This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32FD23A4DB3F11F0B44C7886DAE4EC9C.roa File: 32FD23A4DB3F11F0B44C7886DAE4EC9C.roa (raw, json) Hash identifier: YqcBqcE91Yj6bbK/DIwV7OUV9x1K8Q/iBtGBj5IKqNU= Subject key identifier: 18:3F:93:1E:AE:DE:B0:3B:21:FE:15:51:69:29:48:AC:C4:7C:2C:CC Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AEEA Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32FD23A4DB3F11F0B44C7886DAE4EC9C.roa Signing time: Wed 17 Dec 2025 11:54:54 +0000 ROA not before: Wed 17 Dec 2025 11:54:48 +0000 ROA not after: Fri 26 Dec 2025 11:54:48 +0000 asID: 138915 IP address blocks: 154.203.144.0/23 maxlen: 24 154.203.149.0/24 maxlen: 24 154.203.150.0/24 maxlen: 24 154.203.151.0/24 maxlen: 24 154.203.152.0/24 maxlen: 24 154.203.163.0/24 maxlen: 24 154.203.165.0/24 maxlen: 24 154.203.178.0/24 maxlen: 24 154.203.181.0/24 maxlen: 24 154.203.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 21 Dec 2025 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110314 (0x1aeea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 17 11:54:48 2025 GMT Not After : Dec 26 11:54:48 2025 GMT Subject: CN=69429a0e-478d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1b:f8:7f:55:9b:30:e3:2a:a3:01:6d:1d:b0: a0:3e:4a:aa:f8:de:e8:0d:ff:13:99:d1:60:7b:64: 00:00:4f:20:ca:ae:6b:54:a1:2c:29:5c:2b:a8:01: 15:d1:5a:d6:3e:10:df:bd:0f:7c:9c:0e:ac:68:f9: 69:56:5e:b6:9e:59:8b:c4:00:bf:ec:fe:3b:71:df: 25:dc:a6:96:73:ba:cc:4f:e0:fb:1b:b5:f0:14:cc: 88:e3:2f:37:9c:21:ed:4a:57:74:ff:9c:18:fa:2d: 68:3d:da:f3:c6:25:cc:c8:bd:2b:9d:8f:79:05:77: 6e:0f:1d:0f:af:6e:3b:95:61:89:d4:ad:54:e0:aa: 24:66:ed:18:f8:ac:d1:74:59:fb:55:23:39:74:04: b2:23:fa:f9:60:93:48:26:9a:80:4c:be:48:7b:55: 82:dd:ba:24:a2:51:d8:ac:a7:5c:07:f5:6e:fa:89: a0:b5:1b:db:b1:27:10:99:5c:45:20:70:e7:91:60: fc:1c:1f:9f:26:29:53:cf:bd:8f:a6:88:22:6c:65: b7:24:0a:98:09:dd:05:98:7e:a8:31:a1:0e:33:66: 38:11:7d:fb:80:a9:c0:fa:40:a2:d1:c2:d8:a9:a9: 37:83:32:b5:0a:52:76:26:69:a3:51:96:36:c9:9e: 4d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3F:93:1E:AE:DE:B0:3B:21:FE:15:51:69:29:48:AC:C4:7C:2C:CC X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32FD23A4DB3F11F0B44C7886DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.203.144.0/23 154.203.149.0-154.203.152.255 154.203.163.0/24 154.203.165.0/24 154.203.178.0/24 154.203.181.0/24 154.203.191.0/24 Signature Algorithm: sha256WithRSAEncryption ae:87:b4:f5:34:57:29:20:c0:a4:b7:5d:4d:77:5b:48:3d:83: 62:30:71:58:90:f9:ef:6f:d8:00:cd:b3:72:4b:87:1a:94:8d: 47:fb:26:0c:49:a8:df:c7:2e:75:14:1c:80:ca:49:0d:21:97: 38:3b:e2:0c:a2:97:2e:6a:ee:76:0c:3a:48:fa:99:3f:6c:7f: 33:fa:96:00:30:33:cb:c6:32:11:91:bc:71:e1:00:84:96:4b: a7:7d:05:b3:74:23:c5:75:28:71:6b:59:60:89:b4:80:48:56: 5f:4d:f7:d4:18:a5:01:a1:04:a8:02:b0:f8:47:40:13:8c:b1: 9c:1f:de:ae:7f:bb:77:2e:22:80:84:ed:0c:77:18:4c:d2:7f: e8:5f:3b:a2:20:d2:a9:30:70:7c:86:25:20:9f:73:50:ca:f4: 5a:9a:c5:44:4c:31:77:63:09:70:36:0c:ad:b8:a9:97:d6:78: eb:d7:7d:65:be:76:e0:66:c2:e6:3f:27:55:34:f4:f8:18:26: f1:6d:d5:a4:cf:c0:bd:94:ff:ce:8a:08:38:8e:1c:61:82:f8: 83:9e:25:27:44:6a:f0:1f:7e:e8:03:01:5d:db:66:4d:8b:30: 97:ae:0e:fa:69:1c:c6:7b:c8:21:38:8a:3e:75:86:cb:9f:a0: c8:7c:7b:23 -----BEGIN CERTIFICATE----- MIIFsDCCBJigAwIBAgIDAa7qMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjE3MTE1NDQ4WhcNMjUxMjI2MTE1NDQ4WjAYMRYw FAYDVQQDEw02OTQyOWEwZS00NzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAzBv4f1WbMOMqowFtHbCgPkqq+N7oDf8TmdFge2QAAE8gyq5rVKEsKVwr qAEV0VrWPhDfvQ98nA6saPlpVl62nlmLxAC/7P47cd8l3KaWc7rMT+D7G7XwFMyI 4y83nCHtSld0/5wY+i1oPdrzxiXMyL0rnY95BXduDx0Pr247lWGJ1K1U4KokZu0Y +KzRdFn7VSM5dASyI/r5YJNIJpqATL5Ie1WC3bokolHYrKdcB/Vu+omgtRvbsScQ mVxFIHDnkWD8HB+fJilTz72PpogibGW3JAqYCd0FmH6oMaEOM2Y4EX37gKnA+kCi 0cLYqak3gzK1ClJ2JmmjUZY2yZ5NcwIDAQABo4IC0TCCAs0wHQYDVR0OBBYEFBg/ kx6u3rA7If4VUWkpSKzEfCzMMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8zMkZEMjNBNERCM0YxMUYwQjQ0Qzc4ODZEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyAwQBmsuQMAwDBACay5UDBACa y5gDBACay6MDBACay6UDBACay7IDBACay7UDBACay78wDQYJKoZIhvcNAQELBQAD ggEBAK6HtPU0VykgwKS3XU13W0g9g2IwcViQ+e9v2ADNs3JLhxqUjUf7JgxJqN/H LnUUHIDKSQ0hlzg74gyily5q7nYMOkj6mT9sfzP6lgAwM8vGMhGRvHHhAISWS6d9 BbN0I8V1KHFrWWCJtIBIVl9N99QYpQGhBKgCsPhHQBOMsZwf3q5/u3cuIoCE7Qx3 GEzSf+hfO6Ig0qkwcHyGJSCfc1DK9FqaxURMMXdjCXA2DK24qZfWeOvXfWW+duBm wuY/J1U09PgYJvFt1aTPwL2U/86KCDiOHGGC+IOeJSdEavAffugDAV3bZk2LMJeu DvppHMZ7yCE4ij51hsufoMh8eyM= -----END CERTIFICATE-----Generated at Fri Dec 19 20:24:27 2025 by rpki-client