This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EF9CF2EE0EC11F0AFCD289DDAE4EC9C.roa File: 3EF9CF2EE0EC11F0AFCD289DDAE4EC9C.roa (raw, json) Hash identifier: p3fb2Jdc/QZrUrT9OauZ+U6hK0KZTCvMOxJEd1senH8= Subject key identifier: 87:90:89:1A:B1:DF:D0:46:8B:3F:05:00:37:DE:96:62:12:BD:DC:85 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B109 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EF9CF2EE0EC11F0AFCD289DDAE4EC9C.roa Signing time: Wed 24 Dec 2025 17:16:13 +0000 ROA not before: Wed 24 Dec 2025 17:16:07 +0000 ROA not after: Wed 18 Feb 2026 17:16:07 +0000 asID: 20326 IP address blocks: 154.193.130.0/24 maxlen: 24 154.193.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 26 Dec 2025 18:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110857 (0x1b109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 24 17:16:07 2025 GMT Not After : Feb 18 17:16:07 2026 GMT Subject: CN=694c1fdc-a7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:6a:ec:15:f1:12:a3:50:d7:4b:3b:1c:c4: 57:a6:63:9b:49:0b:3b:9e:3b:b7:58:2c:63:74:6f: 89:13:61:3f:1e:d4:1a:7d:86:1a:dd:ac:3e:a8:f7: 04:f7:2a:65:b4:38:f0:e6:2f:f9:d6:5a:5e:d3:5e: 39:90:5f:c3:d1:aa:a3:bd:c3:1a:ae:e8:7e:bf:ca: 99:57:f6:b9:d1:2d:7b:f6:62:54:bc:32:49:ba:8a: 9e:9b:1d:34:48:e6:cb:69:c1:f1:07:a9:21:60:2d: 0f:18:02:0b:40:2a:68:79:9c:83:ba:9a:74:3d:2f: f2:5a:3b:05:b3:9d:5f:bb:40:e9:14:65:27:5e:f1: e5:ed:32:4c:a2:e8:7c:af:53:5c:16:66:11:d1:1b: 99:14:bc:c1:ed:68:5a:a9:0c:80:93:8d:28:ea:86: 6e:94:df:b7:13:c2:c0:a3:78:51:ea:17:d6:b3:87: 19:51:0e:f1:13:a1:4a:15:32:ad:22:01:32:e3:1e: a4:e4:e8:01:6d:df:05:91:09:8b:ce:e3:ab:ab:bc: 12:0a:f6:bd:2d:a8:2f:b1:5a:ab:ad:c3:75:4f:af: 2a:c6:9b:7b:a4:7d:a1:39:95:7c:ea:f2:a1:c3:9e: 7e:d3:85:c6:3d:6b:45:97:e8:ef:4f:42:f8:b5:c4: bd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:90:89:1A:B1:DF:D0:46:8B:3F:05:00:37:DE:96:62:12:BD:DC:85 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EF9CF2EE0EC11F0AFCD289DDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.193.130.0/24 154.193.163.0/24 Signature Algorithm: sha256WithRSAEncryption 39:76:3b:9e:38:ea:14:63:47:2c:88:87:aa:1d:cb:ab:53:54: 50:d4:42:07:88:54:df:6a:9e:ee:cf:a8:00:0f:10:f4:d4:45: 07:da:61:0b:45:83:94:d3:26:6e:d9:8c:db:2c:86:95:75:d0: 72:16:14:6e:14:02:ad:a9:ce:99:e3:c8:78:8f:58:cc:ba:2b: 6c:18:eb:cc:29:86:75:8f:57:74:93:1d:1f:3b:ac:22:7f:e0: 77:45:32:f9:a8:8e:39:95:f6:08:84:56:ed:eb:58:28:5e:7a: f6:8f:b3:f5:17:1b:f7:fe:d2:eb:56:03:d5:f5:27:01:b5:82: 96:71:94:15:88:8e:bc:0a:8d:9b:1b:79:90:7e:71:c0:15:8d: a5:da:75:a1:81:f0:82:70:9c:ab:3c:b6:71:2a:9b:fa:b3:6c: b3:f5:58:85:56:5b:11:af:ed:a8:85:84:98:80:28:98:c8:d7: 76:d4:f0:3b:1d:89:86:75:b6:d7:71:a0:4c:7c:77:72:f4:bb: d6:3b:ab:50:35:63:89:09:de:d6:93:3e:e9:78:04:5b:6c:e7: 84:2b:c7:02:36:68:48:b2:54:f9:e7:dd:4f:ff:66:0a:b3:1f: aa:c4:13:cd:19:a7:2c:4e:3b:af:5a:e4:10:a5:73:66:f5:02: 71:24:ed:a3 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAbEJMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjI0MTcxNjA3WhcNMjYwMjE4MTcxNjA3WjAYMRYw FAYDVQQDEw02OTRjMWZkYy1hN2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAwTBq7BXxEqNQ10s7HMRXpmObSQs7nju3WCxjdG+JE2E/HtQafYYa3aw+ qPcE9ypltDjw5i/51lpe0145kF/D0aqjvcMaruh+v8qZV/a50S179mJUvDJJuoqe mx00SObLacHxB6khYC0PGAILQCpoeZyDupp0PS/yWjsFs51fu0DpFGUnXvHl7TJM ouh8r1NcFmYR0RuZFLzB7WhaqQyAk40o6oZulN+3E8LAo3hR6hfWs4cZUQ7xE6FK FTKtIgEy4x6k5OgBbd8FkQmLzuOrq7wSCva9LagvsVqrrcN1T68qxpt7pH2hOZV8 6vKhw55+04XGPWtFl+jvT0L4tcS9VwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFIeQ iRqx39BGiz8FADfelmISvdyFMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8zRUY5Q0YyRUUwRUMxMUYwQUZDRDI4OUREQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAmsGCAwQAmsGjMA0GCSqG SIb3DQEBCwUAA4IBAQA5djueOOoUY0csiIeqHcurU1RQ1EIHiFTfap7uz6gADxD0 1EUH2mELRYOU0yZu2YzbLIaVddByFhRuFAKtqc6Z48h4j1jMuitsGOvMKYZ1j1d0 kx0fO6wif+B3RTL5qI45lfYIhFbt61goXnr2j7P1Fxv3/tLrVgPV9ScBtYKWcZQV iI68Co2bG3mQfnHAFY2l2nWhgfCCcJyrPLZxKpv6s2yz9ViFVlsRr+2ohYSYgCiY yNd21PA7HYmGdbbXcaBMfHdy9LvWO6tQNWOJCd7Wkz7peARbbOeEK8cCNmhIslT5 591P/2YKsx+qxBPNGacsTjuvWuQQpXNm9QJxJO2j -----END CERTIFICATE-----Generated at Wed Dec 24 20:20:00 2025 by rpki-client