This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/857C6338F13811F08947FFD6DAE4EC9C.roa File: 857C6338F13811F08947FFD6DAE4EC9C.roa (raw, json) Hash identifier: EQjufZY+Ld4Nc6rRRR5Pa+LhyHbL3SiAVgHsy5rcUII= Subject key identifier: 19:36:FB:38:01:77:E6:3E:4F:3C:FC:7D:35:52:A9:BE:05:EB:E7:35 Certificate issuer: /CN=F367B8D1AF/serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6 Certificate serial: 03B3 Authority key identifier: 2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/857C6338F13811F08947FFD6DAE4EC9C.roa Signing time: Wed 14 Jan 2026 11:02:31 +0000 ROA not before: Wed 14 Jan 2026 11:02:26 +0000 ROA not after: Thu 30 Dec 2049 11:02:26 +0000 asID: 28683 IP address blocks: 41.85.160.0/19 maxlen: 19 41.85.160.0/19 maxlen: 20 41.85.160.0/19 maxlen: 21 41.85.160.0/19 maxlen: 22 41.85.160.0/19 maxlen: 23 41.85.160.0/19 maxlen: 24 41.85.160.0/24 maxlen: 24 41.85.161.0/24 maxlen: 24 41.85.162.0/24 maxlen: 24 41.85.163.0/24 maxlen: 24 41.85.164.0/24 maxlen: 24 41.85.165.0/24 maxlen: 24 41.85.166.0/24 maxlen: 24 41.85.167.0/24 maxlen: 24 41.85.168.0/24 maxlen: 24 41.85.169.0/24 maxlen: 24 41.85.170.0/24 maxlen: 24 41.85.171.0/24 maxlen: 24 41.85.172.0/24 maxlen: 24 41.85.173.0/24 maxlen: 24 41.85.174.0/24 maxlen: 24 41.85.175.0/24 maxlen: 24 41.85.176.0/21 maxlen: 21 41.85.176.0/22 maxlen: 22 41.85.176.0/24 maxlen: 24 41.85.177.0/24 maxlen: 24 41.85.178.0/23 maxlen: 23 41.85.178.0/24 maxlen: 24 41.85.179.0/24 maxlen: 24 41.85.180.0/24 maxlen: 24 41.85.181.0/24 maxlen: 24 41.85.182.0/24 maxlen: 24 41.85.183.0/24 maxlen: 24 41.85.184.0/21 maxlen: 21 41.85.184.0/24 maxlen: 24 41.85.185.0/24 maxlen: 24 41.85.186.0/24 maxlen: 24 41.85.187.0/24 maxlen: 24 41.85.188.0/22 maxlen: 22 41.85.188.0/24 maxlen: 24 41.85.189.0/24 maxlen: 24 41.85.190.0/24 maxlen: 24 41.85.191.0/24 maxlen: 24 2001:4320::/32 maxlen: 32 2001:4320::/32 maxlen: 40 2001:4320::/32 maxlen: 48 2001:4320::/32 maxlen: 54 2001:4320::/32 maxlen: 56 2001:4320::/32 maxlen: 64 2001:4320::/32 maxlen: 112 2001:4320::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.mft rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F367B8D1AF, serialNumber=2FD39D92ACDAA5137BCE481ABE6C8DF1DCCD0EF6 Validity Not Before: Jan 14 11:02:26 2026 GMT Not After : Dec 30 11:02:26 2049 GMT Subject: CN=696777c7-c19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ca:37:2e:f4:0f:c9:eb:bc:83:21:4a:76:82: 30:cf:3e:91:37:97:f4:80:7e:bb:46:8c:2c:62:8f: b3:5d:05:4b:78:04:28:ef:5d:bf:68:cf:fb:47:e7: 48:8e:e3:53:77:a6:31:4a:cb:ae:2a:6f:d8:e1:12: 6c:f9:d6:2a:d7:20:c1:21:c3:e3:c7:4e:92:ab:4f: b6:ce:ed:20:9f:2e:34:e8:f1:6c:1a:ea:57:5e:7c: 50:18:30:2d:35:06:e9:19:c5:e9:bf:7e:a0:b6:ce: a8:01:c4:27:96:c4:a8:c8:a3:8f:0a:b3:c9:f2:bd: 91:7e:7a:fa:b4:78:33:56:5d:c3:e5:35:26:97:48: 5a:4d:e6:ab:fe:81:63:ae:0d:f8:d0:d0:5f:d6:b1: d6:06:7e:5a:1b:75:2d:45:f1:96:92:eb:83:9f:87: 26:81:b6:97:db:50:36:3d:3a:b3:d0:67:e8:9f:3b: 0f:73:c2:c3:d7:76:7c:96:44:43:98:13:6f:7d:44: fa:b5:ea:d5:b6:0a:d3:10:3d:9d:fb:b6:b6:5a:d8: 80:bb:1e:8a:ab:e2:32:7d:22:93:a0:45:6a:83:34: 39:f4:dc:9f:2f:c8:02:0e:c4:d6:24:61:6d:ad:bf: cd:76:1d:3a:4b:38:e7:3e:4c:97:a1:59:6f:24:a1: 3e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:36:FB:38:01:77:E6:3E:4F:3C:FC:7D:35:52:A9:BE:05:EB:E7:35 X509v3 Authority Key Identifier: keyid:2F:D3:9D:92:AC:DA:A5:13:7B:CE:48:1A:BE:6C:8D:F1:DC:CD:0E:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/L9OdkqzapRN7zkgavmyN8dzNDvY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/L9OdkqzapRN7zkgavmyN8dzNDvY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/561E2FDC21F011EEACFC01104AD9E6FC/857C6338F13811F08947FFD6DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 41.85.160.0/19 IPv6: 2001:4320::/32 Signature Algorithm: sha256WithRSAEncryption a3:30:1b:a9:23:ff:26:45:30:82:14:08:7f:99:73:4c:47:97: cc:2a:a8:1f:4c:2a:97:04:27:a9:3a:23:24:61:cf:e2:cf:21: 00:ce:d9:87:b7:10:f2:56:bb:f8:93:b6:00:36:65:d5:1f:c2: ea:de:c1:15:7c:77:15:6b:e9:d4:3b:ef:89:b7:72:35:26:2a: de:eb:3e:d8:b6:74:6f:9a:b0:94:e4:b1:66:25:01:c3:bc:bd: cb:a6:cb:f5:68:cd:8b:a6:dc:0f:5c:a0:fe:ff:45:1c:27:e7: 05:f3:a5:0a:98:1a:ce:53:d0:2e:3c:68:d9:62:8a:2e:96:3a: a1:10:12:f4:78:5a:cf:95:7c:8d:42:52:b8:40:b8:ef:db:3f: 33:a6:c5:6f:3b:57:e7:1f:95:34:aa:53:bd:c5:fa:1a:ce:cd: 30:a6:05:ed:13:00:40:ee:68:2b:51:ef:03:93:f1:b8:9a:46: 79:ae:99:62:d7:72:1b:91:b4:a2:4d:d1:c9:20:7a:88:5c:df: da:e4:dd:b2:f1:12:70:52:ca:63:17:7a:6d:b2:2d:9d:89:4f: 53:2e:05:ea:66:e3:83:89:1b:1c:0f:47:b5:70:a3:04:bc:d5: b9:17:2e:f1:34:5c:f2:d1:b6:c9:80:94:07:79:78:11:91:aa: 1b:a0:3a:f3 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 N0I4RDFBRjExMC8GA1UEBRMoMkZEMzlEOTJBQ0RBQTUxMzdCQ0U0ODFBQkU2QzhE RjFEQ0NEMEVGNjAeFw0yNjAxMTQxMTAyMjZaFw00OTEyMzAxMTAyMjZaMBgxFjAU BgNVBAMTDTY5Njc3N2M3LWMxOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDcyjcu9A/J67yDIUp2gjDPPpE3l/SAfrtGjCxij7NdBUt4BCjvXb9oz/tH 50iO41N3pjFKy64qb9jhEmz51irXIMEhw+PHTpKrT7bO7SCfLjTo8Wwa6ldefFAY MC01BukZxem/fqC2zqgBxCeWxKjIo48Ks8nyvZF+evq0eDNWXcPlNSaXSFpN5qv+ gWOuDfjQ0F/WsdYGflobdS1F8ZaS64OfhyaBtpfbUDY9OrPQZ+ifOw9zwsPXdnyW REOYE299RPq16tW2CtMQPZ37trZa2IC7Hoqr4jJ9IpOgRWqDNDn03J8vyAIOxNYk YW2tv812HTpLOOc+TJehWW8koT57AgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUGTb7 OAF35j5PPPx9NVKpvgXr5zUwHwYDVR0jBBgwFoAUL9OdkqzapRN7zkgavmyN8dzN DvYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjdCOEQxLzU2MUUyRkRDMjFGMDExRUVBQ0ZDMDExMDRBRDlFNkZDL0w5T2Rr cXphcFJON3prZ2F2bXlOOGR6TkR2WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0w5T2RrcXphcFJON3prZ2F2bXlOOGR6TkR2WS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjdCOEQxLzU2MUUyRkRDMjFGMDExRUVBQ0ZDMDExMDRB RDlFNkZDLzg1N0M2MzM4RjEzODExRjA4OTQ3RkZENkRBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAUpVaAwDQQCAAIwBwMFACAB QyAwDQYJKoZIhvcNAQELBQADggEBAKMwG6kj/yZFMIIUCH+Zc0xHl8wqqB9MKpcE J6k6IyRhz+LPIQDO2Ye3EPJWu/iTtgA2ZdUfwurewRV8dxVr6dQ774m3cjUmKt7r Pti2dG+asJTksWYlAcO8vcumy/VozYum3A9coP7/RRwn5wXzpQqYGs5T0C48aNli ii6WOqEQEvR4Ws+VfI1CUrhAuO/bPzOmxW87V+cflTSqU73F+hrOzTCmBe0TAEDu aCtR7wOT8biaRnmumWLXchuRtKJN0ckgeohc39rk3bLxEnBSymMXem2yLZ2JT1Mu Bepm44OJGxwPR7VwowS81bkXLvE0XPLRtsmAlAd5eBGRqhugOvM= -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:14 2026 by rpki-client