This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/2CF4F1D0F23211F0AF31EACFDAE4EC9C.roa File: 2CF4F1D0F23211F0AF31EACFDAE4EC9C.roa (raw, json) Hash identifier: Kw9yZHPeCDbD4dtkgjG9vBqQvYKkUDgIRAQiwyBUt8w= Subject key identifier: 83:C6:C0:C4:64:07:E4:71:36:B2:B4:CE:6A:82:60:85:27:81:B2:6F Certificate issuer: /CN=F367B8D1RI/serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7 Certificate serial: 03B1 Authority key identifier: 65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7 Authority info access: rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/2CF4F1D0F23211F0AF31EACFDAE4EC9C.roa Signing time: Thu 15 Jan 2026 16:49:37 +0000 ROA not before: Thu 15 Jan 2026 16:49:32 +0000 ROA not after: Thu 30 Dec 2049 16:49:32 +0000 asID: 28683 IP address blocks: 81.91.224.0/20 maxlen: 20 81.91.224.0/20 maxlen: 24 81.91.224.0/24 maxlen: 24 81.91.225.0/24 maxlen: 24 81.91.228.0/22 maxlen: 22 81.91.228.0/24 maxlen: 24 81.91.229.0/24 maxlen: 24 81.91.230.0/23 maxlen: 23 81.91.230.0/24 maxlen: 24 81.91.232.0/23 maxlen: 23 81.91.232.0/24 maxlen: 24 81.91.234.0/24 maxlen: 24 81.91.235.0/24 maxlen: 24 81.91.236.0/24 maxlen: 24 81.91.237.0/24 maxlen: 24 81.91.238.0/24 maxlen: 24 81.91.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 28 Jan 2026 00:45:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 945 (0x3b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F367B8D1RI, serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7 Validity Not Before: Jan 15 16:49:32 2026 GMT Not After : Dec 30 16:49:32 2049 GMT Subject: CN=69691aa1-128d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a7:e1:92:9b:b2:ce:09:70:c5:2c:6c:ce:a8: 45:b7:94:f6:4b:7e:ce:b3:a7:3f:9e:bd:ce:5b:51: 5b:be:72:70:29:34:e3:c7:74:88:31:32:ae:39:a6: fb:0b:e3:6e:7b:4b:c3:59:d6:64:8a:f8:b4:da:44: 23:50:2b:38:83:1b:65:af:d5:00:d9:35:80:28:78: 2e:fc:b6:02:68:d4:74:ad:86:3a:5e:a3:9c:18:af: dc:7d:4d:f8:ee:77:47:a4:95:b9:d9:98:8b:1c:74: 54:50:25:15:81:51:e7:41:25:59:dd:8d:be:99:2f: b9:f0:1d:df:76:61:cc:dc:23:f9:5d:39:37:f3:15: 91:48:0a:e8:b0:04:6e:29:8f:b6:e2:44:ac:ea:1c: 99:bc:1f:cc:c9:e8:cb:f1:3a:65:4c:f5:7a:d9:4d: 2d:9b:20:66:0f:87:26:d4:65:45:ae:7b:90:40:ec: 5d:14:06:84:45:b6:87:cf:64:23:c4:4b:a1:78:bc: 76:90:d1:6f:95:bc:40:72:d7:c1:f7:21:86:b9:bd: c1:b1:c1:1a:e3:e3:96:be:55:a0:89:5d:f3:00:09: e2:fc:82:5e:ce:be:36:a4:c7:17:ef:a1:33:f6:b8: ad:b5:f7:af:29:a7:5d:f3:8d:b8:2b:0a:08:fa:5e: 2c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:C6:C0:C4:64:07:E4:71:36:B2:B4:CE:6A:82:60:85:27:81:B2:6F X509v3 Authority Key Identifier: keyid:65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/2CF4F1D0F23211F0AF31EACFDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 81.91.224.0/20 Signature Algorithm: sha256WithRSAEncryption 3f:77:61:19:25:fa:76:b5:a8:46:ea:86:a8:45:bf:22:23:17: 7f:ee:84:3e:d5:71:29:84:98:f1:b6:26:d9:11:46:98:08:6c: cd:c5:b5:8c:36:a0:a3:f3:44:30:5a:03:ac:60:84:90:92:90: ff:59:24:24:b3:65:bf:54:7a:31:53:48:7b:16:04:01:08:1a: de:c4:36:88:c0:29:d8:36:dd:d6:01:3b:29:07:dc:fd:c0:56: d3:36:d4:47:da:f6:c8:9c:66:7f:5f:c1:93:23:4e:df:0f:1a: 74:41:c1:fd:7a:89:98:89:b7:06:82:30:47:28:38:c0:b2:a6: 5a:e0:bd:96:1d:fc:b2:d9:d6:da:21:eb:3a:c8:64:ad:0d:44: d6:58:53:bb:fa:2b:23:c2:49:6b:22:78:2a:74:92:f8:dc:27: 80:07:81:25:ed:2b:c8:64:f4:9f:71:50:d2:ea:47:d7:c8:19: 93:69:a4:eb:46:58:8c:4d:7b:c0:2f:9a:8e:91:2f:02:53:0c: 5b:81:a3:c1:bc:b5:05:c0:28:6e:e7:0f:16:5b:bd:93:0c:22: ea:33:9b:12:5a:e6:64:aa:c1:9e:0c:fc:91:57:db:f1:02:96: 2c:ee:1f:41:f1:06:36:70:2d:7d:eb:02:b8:76:62:23:18:55: 96:66:69:dd -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICA7EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 N0I4RDFSSTExMC8GA1UEBRMoNjVCM0U4MTgxQzNEQThEMUQ2NDFFODRBNDVDOEVG ODIzOUREN0VBNzAeFw0yNjAxMTUxNjQ5MzJaFw00OTEyMzAxNjQ5MzJaMBgxFjAU BgNVBAMTDTY5NjkxYWExLTEyOGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDnp+GSm7LOCXDFLGzOqEW3lPZLfs6zpz+evc5bUVu+cnApNOPHdIgxMq45 pvsL4257S8NZ1mSK+LTaRCNQKziDG2Wv1QDZNYAoeC78tgJo1HSthjpeo5wYr9x9 Tfjud0eklbnZmIscdFRQJRWBUedBJVndjb6ZL7nwHd92YczcI/ldOTfzFZFICuiw BG4pj7biRKzqHJm8H8zJ6MvxOmVM9XrZTS2bIGYPhybUZUWue5BA7F0UBoRFtofP ZCPES6F4vHaQ0W+VvEBy18H3IYa5vcGxwRrj45a+VaCJXfMACeL8gl7Ovjakxxfv oTP2uK21968pp13zjbgrCgj6XiwBAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUg8bA xGQH5HE2srTOaoJghSeBsm8wHwYDVR0jBBgwFoAUZbPoGBw9qNHWQehKRcjvgjnd fqcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjdCOEQxLzJGNjlFOEMyMjFGMDExRUU4NjQ2OTcwRjRBRDlFNkZDL1piUG9H Qnc5cU5IV1FlaEtSY2p2Z2puZGZxYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl L1piUG9HQnc5cU5IV1FlaEtSY2p2Z2puZGZxYy5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y ZXBvc2l0b3J5L0YzNjdCOEQxLzJGNjlFOEMyMjFGMDExRUU4NjQ2OTcwRjRBRDlF NkZDLzJDRjRGMUQwRjIzMjExRjBBRjMxRUFDRkRBRTRFQzlDLnJvYTA1BggrBgEF BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBARRW+AwDQYJKoZIhvcNAQELBQAD ggEBAD93YRkl+na1qEbqhqhFvyIjF3/uhD7VcSmEmPG2JtkRRpgIbM3FtYw2oKPz RDBaA6xghJCSkP9ZJCSzZb9UejFTSHsWBAEIGt7ENojAKdg23dYBOykH3P3AVtM2 1Efa9sicZn9fwZMjTt8PGnRBwf16iZiJtwaCMEcoOMCyplrgvZYd/LLZ1toh6zrI ZK0NRNZYU7v6KyPCSWsieCp0kvjcJ4AHgSXtK8hk9J9xUNLqR9fIGZNppOtGWIxN e8Avmo6RLwJTDFuBo8G8tQXAKG7nDxZbvZMMIuozmxJa5mSqwZ4M/JFX2/EClizu H0HxBjZwLX3rArh2YiMYVZZmad0= -----END CERTIFICATE-----Generated at Mon Jan 26 08:02:52 2026 by rpki-client