This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65D5ED02DB2F11F09B2CB8A3DAE4EC9C.roa File: 65D5ED02DB2F11F09B2CB8A3DAE4EC9C.roa (raw, json) Hash identifier: 9+t5hzmlNzFenpyl+tHQLXNzKVK7K6n4EF9XZGZ5g+c= Subject key identifier: 09:40:38:3A:79:4D:B6:3F:74:A3:15:21:94:7E:0B:85:0A:9F:77:B2 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AED0 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65D5ED02DB2F11F09B2CB8A3DAE4EC9C.roa Signing time: Wed 17 Dec 2025 10:01:47 +0000 ROA not before: Wed 17 Dec 2025 10:01:42 +0000 ROA not after: Sat 24 Jan 2026 10:01:42 +0000 asID: 214432 IP address blocks: 154.89.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 21 Dec 2025 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110288 (0x1aed0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 17 10:01:42 2025 GMT Not After : Jan 24 10:01:42 2026 GMT Subject: CN=69427f8b-8513 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cb:84:f3:16:71:a8:66:ad:f2:7c:a0:85:30: 60:47:7d:df:dd:16:85:52:18:0f:23:57:23:09:67: a1:3a:36:d2:c5:c8:32:3f:4c:9e:3d:a2:a3:8b:53: d5:2b:3c:e0:88:ab:90:9b:f5:47:26:e6:b8:1f:e4: c8:34:57:ad:f0:66:9d:0c:f9:89:b4:59:c0:6e:3a: d6:08:36:30:16:2e:4d:2f:1a:13:3f:48:ac:42:3c: 50:47:54:1e:aa:52:e1:fb:31:9c:ab:24:33:e4:83: 60:88:d0:9b:4d:05:f2:6b:6e:91:72:0f:35:5a:3c: d0:0e:90:13:6f:be:28:d2:0a:48:af:34:aa:06:5a: 27:b3:07:d2:d1:39:1c:c5:94:e5:13:7a:50:64:2d: 6a:15:f0:35:0e:bf:22:93:b8:76:f2:7c:f9:43:d9: 79:f1:b0:53:a3:0a:8b:2b:ce:45:bf:e2:97:85:07: 17:0d:42:46:4e:02:6b:25:b4:0a:37:da:71:e9:28: 74:8b:10:eb:0e:99:4b:2e:60:be:5a:a1:02:68:ee: ca:3b:45:d3:b3:17:59:62:69:46:30:43:84:75:1a: 67:0b:cd:cb:96:c3:dd:ac:47:eb:28:11:94:d7:d2: 48:43:b9:ce:da:ac:04:a1:d5:a8:82:de:fc:e3:fb: 90:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:40:38:3A:79:4D:B6:3F:74:A3:15:21:94:7E:0B:85:0A:9F:77:B2 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65D5ED02DB2F11F09B2CB8A3DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.89.194.0/24 Signature Algorithm: sha256WithRSAEncryption 31:98:38:ea:ff:26:65:2d:02:00:52:16:32:5c:9b:80:0d:7e: 9c:15:be:ab:b2:0d:fe:1e:c7:bf:4c:57:93:d9:8c:ce:22:98: 85:fe:72:c5:ee:8d:c2:32:ac:f3:d9:2a:17:2c:cf:70:30:c5: 02:86:87:91:45:88:56:18:e8:99:3b:8c:d2:ef:24:f9:1e:7f: 2a:ce:83:57:66:6b:00:90:8e:f1:a1:82:b4:e4:2d:67:de:00: fe:1a:42:ec:23:b6:de:52:7b:4b:ab:0c:17:ab:e8:6f:00:cd: c8:5b:0b:25:c0:b4:d2:ce:13:34:40:da:ac:02:d5:a8:b0:bf: 5b:47:e3:d6:ba:df:fc:69:6c:50:16:08:17:bf:da:4e:4d:00: c4:de:fa:1d:21:5d:aa:08:52:c1:de:02:d4:84:34:2d:ee:a6: f0:c4:11:88:9f:e1:3e:62:06:fb:e4:91:1a:c4:66:e3:a3:97: 94:08:dc:b9:65:4a:1f:b4:9c:7f:1c:39:ce:b6:5b:60:2c:d8: f2:bd:98:10:ac:19:7a:9a:7f:a8:7d:a1:a2:f8:f9:86:01:1a: 74:01:c9:92:ea:37:48:f4:b8:5c:ae:8d:83:6e:34:83:73:22: 14:24:45:8a:69:df:f5:24:3c:2c:61:0d:3f:37:58:dd:f2:38: 0c:0a:13:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAa7QMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjE3MTAwMTQyWhcNMjYwMTI0MTAwMTQyWjAYMRYw FAYDVQQDEw02OTQyN2Y4Yi04NTEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAt8uE8xZxqGat8nyghTBgR33f3RaFUhgPI1cjCWehOjbSxcgyP0yePaKj i1PVKzzgiKuQm/VHJua4H+TINFet8GadDPmJtFnAbjrWCDYwFi5NLxoTP0isQjxQ R1QeqlLh+zGcqyQz5INgiNCbTQXya26Rcg81WjzQDpATb74o0gpIrzSqBlonswfS 0TkcxZTlE3pQZC1qFfA1Dr8ik7h28nz5Q9l58bBTowqLK85Fv+KXhQcXDUJGTgJr JbQKN9px6Sh0ixDrDplLLmC+WqECaO7KO0XTsxdZYmlGMEOEdRpnC83LlsPdrEfr KBGU19JIQ7nO2qwEodWogt784/uQ8wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFAlA ODp5TbY/dKMVIZR+C4UKn3eyMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC82NUQ1RUQwMkRCMkYxMUYwOUIyQ0I4QTNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlnCMA0GCSqGSIb3DQEB CwUAA4IBAQAxmDjq/yZlLQIAUhYyXJuADX6cFb6rsg3+Hse/TFeT2YzOIpiF/nLF 7o3CMqzz2SoXLM9wMMUChoeRRYhWGOiZO4zS7yT5Hn8qzoNXZmsAkI7xoYK05C1n 3gD+GkLsI7beUntLqwwXq+hvAM3IWwslwLTSzhM0QNqsAtWosL9bR+PWut/8aWxQ FggXv9pOTQDE3vodIV2qCFLB3gLUhDQt7qbwxBGIn+E+Ygb75JEaxGbjo5eUCNy5 ZUoftJx/HDnOtltgLNjyvZgQrBl6mn+ofaGi+PmGARp0AcmS6jdI9Lhcro2DbjSD cyIUJEWKad/1JDwsYQ0/N1jd8jgMChPQ -----END CERTIFICATE-----Generated at Fri Dec 19 18:43:43 2025 by rpki-client