This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/7977DC10F13E11F08E43847CDAE4EC9C.roa File: 7977DC10F13E11F08E43847CDAE4EC9C.roa (raw, json) Hash identifier: S6SqyKuMuszdFgWYXKbiOJ/eUFMOthzgeUjko1wpZeI= Subject key identifier: 95:6F:92:8F:2C:87:70:BE:A5:12:FD:4C:24:AD:27:7F:1C:43:4D:38 Certificate issuer: /CN=F367B8D1AF/serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6 Certificate serial: 03B5 Authority key identifier: 2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/7977DC10F13E11F08E43847CDAE4EC9C.roa Signing time: Wed 14 Jan 2026 11:45:08 +0000 ROA not before: Wed 14 Jan 2026 11:45:03 +0000 ROA not after: Thu 30 Dec 2049 11:45:03 +0000 asID: 328228 IP address blocks: 41.85.160.0/19 maxlen: 19 41.85.160.0/19 maxlen: 20 41.85.160.0/19 maxlen: 21 41.85.160.0/19 maxlen: 22 41.85.160.0/19 maxlen: 23 41.85.160.0/19 maxlen: 24 41.85.161.0/24 maxlen: 24 41.85.162.0/24 maxlen: 24 41.85.163.0/24 maxlen: 24 41.85.164.0/24 maxlen: 24 41.85.165.0/24 maxlen: 24 41.85.166.0/24 maxlen: 24 41.85.167.0/24 maxlen: 24 41.85.168.0/24 maxlen: 24 41.85.169.0/24 maxlen: 24 41.85.170.0/24 maxlen: 24 41.85.171.0/24 maxlen: 24 41.85.172.0/24 maxlen: 24 41.85.173.0/24 maxlen: 24 41.85.175.0/24 maxlen: 24 41.85.176.0/22 maxlen: 22 41.85.176.0/22 maxlen: 24 41.85.176.0/24 maxlen: 24 41.85.177.0/24 maxlen: 24 41.85.178.0/23 maxlen: 23 41.85.178.0/23 maxlen: 24 41.85.178.0/24 maxlen: 24 41.85.179.0/24 maxlen: 24 41.85.180.0/24 maxlen: 24 41.85.181.0/24 maxlen: 24 41.85.182.0/24 maxlen: 24 41.85.183.0/24 maxlen: 24 41.85.184.0/24 maxlen: 24 41.85.185.0/24 maxlen: 24 41.85.186.0/24 maxlen: 24 41.85.187.0/24 maxlen: 24 41.85.188.0/22 maxlen: 22 41.85.188.0/24 maxlen: 24 41.85.189.0/24 maxlen: 24 41.85.190.0/24 maxlen: 24 41.85.191.0/24 maxlen: 24 2001:4320::/32 maxlen: 32 2001:4320::/32 maxlen: 40 2001:4320::/32 maxlen: 48 2001:4320::/32 maxlen: 54 2001:4320::/32 maxlen: 56 2001:4320::/32 maxlen: 64 2001:4320::/32 maxlen: 100 2001:4320::/32 maxlen: 112 2001:4320::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 949 (0x3b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F367B8D1AF, serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6 Validity Not Before: Jan 14 11:45:03 2026 GMT Not After : Dec 30 11:45:03 2049 GMT Subject: CN=696781c4-dbb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c3:5b:65:b7:1e:55:46:1f:48:74:c2:fe:c3: 7e:ab:4f:d4:ac:f0:ad:69:ee:c1:ed:78:0e:7a:12: f8:fb:02:46:a4:bc:bf:85:74:73:f2:f0:e3:8e:31: ac:c6:cf:49:fe:97:40:e2:cb:27:07:62:62:cf:1b: 16:58:2e:bd:8e:f5:c7:b8:34:1c:96:b1:c3:31:02: 3a:d8:cf:cd:7d:0b:a3:0e:66:25:38:98:37:21:b1: 02:eb:09:99:52:6f:ba:f9:60:e4:40:be:66:49:06: f7:99:dd:ac:a4:8d:7f:b8:ca:da:f8:e4:b5:cd:35: d5:ac:d3:71:e9:27:e6:7f:db:27:6f:3d:45:9f:9a: 10:3e:1d:76:ef:ff:73:7a:d0:b0:b8:fa:ea:cb:3e: 40:6d:63:28:82:da:a4:97:53:d4:71:c9:66:3f:d0: 5a:9e:3d:66:97:aa:69:6a:7a:bb:c8:2d:d9:98:d2: 7c:c3:30:2d:d5:3d:ad:fa:b8:18:7f:f3:74:e6:b1: 53:a3:6d:5c:cf:ae:bd:97:cf:e8:df:0a:a0:26:ec: 92:cd:76:64:7c:3d:c0:50:d7:d9:f7:2b:69:e4:c6: 48:7a:70:95:cb:56:f9:24:72:2a:47:3e:f0:a2:32: d6:60:d1:d0:b5:02:fb:f2:f8:a4:ac:aa:ef:06:99: 20:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:6F:92:8F:2C:87:70:BE:A5:12:FD:4C:24:AD:27:7F:1C:43:4D:38 X509v3 Authority Key Identifier: keyid:2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/7977DC10F13E11F08E43847CDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 41.85.160.0/19 IPv6: 2001:4320::/32 Signature Algorithm: sha256WithRSAEncryption 7a:c8:8c:d6:87:44:57:90:a0:49:55:54:1d:18:56:19:96:77: 10:8f:a7:f8:3b:83:a0:a7:8a:38:cc:c1:5c:86:b0:94:41:41: 9f:01:e6:61:af:73:06:3d:0a:b4:6d:b6:c3:f8:41:ba:8b:34: 45:b2:2a:7c:1f:11:3c:a0:7e:d5:94:4f:65:23:b7:f3:76:be: 89:94:68:4c:bd:9c:a2:58:17:78:f6:16:df:31:2b:32:5a:d3: ac:30:59:62:39:2d:a5:e2:15:b0:6a:91:18:9e:8a:f2:85:54: 28:8c:8d:4f:f1:52:43:9f:00:78:57:2a:a8:b4:29:1d:aa:81: 14:71:c5:8f:84:60:f3:7a:1b:4c:ee:5f:4c:a7:b5:8f:e4:a5: 76:bf:f5:5e:b0:50:c1:f9:8c:07:3d:15:47:90:69:e1:ff:05: a6:d8:ea:de:3a:f5:8c:ee:24:dd:67:a8:f7:8d:12:58:78:ff: 5e:8c:d9:54:aa:52:20:89:56:ca:ce:3f:03:e9:6b:63:b2:46: 44:ed:54:e8:97:c9:9a:42:87:b9:3c:1d:ba:bd:34:38:85:7f: ac:07:0a:16:30:38:80:30:69:1c:62:0a:74:41:f5:ef:5a:f9: 51:05:47:00:f2:92:4b:88:59:46:a9:34:52:69:c5:b5:51:53: 44:27:3e:ed -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICA7UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 N0I4RDFBRjExMC8GA1UEBRMoMkZEMzlEOTJBQ0RBQTUxMzdCQ0U0ODFBQkU2QzhE RjFEQ0NEMEVGNjAeFw0yNjAxMTQxMTQ1MDNaFw00OTEyMzAxMTQ1MDNaMBgxFjAU BgNVBAMTDTY5Njc4MWM0LWRiYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDCw1tltx5VRh9IdML+w36rT9Ss8K1p7sHteA56Evj7AkakvL+FdHPy8OOO MazGz0n+l0DiyycHYmLPGxZYLr2O9ce4NByWscMxAjrYz819C6MOZiU4mDchsQLr CZlSb7r5YORAvmZJBveZ3aykjX+4ytr45LXNNdWs03HpJ+Z/2ydvPUWfmhA+HXbv /3N60LC4+urLPkBtYyiC2qSXU9RxyWY/0FqePWaXqmlqervILdmY0nzDMC3VPa36 uBh/83TmsVOjbVzPrr2Xz+jfCqAm7JLNdmR8PcBQ19n3K2nkxkh6cJXLVvkkcipH PvCiMtZg0dC1Avvy+KSsqu8GmSAFAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUlW+S jyyHcL6lEv1MJK0nfxxDTTgwHwYDVR0jBBgwFoAUL9OdkqzapRN7zkgavmyN8dzN DvYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjdCOEQxLzU2MUUyRkRDMjFGMDExRUVBQ0ZDMDExMDRBRDlFNkZDL0w5T2Rr cXphcFJON3prZ2F2bXlOOGR6TkR2WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0w5T2RrcXphcFJON3prZ2F2bXlOOGR6TkR2WS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjdCOEQxLzU2MUUyRkRDMjFGMDExRUVBQ0ZDMDExMDRB RDlFNkZDLzc5NzdEQzEwRjEzRTExRjA4RTQzODQ3Q0RBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAUpVaAwDQQCAAIwBwMFACAB QyAwDQYJKoZIhvcNAQELBQADggEBAHrIjNaHRFeQoElVVB0YVhmWdxCPp/g7g6Cn ijjMwVyGsJRBQZ8B5mGvcwY9CrRttsP4QbqLNEWyKnwfETygftWUT2Ujt/N2vomU aEy9nKJYF3j2Ft8xKzJa06wwWWI5LaXiFbBqkRieivKFVCiMjU/xUkOfAHhXKqi0 KR2qgRRxxY+EYPN6G0zuX0yntY/kpXa/9V6wUMH5jAc9FUeQaeH/BabY6t469Yzu JN1nqPeNElh4/16M2VSqUiCJVsrOPwPpa2OyRkTtVOiXyZpCh7k8Hbq9NDiFf6wH ChYwOIAwaRxiCnRB9e9a+VEFRwDykkuIWUapNFJpxbVRU0QnPu0= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:17 2026 by rpki-client