This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDF4423CD5B111F0BD4448B3DAE4EC9C.roa File: BDF4423CD5B111F0BD4448B3DAE4EC9C.roa (raw, json) Hash identifier: r7VxRVJJTzhCY2oynlhZhMoK+EZKeZzFqNXBTJaqa2I= Subject key identifier: 7E:3A:6F:EB:62:84:0E:B3:79:8D:8C:4C:DE:0D:F2:E6:47:A4:16:AF Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AD8F Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDF4423CD5B111F0BD4448B3DAE4EC9C.roa Signing time: Wed 10 Dec 2025 10:19:42 +0000 ROA not before: Wed 10 Dec 2025 10:19:38 +0000 ROA not after: Fri 16 Jan 2026 10:19:38 +0000 asID: 40779 IP address blocks: 154.222.16.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 21 Dec 2025 00:06:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109967 (0x1ad8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 10 10:19:38 2025 GMT Not After : Jan 16 10:19:38 2026 GMT Subject: CN=6939493e-b839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3a:3e:8f:2f:cf:37:2d:84:a8:21:15:67:d8: 0b:3a:a2:f0:e0:d9:ad:81:06:9d:8b:88:c9:53:b0: e8:49:f8:e3:5b:0b:cb:3d:28:05:d1:4c:d5:80:aa: 7d:6f:0d:78:3a:88:cf:d9:e8:02:21:62:39:9d:1b: 05:ba:73:13:02:15:ac:2e:95:2f:c4:a0:27:92:61: 38:28:35:35:c0:1a:2a:fd:2c:e5:e9:e0:af:66:63: f9:18:6a:ab:4a:ac:72:16:8d:33:38:6e:e6:91:17: e5:7a:7c:cc:2f:6e:2e:4b:4a:36:c9:8f:b0:61:f7: 96:36:2b:4b:30:ba:7a:81:8d:19:ed:3d:17:c9:d2: 42:bc:3e:93:dc:de:a0:cb:18:b3:04:02:e3:dc:c9: 56:96:43:cf:ac:d8:86:59:35:8f:fc:cb:b5:a6:d3: 35:1b:a7:88:00:74:27:a3:45:dc:34:cd:dd:98:53: e3:49:8c:59:71:04:13:bd:f4:be:e9:a4:19:6d:fe: b5:38:67:3e:27:3d:a6:8a:f9:be:a9:da:e2:15:d0: 0d:55:50:b2:44:ee:ba:f8:ab:9b:d4:cc:83:1b:47: b2:ff:cb:4d:b6:1a:55:27:56:4d:2d:0f:6a:82:f6: 12:14:ae:12:1b:39:d5:ca:19:d0:ac:92:9e:a2:95: 16:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3A:6F:EB:62:84:0E:B3:79:8D:8C:4C:DE:0D:F2:E6:47:A4:16:AF X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BDF4423CD5B111F0BD4448B3DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.222.16.0/20 Signature Algorithm: sha256WithRSAEncryption 18:69:3a:a1:91:60:ef:c5:ac:89:c1:1b:09:0d:97:c5:af:84: 09:e6:5f:53:5a:22:97:ff:f0:58:96:bd:40:e0:3e:de:5e:c1: eb:1b:93:a1:ea:02:fa:8a:ae:0f:c5:27:ef:02:8c:9a:0c:23: a9:7a:5c:f2:9a:61:c5:ba:f3:fb:2c:82:09:02:1f:bb:4d:5c: 28:9d:7c:3a:cd:a1:e3:de:31:36:a1:8a:c5:d7:48:0b:ec:d2: 33:b6:f2:1e:e8:73:f1:5d:7c:fc:54:79:1f:75:45:ce:28:f3: 2e:b9:74:1e:b4:cc:b6:ee:ee:d3:97:99:4c:ac:0b:8e:d4:58: 55:60:c5:83:c9:f3:b9:d4:a1:d1:45:c8:7f:95:6b:6d:0e:21: ad:2b:b7:16:e6:18:52:71:d7:4a:38:b0:94:c9:cf:15:24:74: 21:ce:75:7f:54:50:b2:af:82:60:dd:a2:11:fe:b1:58:22:c9: ae:2a:d1:ac:ef:4e:75:bf:f1:63:47:30:ba:03:9e:5f:e5:86: b6:00:e1:c1:1c:5d:23:cc:6d:19:28:7f:94:5b:3f:51:6d:7b: 56:8d:34:27:8d:e3:9a:c0:c4:4d:de:43:f6:86:c4:4b:42:d9: a0:6f:dd:a9:76:1a:58:ce:4a:1d:90:bb:54:83:fd:22:b7:3a: 38:c3:7a:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAa2PMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjEwMTAxOTM4WhcNMjYwMTE2MTAxOTM4WjAYMRYw FAYDVQQDEw02OTM5NDkzZS1iODM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAyzo+jy/PNy2EqCEVZ9gLOqLw4NmtgQadi4jJU7DoSfjjWwvLPSgF0UzV gKp9bw14OojP2egCIWI5nRsFunMTAhWsLpUvxKAnkmE4KDU1wBoq/Szl6eCvZmP5 GGqrSqxyFo0zOG7mkRflenzML24uS0o2yY+wYfeWNitLMLp6gY0Z7T0XydJCvD6T 3N6gyxizBALj3MlWlkPPrNiGWTWP/Mu1ptM1G6eIAHQno0XcNM3dmFPjSYxZcQQT vfS+6aQZbf61OGc+Jz2mivm+qdriFdANVVCyRO66+Kub1MyDG0ey/8tNthpVJ1ZN LQ9qgvYSFK4SGznVyhnQrJKeopUWOQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFH46 b+tihA6zeY2MTN4N8uZHpBavMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9CREY0NDIzQ0Q1QjExMUYwQkQ0NDQ4QjNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmt4QMA0GCSqGSIb3DQEB CwUAA4IBAQAYaTqhkWDvxayJwRsJDZfFr4QJ5l9TWiKX//BYlr1A4D7eXsHrG5Oh 6gL6iq4PxSfvAoyaDCOpelzymmHFuvP7LIIJAh+7TVwonXw6zaHj3jE2oYrF10gL 7NIztvIe6HPxXXz8VHkfdUXOKPMuuXQetMy27u7Tl5lMrAuO1FhVYMWDyfO51KHR Rch/lWttDiGtK7cW5hhScddKOLCUyc8VJHQhznV/VFCyr4Jg3aIR/rFYIsmuKtGs 7051v/FjRzC6A55f5Ya2AOHBHF0jzG0ZKH+UWz9RbXtWjTQnjeOawMRN3kP2hsRL Qtmgb92pdhpYzkodkLtUg/0itzo4w3rT -----END CERTIFICATE-----Generated at Fri Dec 19 20:23:14 2025 by rpki-client