This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/2CF3A3EEF23111F08DE709CADAE4EC9C.roa File: 2CF3A3EEF23111F08DE709CADAE4EC9C.roa (raw, json) Hash identifier: E/G6AxJRTy6BWkfQETWJC1LpmEof5Nqv6ggmyx/krZg= Subject key identifier: D0:D8:D0:50:C1:1D:01:42:5C:2D:1E:4B:F3:BF:4E:B3:8E:83:17:26 Certificate issuer: /CN=F367B8D1AF/serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6 Certificate serial: 03BF Authority key identifier: 2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/2CF3A3EEF23111F08DE709CADAE4EC9C.roa Signing time: Thu 15 Jan 2026 16:42:27 +0000 ROA not before: Thu 15 Jan 2026 16:42:22 +0000 ROA not after: Thu 30 Dec 2049 16:42:22 +0000 asID: 328228 IP address blocks: 41.216.32.0/19 maxlen: 19 41.216.32.0/19 maxlen: 21 41.216.32.0/24 maxlen: 24 41.216.33.0/24 maxlen: 24 41.216.34.0/24 maxlen: 24 41.216.35.0/24 maxlen: 24 41.216.36.0/24 maxlen: 24 41.216.37.0/24 maxlen: 24 41.216.38.0/24 maxlen: 24 41.216.39.0/24 maxlen: 24 41.216.40.0/24 maxlen: 24 41.216.41.0/24 maxlen: 24 41.216.42.0/23 maxlen: 23 41.216.42.0/24 maxlen: 24 41.216.43.0/24 maxlen: 24 41.216.44.0/24 maxlen: 24 41.216.45.0/24 maxlen: 24 41.216.46.0/24 maxlen: 24 41.216.47.0/24 maxlen: 24 41.216.48.0/24 maxlen: 24 41.216.49.0/24 maxlen: 24 41.216.50.0/24 maxlen: 24 41.216.51.0/24 maxlen: 24 41.216.52.0/24 maxlen: 24 41.216.53.0/24 maxlen: 24 41.216.54.0/24 maxlen: 24 41.216.55.0/24 maxlen: 24 41.216.56.0/22 maxlen: 22 41.216.56.0/24 maxlen: 24 41.216.57.0/24 maxlen: 24 41.216.58.0/24 maxlen: 24 41.216.59.0/24 maxlen: 24 41.216.60.0/24 maxlen: 24 41.216.61.0/24 maxlen: 24 41.216.62.0/24 maxlen: 24 41.216.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 959 (0x3bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F367B8D1AF, serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6 Validity Not Before: Jan 15 16:42:22 2026 GMT Not After : Dec 30 16:42:22 2049 GMT Subject: CN=696918f3-cc0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0d:35:aa:3e:c7:b7:c3:8f:e8:b2:30:2e:cf: e5:db:bd:e6:17:d4:bb:80:c0:c4:31:bf:28:8e:ec: 6e:7b:61:8c:08:e8:5a:c7:46:28:31:76:a0:c5:11: cb:a0:c9:2a:d6:3c:c0:fb:94:a2:45:4d:fb:9c:3e: 54:37:52:f2:a3:f1:7a:d1:e2:04:b7:e4:0f:1b:55: ec:a7:8d:c4:a6:9d:90:ca:62:32:4e:46:75:44:1e: 7f:f1:1d:c5:82:59:1e:86:82:c7:20:c3:dd:3c:16: d2:d9:c8:06:df:51:92:de:4b:8a:1a:20:74:9c:05: 7c:51:42:a6:f9:ab:fc:30:1f:f3:5d:a6:e7:9d:4e: 1f:54:85:2f:04:65:31:49:e2:fc:f0:c0:22:3c:e7: bb:7e:8f:c2:d9:5d:45:be:3e:d1:89:e3:2e:a9:3d: 6d:21:cb:1d:ea:1c:aa:bb:b1:b6:ec:ff:02:9b:84: 5d:2c:9b:2a:ad:63:e4:e2:5c:c1:7f:12:91:d2:7a: f9:91:b4:58:f2:92:25:1d:2a:9d:2b:a1:66:51:64: dc:c1:1c:19:cd:da:e6:7b:0d:4e:b2:96:5e:90:d4: 5d:95:35:5c:84:90:d5:f6:48:ce:87:3f:37:c5:43: c1:b5:8f:89:db:0d:b4:94:85:8a:94:73:f0:8e:11: 2a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:D8:D0:50:C1:1D:01:42:5C:2D:1E:4B:F3:BF:4E:B3:8E:83:17:26 X509v3 Authority Key Identifier: keyid:2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/2CF3A3EEF23111F08DE709CADAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 41.216.32.0/19 Signature Algorithm: sha256WithRSAEncryption 74:16:44:7e:d7:42:00:2b:02:0d:71:5a:9f:05:12:e8:6f:a6: c3:da:fd:10:f2:18:71:b4:65:c5:98:eb:62:f3:70:d2:fd:ea: aa:f2:da:34:40:22:63:51:51:8e:14:e6:40:ca:e6:55:94:80: d3:8a:19:f4:20:e0:14:ab:e7:2c:10:6f:86:45:29:6a:ad:79: 13:d3:8f:01:f8:bb:fd:46:5f:32:74:69:c2:05:ce:c0:b8:79: 18:fa:c1:a3:f7:42:6a:7d:08:b8:1b:5d:9c:6f:51:78:21:a5: cb:cf:e7:3d:7a:c6:e1:87:33:fd:90:e9:99:8f:a7:d3:98:de: d7:d9:1f:1c:d2:c0:4f:4b:25:f7:c1:85:8a:ee:f9:69:97:bf: c7:4a:73:cb:15:55:bd:39:5f:92:6a:4d:c4:cd:0f:3f:5e:eb: f7:82:94:2d:60:26:a0:15:55:ce:39:ee:1c:d0:6f:e6:1e:02: 15:1a:d2:f6:24:7e:5d:c0:1d:5b:ce:aa:c4:23:e1:72:01:99: 9a:59:3a:25:88:74:b2:e5:4d:4a:51:bb:a8:ac:89:54:5a:f3: d1:44:37:59:63:a1:47:25:c3:31:78:29:fd:c7:61:84:32:3e: 17:43:21:17:35:67:d8:70:3c:20:68:fa:b4:4a:9c:26:f9:76: b2:53:f8:95 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICA78wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 N0I4RDFBRjExMC8GA1UEBRMoMkZEMzlEOTJBQ0RBQTUxMzdCQ0U0ODFBQkU2QzhE RjFEQ0NEMEVGNjAeFw0yNjAxMTUxNjQyMjJaFw00OTEyMzAxNjQyMjJaMBgxFjAU BgNVBAMTDTY5NjkxOGYzLWNjMGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCrDTWqPse3w4/osjAuz+XbveYX1LuAwMQxvyiO7G57YYwI6FrHRigxdqDF EcugySrWPMD7lKJFTfucPlQ3UvKj8XrR4gS35A8bVeynjcSmnZDKYjJORnVEHn/x HcWCWR6Ggscgw908FtLZyAbfUZLeS4oaIHScBXxRQqb5q/wwH/NdpuedTh9UhS8E ZTFJ4vzwwCI857t+j8LZXUW+PtGJ4y6pPW0hyx3qHKq7sbbs/wKbhF0smyqtY+Ti XMF/EpHSevmRtFjykiUdKp0roWZRZNzBHBnN2uZ7DU6yll6Q1F2VNVyEkNX2SM6H PzfFQ8G1j4nbDbSUhYqUc/COESoJAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQU0NjQ UMEdAUJcLR5L879Os46DFyYwHwYDVR0jBBgwFoAUL9OdkqzapRN7zkgavmyN8dzN DvYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjdCOEQxLzU2MUUyRkRDMjFGMDExRUVBQ0ZDMDExMDRBRDlFNkZDL0w5T2Rr cXphcFJON3prZ2F2bXlOOGR6TkR2WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0w5T2RrcXphcFJON3prZ2F2bXlOOGR6TkR2WS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjdCOEQxLzU2MUUyRkRDMjFGMDExRUVBQ0ZDMDExMDRB RDlFNkZDLzJDRjNBM0VFRjIzMTExRjA4REU3MDlDQURBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUp2CAwDQYJKoZIhvcNAQEL BQADggEBAHQWRH7XQgArAg1xWp8FEuhvpsPa/RDyGHG0ZcWY62LzcNL96qry2jRA ImNRUY4U5kDK5lWUgNOKGfQg4BSr5ywQb4ZFKWqteRPTjwH4u/1GXzJ0acIFzsC4 eRj6waP3Qmp9CLgbXZxvUXghpcvP5z16xuGHM/2Q6ZmPp9OY3tfZHxzSwE9LJffB hYru+WmXv8dKc8sVVb05X5JqTcTNDz9e6/eClC1gJqAVVc457hzQb+YeAhUa0vYk fl3AHVvOqsQj4XIBmZpZOiWIdLLlTUpRu6isiVRa89FEN1ljoUclwzF4Kf3HYYQy PhdDIRc1Z9hwPCBo+rRKnCb5drJT+JU= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:29 2026 by rpki-client