This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCAF8C42D41611F09251D4A1DAE4EC9C.roa File: CCAF8C42D41611F09251D4A1DAE4EC9C.roa (raw, json) Hash identifier: vf+cCCjhAF3xMjvhsqY2DtxmIMgdrGf2n8cjVl/QthU= Subject key identifier: 29:49:DB:32:07:4B:1D:62:40:68:02:EC:08:B6:CD:88:0B:81:76:98 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01AD5F Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCAF8C42D41611F09251D4A1DAE4EC9C.roa Signing time: Mon 08 Dec 2025 09:18:04 +0000 ROA not before: Mon 08 Dec 2025 09:17:59 +0000 ROA not after: Sat 20 Dec 2025 09:17:59 +0000 asID: 141883 IP address blocks: 154.86.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 20 Dec 2025 09:17:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109919 (0x1ad5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 8 09:17:59 2025 GMT Not After : Dec 20 09:17:59 2025 GMT Subject: CN=693697cc-7063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:35:d5:13:00:e3:10:b0:92:e2:48:09:94: 7f:d9:d2:de:50:27:20:1f:2c:6b:e5:eb:6c:88:f2: 40:dc:a3:d8:b7:d1:65:a6:a3:69:1d:d8:d1:51:8e: 72:d2:2c:07:fc:64:54:6c:a5:cb:41:2a:d4:4d:f3: a9:ae:f2:1e:93:7b:ce:12:36:12:07:56:19:19:59: 71:81:7b:28:73:c9:8f:aa:78:0d:15:8e:b2:16:6f: 1c:1f:e6:ab:f6:28:7d:b4:e4:c7:bf:a7:11:dd:d3: 47:57:79:9d:c3:03:35:fe:68:a2:5a:9d:0e:0a:4e: dc:8b:83:df:d9:4d:aa:59:a9:78:d1:0b:33:20:36: b4:52:fc:07:06:74:b4:82:90:31:80:d3:e4:d3:a2: e2:d7:e0:55:54:b3:79:40:f3:07:1a:7a:66:aa:c7: f7:c4:d0:de:6d:fd:ba:98:d7:47:35:f0:4f:8e:7a: ca:12:41:8b:a5:6a:99:35:b5:12:ad:7f:15:87:89: b3:d1:d9:bf:c7:3d:40:af:15:0c:68:1d:ce:e9:2f: e7:46:0c:58:3e:94:56:b9:49:60:9f:3a:8c:e3:85: cf:97:f1:33:91:e8:b5:fb:c1:0c:46:6d:59:41:8d: 49:73:9b:5e:ef:59:56:b4:10:09:a9:83:59:b0:91: c8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:49:DB:32:07:4B:1D:62:40:68:02:EC:08:B6:CD:88:0B:81:76:98 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCAF8C42D41611F09251D4A1DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.86.0.0/24 Signature Algorithm: sha256WithRSAEncryption 35:82:86:df:62:53:0d:a5:17:89:4f:b9:0c:b5:31:72:49:43: 5b:1d:d3:20:e0:dd:3c:16:f1:c3:11:1f:48:fa:47:ff:72:25: bf:dc:c2:1a:e2:49:2b:c2:57:83:7c:e1:d7:f3:cd:31:77:02: d7:cc:e4:9c:25:69:e0:6c:24:03:3f:0f:2e:4f:76:b7:b8:e4: 88:23:19:3a:46:2c:c4:e5:5a:91:8c:94:80:49:35:d3:0b:48: c4:98:dc:28:ad:4d:30:26:be:ec:27:f8:ef:a4:cc:54:09:d3: 93:66:82:91:57:48:9b:1e:6b:cc:2f:1a:0f:9f:3e:f1:ae:7b: e0:b1:25:03:d3:48:63:7e:e2:c4:c1:15:c1:9e:8a:4c:2c:28: 8d:7e:52:13:e4:af:d6:65:fa:17:6c:b9:c9:47:b6:52:05:aa: 04:03:ac:37:3d:b8:4f:af:55:fc:01:0d:cf:e8:12:9c:1d:1c: b8:93:7f:69:76:d3:8d:80:57:89:76:4d:ef:69:a9:d8:4a:33: 09:ba:f5:ac:74:e8:32:ce:65:08:e6:7a:f4:5a:7f:a6:0c:0f: 0a:a5:8b:48:74:dc:b6:0c:10:f4:67:50:cd:83:7d:c2:92:35: b5:33:95:eb:54:ee:4c:40:29:4c:39:cf:d0:9a:e9:da:07:43: 64:72:5e:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAa1fMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjA4MDkxNzU5WhcNMjUxMjIwMDkxNzU5WjAYMRYw FAYDVQQDEw02OTM2OTdjYy03MDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAsYU11RMA4xCwkuJICZR/2dLeUCcgHyxr5etsiPJA3KPYt9FlpqNpHdjR UY5y0iwH/GRUbKXLQSrUTfOprvIek3vOEjYSB1YZGVlxgXsoc8mPqngNFY6yFm8c H+ar9ih9tOTHv6cR3dNHV3mdwwM1/miiWp0OCk7ci4Pf2U2qWal40QszIDa0UvwH BnS0gpAxgNPk06Li1+BVVLN5QPMHGnpmqsf3xNDebf26mNdHNfBPjnrKEkGLpWqZ NbUSrX8Vh4mz0dm/xz1ArxUMaB3O6S/nRgxYPpRWuUlgnzqM44XPl/Ezkei1+8EM Rm1ZQY1Jc5te71lWtBAJqYNZsJHITQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFClJ 2zIHSx1iQGgC7Ai2zYgLgXaYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DQ0FGOEM0MkQ0MTYxMUYwOTI1MUQ0QTFEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlYAMA0GCSqGSIb3DQEB CwUAA4IBAQA1gobfYlMNpReJT7kMtTFySUNbHdMg4N08FvHDER9I+kf/ciW/3MIa 4kkrwleDfOHX880xdwLXzOScJWngbCQDPw8uT3a3uOSIIxk6RizE5VqRjJSASTXT C0jEmNworU0wJr7sJ/jvpMxUCdOTZoKRV0ibHmvMLxoPnz7xrnvgsSUD00hjfuLE wRXBnopMLCiNflIT5K/WZfoXbLnJR7ZSBaoEA6w3PbhPr1X8AQ3P6BKcHRy4k39p dtONgFeJdk3vaanYSjMJuvWsdOgyzmUI5nr0Wn+mDA8KpYtIdNy2DBD0Z1DNg33C kjW1M5XrVO5MQClMOc/QmunaB0Nkcl6B -----END CERTIFICATE-----Generated at Fri Dec 19 22:02:39 2025 by rpki-client