This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C81FE38DA6511F0AD5F86B0DAE4EC9C.roa File: 4C81FE38DA6511F0AD5F86B0DAE4EC9C.roa (raw, json) Hash identifier: 1cwbh9kPy9uDN62cMgFFcAVTYiLCY/fgsRMKp16/VlI= Subject key identifier: BB:47:C1:95:E4:B8:08:60:5B:F7:5F:77:4F:51:06:48:6E:CB:92:FA Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AE74 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C81FE38DA6511F0AD5F86B0DAE4EC9C.roa Signing time: Tue 16 Dec 2025 09:55:06 +0000 ROA not before: Tue 16 Dec 2025 09:55:01 +0000 ROA not after: Tue 30 Dec 2025 09:55:01 +0000 asID: 138915 IP address blocks: 154.205.128.0/24 maxlen: 24 154.205.129.0/24 maxlen: 24 154.205.130.0/24 maxlen: 24 154.205.131.0/24 maxlen: 24 154.205.132.0/24 maxlen: 24 154.205.133.0/24 maxlen: 24 154.205.134.0/24 maxlen: 24 154.205.135.0/24 maxlen: 24 154.205.136.0/23 maxlen: 24 154.205.138.0/24 maxlen: 24 154.205.139.0/24 maxlen: 24 154.205.140.0/24 maxlen: 24 154.205.141.0/24 maxlen: 24 154.205.142.0/23 maxlen: 24 154.205.144.0/24 maxlen: 24 154.205.145.0/24 maxlen: 24 154.205.146.0/24 maxlen: 24 154.205.147.0/24 maxlen: 24 154.205.148.0/24 maxlen: 24 154.205.149.0/24 maxlen: 24 154.205.150.0/24 maxlen: 24 154.205.151.0/24 maxlen: 24 154.205.152.0/24 maxlen: 24 154.205.153.0/24 maxlen: 24 154.205.154.0/24 maxlen: 24 154.205.155.0/24 maxlen: 24 154.205.156.0/24 maxlen: 24 154.205.157.0/24 maxlen: 24 154.205.158.0/24 maxlen: 24 154.205.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 21 Dec 2025 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110196 (0x1ae74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 16 09:55:01 2025 GMT Not After : Dec 30 09:55:01 2025 GMT Subject: CN=69412c7a-f8bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a3:0d:d1:02:be:98:b4:39:0b:65:5a:36:d3: 77:9a:c8:3e:e1:50:3a:98:73:ba:c0:03:b6:04:e8: f8:a0:32:fc:69:3e:e1:01:23:3b:e0:e4:cd:dd:ba: 95:df:60:b8:4d:72:1e:ab:63:26:fb:c8:e8:33:59: 22:1b:c6:c8:11:7a:e6:ee:65:81:c0:54:3d:12:38: d9:57:a8:6e:92:1f:12:3f:a2:3f:9f:a4:ca:d3:ef: 9c:68:f4:d7:c5:53:54:18:5a:7e:89:83:33:de:c8: 2d:98:5a:b9:f9:ff:c2:e7:3f:20:a6:2a:e1:c6:ba: c3:f6:ef:7a:56:07:05:2f:fc:fb:cf:c3:1d:f6:1d: 35:e0:6f:45:3b:94:07:71:b1:ba:e6:b9:35:ed:56: a6:5f:2b:fb:8f:44:64:9a:4f:83:d4:0b:64:f2:5e: 13:cd:52:52:94:f4:fa:34:04:6f:58:d3:1e:0c:d9: 29:cc:ed:9e:f5:ed:c8:07:7d:de:81:92:0d:df:d1: 21:ef:f7:32:01:19:be:60:d1:a0:73:f0:7c:74:44: 34:90:fe:f0:eb:92:9f:c4:4c:57:8f:71:69:b8:2f: 23:f8:77:c8:b3:a8:6e:a2:a3:0a:f7:6a:6c:09:29: a1:a9:d1:98:a9:d0:49:94:17:6b:e8:ac:83:07:ac: 5b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:47:C1:95:E4:B8:08:60:5B:F7:5F:77:4F:51:06:48:6E:CB:92:FA X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C81FE38DA6511F0AD5F86B0DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.205.128.0/19 Signature Algorithm: sha256WithRSAEncryption 6d:04:d7:3e:12:fb:86:b7:1f:48:90:df:8a:84:16:cc:ea:45: 57:f6:74:7f:b5:bc:c9:2a:8d:6b:f0:07:6b:62:33:33:ed:b1: 0a:36:5a:d7:b9:01:f5:67:c0:8a:54:d4:a5:37:f3:2d:43:aa: d4:61:1c:6b:e9:8a:c4:0b:cb:fb:7d:61:32:67:ca:48:a6:16: 99:43:49:ca:c9:76:06:4c:f3:46:da:ef:d1:54:6b:7e:16:de: 68:06:c2:14:bb:22:7f:f6:ad:57:e3:32:b0:fc:28:93:de:bc: bc:f9:a7:33:31:bb:04:89:d0:b5:6c:3b:38:8d:4b:e4:9f:2c: 07:a2:a5:6d:db:a2:a4:c2:ae:5d:5c:92:b3:d3:70:80:50:cf: 82:3b:5c:c6:5f:d8:7f:23:eb:02:0e:44:74:2c:72:73:a5:86: fb:d8:b4:dc:e1:9a:0a:f5:62:68:5d:a4:04:64:d3:26:bb:36: ec:51:fb:34:5b:5a:4b:59:3f:55:c1:58:35:77:99:9e:af:8f: cd:7a:85:b4:de:b8:40:f6:87:72:c4:63:5f:55:26:d6:5e:47: 36:37:e1:85:ea:b3:1e:37:2f:a8:46:6a:a9:6e:23:4f:1b:91: ed:c8:24:cf:9a:53:fa:5e:32:70:c4:48:0a:10:a2:25:e2:66: 92:b2:af:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAa50MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjE2MDk1NTAxWhcNMjUxMjMwMDk1NTAxWjAYMRYw FAYDVQQDEw02OTQxMmM3YS1mOGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAvaMN0QK+mLQ5C2VaNtN3msg+4VA6mHO6wAO2BOj4oDL8aT7hASM74OTN 3bqV32C4TXIeq2Mm+8joM1kiG8bIEXrm7mWBwFQ9EjjZV6hukh8SP6I/n6TK0++c aPTXxVNUGFp+iYMz3sgtmFq5+f/C5z8gpirhxrrD9u96VgcFL/z7z8Md9h014G9F O5QHcbG65rk17VamXyv7j0Rkmk+D1Atk8l4TzVJSlPT6NARvWNMeDNkpzO2e9e3I B33egZIN39Eh7/cyARm+YNGgc/B8dEQ0kP7w65KfxExXj3FpuC8j+HfIs6huoqMK 92psCSmhqdGYqdBJlBdr6KyDB6xbPQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFLtH wZXkuAhgW/dfd09RBkhuy5L6MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC80QzgxRkUzOERBNjUxMUYwQUQ1Rjg2QjBEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFms2AMA0GCSqGSIb3DQEB CwUAA4IBAQBtBNc+EvuGtx9IkN+KhBbM6kVX9nR/tbzJKo1r8AdrYjMz7bEKNlrX uQH1Z8CKVNSlN/MtQ6rUYRxr6YrEC8v7fWEyZ8pIphaZQ0nKyXYGTPNG2u/RVGt+ Ft5oBsIUuyJ/9q1X4zKw/CiT3ry8+aczMbsEidC1bDs4jUvknywHoqVt26Kkwq5d XJKz03CAUM+CO1zGX9h/I+sCDkR0LHJzpYb72LTc4ZoK9WJoXaQEZNMmuzbsUfs0 W1pLWT9VwVg1d5mer4/NeoW03rhA9odyxGNfVSbWXkc2N+GF6rMeNy+oRmqpbiNP G5HtyCTPmlP6XjJwxEgKEKIl4maSsq9e -----END CERTIFICATE-----Generated at Fri Dec 19 20:23:10 2025 by rpki-client