8A:78:7B:D4:1E:07:DD:91:12:A2:FA:90:70:8C:CE Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AE70 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/298DC77EDA6311F0AA32B9A3DAE4EC9C.roa Signing time: Tue 16 Dec 2025 09:39:49 +0000 ROA not before: Tue 16 Dec 2025 09:39:43 +0000 ROA not after: Wed 23 Dec 2026 09:39:43 +0000 asID: 141190 IP address blocks: 154.211.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 21 Dec 2025 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110192 (0x1ae70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 16 09:39:43 2025 GMT Not After : Dec 23 09:39:43 2026 GMT Subject: CN=694128e4-2ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b6:55:f6:3b:a4:d7:19:d3:c1:f9:93:dc:0c: 70:fe:7b:4c:2c:1c:1d:04:c1:a9:50:8e:c6:61:e2: 5d:fd:ec:c0:ed:08:48:67:1d:0b:62:40:91:2a:b6: fc:d3:78:ce:5f:dc:9d:0f:e4:39:c1:b6:01:17:a3: cf:20:db:40:79:b4:6e:fb:95:97:f5:a7:5b:c5:e6: d8:e3:fe:84:1f:72:4c:3c:c7:c7:d7:f6:99:ab:33: 97:99:a7:9b:01:84:c4:ad:9e:2f:3a:f6:31:3a:50: 6f:07:a4:18:c9:4e:56:4b:b2:cb:5c:e9:d8:28:81: 42:bb:df:17:a5:f1:61:9b:9c:1d:c0:bb:d4:69:a8: 02:c2:80:68:f4:ae:14:3a:c4:58:0d:04:4d:08:b9: 53:1c:42:20:16:40:e3:64:43:d8:5b:24:45:7f:a1: e8:54:e8:db:27:99:0f:07:3b:0b:9a:97:49:8c:e5: 77:ab:48:cb:ee:e7:2c:35:78:64:a5:01:4f:8a:45: 2f:84:a1:1c:43:55:55:96:13:e2:14:ce:42:78:38: cd:ed:f8:43:b5:7d:a7:08:b7:ca:fd:47:aa:cf:d3: 1a:a0:92:5d:d3:55:a5:d6:0d:6e:7a:40:cf:67:f8: cc:16:c1:b2:73:49:64:c8:67:83:b1:5e:50:1e:61: 06:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E5:35:63:46:8A:78:7B:D4:1E:07:DD:91:12:A2:FA:90:70:8C:CE X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/298DC77EDA6311F0AA32B9A3DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.211.0.0/23 Signature Algorithm: sha256WithRSAEncryption 1e:f7:71:cf:5d:ce:bf:e0:06:29:cb:f0:ed:dd:f4:66:c9:a1: ff:9e:73:0a:02:e1:b3:fe:98:2d:19:dc:4a:3f:14:4f:25:1c: bf:40:3b:c4:0f:96:c9:72:ab:94:77:bc:ca:05:78:c2:b9:f8: 41:14:94:f6:1a:22:ce:e6:56:74:41:d0:84:9c:b5:d0:98:30: 36:83:67:e4:03:b1:a5:6c:b1:31:19:7e:0a:3d:e3:f3:13:b2: 34:66:d0:67:ac:de:f8:0c:de:7a:dc:46:f7:5a:92:97:4f:de: 1f:95:11:98:d4:ce:f6:63:8e:af:3c:54:ec:b5:24:b9:95:c1: c6:b0:ba:d4:72:67:45:31:e7:c7:b2:15:22:ea:7d:5d:2c:e0: 6f:07:86:b8:e4:8e:90:8d:f5:38:b6:a9:1b:03:52:a4:93:55: 14:29:12:d1:b7:95:00:34:07:15:f6:36:51:0d:15:8b:48:09: 76:40:d5:cc:39:21:84:5b:fd:2f:5a:b2:64:52:c7:dc:c9:5f: 37:d2:5a:32:9b:a2:53:45:1d:d1:70:3d:f9:46:b4:27:97:14: 61:28:52:22:77:24:6b:7b:e1:89:48:93:8b:32:8a:72:8c:ea: 9a:f6:0e:ae:05:0e:77:ec:d1:e2:42:68:3b:fd:2a:d0:77:58: 35:94:d1:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAa5wMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjE2MDkzOTQzWhcNMjYxMjIzMDkzOTQzWjAYMRYw FAYDVQQDEw02OTQxMjhlNC0yZWQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAkbZV9juk1xnTwfmT3Axw/ntMLBwdBMGpUI7GYeJd/ezA7QhIZx0LYkCR Krb803jOX9ydD+Q5wbYBF6PPINtAebRu+5WX9adbxebY4/6EH3JMPMfH1/aZqzOX maebAYTErZ4vOvYxOlBvB6QYyU5WS7LLXOnYKIFCu98XpfFhm5wdwLvUaagCwoBo 9K4UOsRYDQRNCLlTHEIgFkDjZEPYWyRFf6HoVOjbJ5kPBzsLmpdJjOV3q0jL7ucs NXhkpQFPikUvhKEcQ1VVlhPiFM5CeDjN7fhDtX2nCLfK/Ueqz9MaoJJd01Wl1g1u ekDPZ/jMFsGyc0lkyGeDsV5QHmEGywIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCPl NWNGinh71B4H3ZESovqQcIzOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8yOThEQzc3RURBNjMxMUYwQUEzMkI5QTNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmtMAMA0GCSqGSIb3DQEB CwUAA4IBAQAe93HPXc6/4AYpy/Dt3fRmyaH/nnMKAuGz/pgtGdxKPxRPJRy/QDvE D5bJcquUd7zKBXjCufhBFJT2GiLO5lZ0QdCEnLXQmDA2g2fkA7GlbLExGX4KPePz E7I0ZtBnrN74DN563Eb3WpKXT94flRGY1M72Y46vPFTstSS5lcHGsLrUcmdFMefH shUi6n1dLOBvB4a45I6QjfU4tqkbA1Kkk1UUKRLRt5UANAcV9jZRDRWLSAl2QNXM OSGEW/0vWrJkUsfcyV830loym6JTRR3RcD35RrQnlxRhKFIidyRre+GJSJOLMopy jOqa9g6uBQ537NHiQmg7/SrQd1g1lNEn -----END CERTIFICATE-----Generated at Fri Dec 19 20:24:58 2025 by rpki-client