This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66CDB3B8D9C011F09A444E9EDAE4EC9C.roa File: 66CDB3B8D9C011F09A444E9EDAE4EC9C.roa (raw, json) Hash identifier: JTIXrb+aXqPZQeJ3I4OeUHyI/hNZ2Fy1ewPkY6jlLFI= Subject key identifier: 2C:D4:41:FB:0F:0B:5E:2F:BC:25:C1:4F:18:33:6A:AA:77:DB:73:2F Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AE43 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66CDB3B8D9C011F09A444E9EDAE4EC9C.roa Signing time: Mon 15 Dec 2025 14:14:43 +0000 ROA not before: Mon 15 Dec 2025 14:14:38 +0000 ROA not after: Wed 24 Dec 2025 14:14:38 +0000 asID: 138915 IP address blocks: 154.206.56.0/23 maxlen: 24 154.206.58.0/23 maxlen: 24 154.206.60.0/23 maxlen: 24 154.206.62.0/23 maxlen: 24 154.206.64.0/24 maxlen: 24 154.206.65.0/24 maxlen: 24 154.206.66.0/24 maxlen: 24 154.206.67.0/24 maxlen: 24 154.206.68.0/23 maxlen: 24 154.206.68.0/24 maxlen: 24 154.206.69.0/24 maxlen: 24 154.206.70.0/23 maxlen: 24 154.206.70.0/24 maxlen: 24 154.206.71.0/24 maxlen: 24 154.206.72.0/23 maxlen: 24 154.206.72.0/24 maxlen: 24 154.206.73.0/24 maxlen: 24 154.206.74.0/23 maxlen: 24 154.206.76.0/23 maxlen: 24 154.206.78.0/24 maxlen: 24 154.206.79.0/24 maxlen: 24 154.206.80.0/23 maxlen: 24 154.206.82.0/23 maxlen: 24 154.206.84.0/23 maxlen: 24 154.206.86.0/23 maxlen: 24 154.206.88.0/23 maxlen: 24 154.206.90.0/23 maxlen: 24 154.206.92.0/23 maxlen: 24 154.206.94.0/23 maxlen: 24 154.206.96.0/23 maxlen: 24 154.206.98.0/23 maxlen: 24 154.206.100.0/23 maxlen: 24 154.206.102.0/23 maxlen: 24 154.206.104.0/23 maxlen: 24 154.206.106.0/24 maxlen: 24 154.206.107.0/24 maxlen: 24 154.206.108.0/23 maxlen: 24 154.206.110.0/23 maxlen: 24 154.206.112.0/23 maxlen: 24 154.206.114.0/23 maxlen: 24 154.206.116.0/23 maxlen: 24 154.206.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 21 Dec 2025 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110147 (0x1ae43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 15 14:14:38 2025 GMT Not After : Dec 24 14:14:38 2025 GMT Subject: CN=694017d3-776a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b2:2d:71:5d:5d:5a:e2:91:f8:ac:8c:b4:49: 70:54:04:6c:84:25:da:2f:38:e7:9f:a2:8d:3b:26: e2:51:8d:7e:2d:42:12:59:f9:63:40:f1:3d:97:78: 2d:44:f8:31:9e:3a:ba:67:a2:d8:f2:bb:f6:dd:ba: 39:86:c1:9b:8c:42:ba:3d:7c:df:ca:8a:00:b5:18: 81:61:97:af:07:aa:64:de:0f:70:fb:71:45:7a:5e: a7:56:aa:75:22:dd:cc:41:3f:a6:24:65:02:04:2e: 30:a8:c6:b2:1a:27:03:5c:6f:6f:7e:33:27:ff:85: 00:50:1c:64:a4:a2:08:2f:da:1e:b7:78:2f:0f:e0: 85:b5:c9:92:a7:53:12:91:af:70:bb:0c:11:74:fb: 07:2c:08:29:ba:fb:71:bf:4f:65:29:4d:ef:69:04: f2:91:c1:a0:78:75:7f:20:45:7c:00:46:13:95:c2: 13:1b:cd:88:43:30:a1:bb:e7:82:6d:a7:de:b7:88: fe:84:ba:bc:35:89:67:b1:66:03:7c:3f:e5:72:4b: 6a:cf:c4:ef:0e:8e:e1:ff:c7:cf:9b:2f:ea:59:83: 02:45:2f:86:71:b3:d4:32:f7:44:76:61:5d:5c:2b: 97:a5:3c:bf:8b:6f:c9:29:6a:44:5b:87:ec:69:48: ed:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D4:41:FB:0F:0B:5E:2F:BC:25:C1:4F:18:33:6A:AA:77:DB:73:2F X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/66CDB3B8D9C011F09A444E9EDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.206.56.0-154.206.119.255 Signature Algorithm: sha256WithRSAEncryption 77:75:79:80:4d:09:d6:6f:b3:b7:bd:f5:27:55:05:2a:26:be: d5:4e:f4:98:dc:0f:35:00:3c:21:73:c4:5e:cb:48:b7:e3:35: 86:44:cf:30:2c:25:ee:f1:a9:97:d6:a3:8f:f4:28:98:17:42: 2d:4d:76:8a:71:e0:8f:60:c9:ba:f4:be:b7:3e:08:96:90:03: 93:d2:38:81:a2:3c:49:24:fc:6d:7e:1d:4c:d9:01:c0:bf:37: da:84:52:9c:40:99:4b:11:63:9e:59:41:a1:92:4f:d9:db:c2: 45:db:ea:03:96:6c:50:43:fe:fc:09:dd:bc:0e:d0:e1:de:93: 04:49:50:04:6a:ee:1a:cb:11:a4:d1:b6:69:94:7b:ee:6e:75: 5d:35:7e:18:d9:f6:b2:ba:d6:37:5b:27:89:88:cb:69:d7:7c: 53:76:00:f2:12:ab:c6:b4:bc:ce:18:f1:91:bd:b2:8d:33:37: cf:4b:4f:30:4b:1d:bf:0f:d5:04:80:6c:48:7d:24:35:30:32: 31:d3:1d:cf:50:e7:1a:3c:6e:8c:49:93:9a:2b:6e:1e:45:1a: 1f:4d:b4:0b:48:47:51:fc:01:00:ec:1b:a3:0d:0e:71:bc:8c: 57:51:79:7a:91:7d:1b:36:00:f1:02:39:0d:7d:44:e8:6e:32: 41:39:84:a6 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgIDAa5DMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjE1MTQxNDM4WhcNMjUxMjI0MTQxNDM4WjAYMRYw FAYDVQQDEw02OTQwMTdkMy03NzZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA1LItcV1dWuKR+KyMtElwVARshCXaLzjnn6KNOybiUY1+LUISWfljQPE9 l3gtRPgxnjq6Z6LY8rv23bo5hsGbjEK6PXzfyooAtRiBYZevB6pk3g9w+3FFel6n Vqp1It3MQT+mJGUCBC4wqMayGicDXG9vfjMn/4UAUBxkpKIIL9oet3gvD+CFtcmS p1MSka9wuwwRdPsHLAgpuvtxv09lKU3vaQTykcGgeHV/IEV8AEYTlcITG82IQzCh u+eCbafet4j+hLq8NYlnsWYDfD/lcktqz8TvDo7h/8fPmy/qWYMCRS+GcbPUMvdE dmFdXCuXpTy/i2/JKWpEW4fsaUjtnQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFCzU QfsPC14vvCXBTxgzaqp323MvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC82NkNEQjNCOEQ5QzAxMUYwOUE0NDRFOUVEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOazjgDBAOaznAwDQYJ KoZIhvcNAQELBQADggEBAHd1eYBNCdZvs7e99SdVBSomvtVO9JjcDzUAPCFzxF7L SLfjNYZEzzAsJe7xqZfWo4/0KJgXQi1Ndopx4I9gybr0vrc+CJaQA5PSOIGiPEkk /G1+HUzZAcC/N9qEUpxAmUsRY55ZQaGST9nbwkXb6gOWbFBD/vwJ3bwO0OHekwRJ UARq7hrLEaTRtmmUe+5udV01fhjZ9rK61jdbJ4mIy2nXfFN2APISq8a0vM4Y8ZG9 so0zN89LTzBLHb8P1QSAbEh9JDUwMjHTHc9Q5xo8boxJk5orbh5FGh9NtAtIR1H8 AQDsG6MNDnG8jFdReXqRfRs2APECOQ19ROhuMkE5hKY= -----END CERTIFICATE-----Generated at Fri Dec 19 20:24:54 2025 by rpki-client