This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/5DD33868F1A411F089B9E6DEDAE4EC9C.roa File: 5DD33868F1A411F089B9E6DEDAE4EC9C.roa (raw, json) Hash identifier: Rczn2z0Ecrdjwnh0bP0fcW/hWWKZrz4Aa+uBL6Wpovg= Subject key identifier: C0:62:BD:D9:C4:34:5A:BC:F8:B4:60:D6:0B:15:9A:D3:86:5A:F5:FB Certificate issuer: /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA Certificate serial: 03B0 Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA Authority info access: rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/5DD33868F1A411F089B9E6DEDAE4EC9C.roa Signing time: Wed 14 Jan 2026 23:54:30 +0000 ROA not before: Thu 15 Jan 2026 23:54:25 +0000 ROA not after: Thu 30 Dec 2049 23:54:25 +0000 asID: 28683 IP address blocks: 137.255.0.0/16 maxlen: 16 137.255.0.0/16 maxlen: 20 137.255.0.0/16 maxlen: 21 137.255.0.0/16 maxlen: 22 137.255.0.0/16 maxlen: 23 137.255.0.0/16 maxlen: 24 137.255.1.0/24 maxlen: 24 137.255.2.0/24 maxlen: 24 137.255.3.0/24 maxlen: 24 137.255.8.0/22 maxlen: 22 137.255.8.0/22 maxlen: 24 137.255.8.0/24 maxlen: 24 137.255.9.0/24 maxlen: 24 137.255.10.0/24 maxlen: 24 137.255.11.0/24 maxlen: 24 137.255.12.0/22 maxlen: 22 137.255.12.0/22 maxlen: 24 137.255.12.0/24 maxlen: 24 137.255.13.0/24 maxlen: 24 137.255.14.0/24 maxlen: 24 137.255.15.0/24 maxlen: 24 137.255.16.0/21 maxlen: 21 137.255.24.0/21 maxlen: 21 137.255.32.0/20 maxlen: 20 137.255.32.0/21 maxlen: 21 137.255.40.0/21 maxlen: 21 137.255.48.0/21 maxlen: 21 137.255.56.0/21 maxlen: 21 137.255.64.0/21 maxlen: 21 137.255.72.0/21 maxlen: 21 137.255.80.0/21 maxlen: 21 137.255.88.0/21 maxlen: 21 137.255.88.0/21 maxlen: 24 137.255.90.0/24 maxlen: 24 137.255.96.0/21 maxlen: 21 137.255.104.0/21 maxlen: 21 137.255.112.0/21 maxlen: 21 137.255.120.0/21 maxlen: 21 137.255.128.0/21 maxlen: 21 137.255.136.0/21 maxlen: 21 137.255.144.0/21 maxlen: 21 137.255.152.0/21 maxlen: 21 137.255.168.0/21 maxlen: 21 137.255.176.0/21 maxlen: 21 137.255.184.0/21 maxlen: 21 137.255.192.0/21 maxlen: 21 137.255.200.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 28 Jan 2026 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 944 (0x3b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F367B8D1AR, serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA Validity Not Before: Jan 15 23:54:25 2026 GMT Not After : Dec 30 23:54:25 2049 GMT Subject: CN=69682cb6-9d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:e1:c3:96:c2:75:13:81:c3:cc:be:58:19: ce:0a:5a:72:76:fe:9d:57:33:35:35:df:66:ef:6f: 81:56:ae:e8:91:5a:b8:5a:09:97:9b:ca:19:4f:4f: e4:bc:4c:6b:1d:2f:0f:18:4b:ce:30:7c:da:dc:5a: e5:d6:3d:fb:6b:7d:a5:7a:66:64:0a:ca:6e:aa:88: 47:67:da:03:e6:62:38:78:28:8e:7e:fa:1f:f0:a4: 9d:bc:20:4d:7b:11:2e:8c:ce:a9:2d:cf:c2:15:68: 82:8e:25:7e:7e:f3:65:cd:c3:71:d9:c5:0d:cd:3e: cf:d0:ef:46:04:71:eb:99:42:69:10:f6:f9:4d:33: 1b:23:b2:ee:5e:3a:52:91:bb:f8:da:d2:61:b6:50: 1b:64:37:b4:44:a1:1c:ca:56:b9:eb:f9:16:fb:2c: 0a:41:57:83:78:59:ca:d0:ed:e3:81:5a:7f:9a:03: 4a:af:28:7a:42:d9:5d:89:ac:ba:84:da:75:8f:e8: bc:71:69:f3:f7:44:ca:52:00:2c:28:97:e9:cf:3a: 38:67:46:e9:83:d7:03:7a:7f:ee:32:fc:d3:c4:20: ca:ca:fa:c4:62:e1:da:79:c4:50:a9:18:e1:df:c4: 40:37:1d:86:8a:df:fa:76:01:97:23:e3:ae:10:f4: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:62:BD:D9:C4:34:5A:BC:F8:B4:60:D6:0B:15:9A:D3:86:5A:F5:FB X509v3 Authority Key Identifier: keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/5DD33868F1A411F089B9E6DEDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 137.255.0.0/16 Signature Algorithm: sha256WithRSAEncryption 1a:38:2e:c2:c8:4c:32:66:c4:95:5d:d0:06:82:44:76:24:26: 47:be:5b:99:a1:ce:02:2f:16:57:8b:0b:d4:59:0b:b7:b6:42: 7e:84:f9:70:fd:b2:61:8f:3b:9a:72:eb:17:d8:ab:b5:65:70: 97:4b:e2:66:7d:b7:df:ee:f5:91:61:e5:8b:ab:e6:66:83:db: d2:8d:12:ad:f1:11:81:39:fe:23:7f:c0:36:49:86:07:1c:51: 43:da:bc:cc:71:97:df:e0:5c:c1:e4:87:27:88:6e:0d:3a:1f: 1f:29:b9:ff:3f:ed:4c:10:d9:4f:3d:ec:38:02:a3:af:01:b9: df:7b:e8:1c:a3:0e:52:6b:30:6f:49:22:c6:00:77:c3:ed:40: cb:3a:d9:b6:a3:2d:0e:41:ea:a4:0d:56:cf:6d:97:f7:3e:9b: 31:08:7c:52:66:e1:e8:3d:fb:74:13:f6:79:27:9d:1a:14:23: 35:d2:b4:a6:82:02:53:46:b3:6f:0c:a2:fe:76:34:d7:e0:15: 10:f0:fd:47:8c:15:e4:34:eb:f6:69:0b:52:12:f2:59:0e:13: 93:67:0f:0f:df:58:3c:25:e8:d4:ed:19:19:b8:c4:7c:ee:a5: ae:8e:95:1b:53:b6:f1:2d:1a:de:86:3f:f5:c1:96:26:c4:49: b6:a4:71:70 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 N0I4RDFBUjExMC8GA1UEBRMoQzREMDE0QUQ2ODc1MEU3NUU5MTA0Q0VBNUMyOUIz QjcxOTU4RkREQTAeFw0yNjAxMTUyMzU0MjVaFw00OTEyMzAyMzU0MjVaMBgxFjAU BgNVBAMTDTY5NjgyY2I2LTlkMDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQC29eHDlsJ1E4HDzL5YGc4KWnJ2/p1XMzU132bvb4FWruiRWrhaCZebyhlP T+S8TGsdLw8YS84wfNrcWuXWPftrfaV6ZmQKym6qiEdn2gPmYjh4KI5++h/wpJ28 IE17ES6Mzqktz8IVaIKOJX5+82XNw3HZxQ3NPs/Q70YEceuZQmkQ9vlNMxsjsu5e OlKRu/ja0mG2UBtkN7REoRzKVrnr+Rb7LApBV4N4WcrQ7eOBWn+aA0qvKHpC2V2J rLqE2nWP6LxxafP3RMpSACwol+nPOjhnRumD1wN6f+4y/NPEIMrK+sRi4dp5xFCp GOHfxEA3HYaK3/p2AZcj464Q9MCjAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQUwGK9 2cQ0Wrz4tGDWCxWa04Za9fswHwYDVR0jBBgwFoAUxNAUrWh1DnXpEEzqXCmztxlY /dowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjdCOEQxLzQyNzNFMDRFMjFGMDExRUVBM0EyQkMwRjRBRDlFNkZDL3hOQVVy V2gxRG5YcEVFenFYQ216dHhsWV9kby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L3hOQVVyV2gxRG5YcEVFenFYQ216dHhsWV9kby5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y ZXBvc2l0b3J5L0YzNjdCOEQxLzQyNzNFMDRFMjFGMDExRUVBM0EyQkMwRjRBRDlF NkZDLzVERDMzODY4RjFBNDExRjA4OUI5RTZERURBRTRFQzlDLnJvYTA1BggrBgEF BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww HgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCJ/zANBgkqhkiG9w0BAQsFAAOC AQEAGjguwshMMmbElV3QBoJEdiQmR75bmaHOAi8WV4sL1FkLt7ZCfoT5cP2yYY87 mnLrF9irtWVwl0viZn233+71kWHli6vmZoPb0o0SrfERgTn+I3/ANkmGBxxRQ9q8 zHGX3+BcweSHJ4huDTofHym5/z/tTBDZTz3sOAKjrwG533voHKMOUmswb0kixgB3 w+1AyzrZtqMtDkHqpA1Wz22X9z6bMQh8Umbh6D37dBP2eSedGhQjNdK0poICU0az bwyi/nY01+AVEPD9R4wV5DTr9mkLUhLyWQ4Tk2cPD99YPCXo1O0ZGbjEfO6lro6V G1O28S0a3oY/9cGWJsRJtqRxcA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:58:02 2026 by rpki-client