This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D9552C4F7D311F0A1266BC1DAE4EC9C.roa File: 1D9552C4F7D311F0A1266BC1DAE4EC9C.roa (raw, json) Hash identifier: kVaBvF5x5cvArPignh13H/Uv1q42RnuLwyUe3gByYhw= Subject key identifier: 77:88:F0:C3:B3:C5:CB:CC:4D:DC:6C:D6:60:68:99:B3:BA:53:A1:2A Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B602 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D9552C4F7D311F0A1266BC1DAE4EC9C.roa Signing time: Thu 22 Jan 2026 20:44:16 +0000 ROA not before: Thu 22 Jan 2026 20:44:11 +0000 ROA not after: Mon 22 Jan 2029 20:44:11 +0000 asID: 17561 IP address blocks: 154.199.160.0/24 maxlen: 24 154.199.161.0/24 maxlen: 24 154.199.162.0/24 maxlen: 24 154.199.163.0/24 maxlen: 24 154.199.164.0/24 maxlen: 24 154.199.165.0/24 maxlen: 24 154.199.166.0/24 maxlen: 24 154.199.167.0/24 maxlen: 24 154.199.168.0/24 maxlen: 24 154.199.169.0/24 maxlen: 24 154.199.170.0/24 maxlen: 24 154.199.171.0/24 maxlen: 24 154.199.172.0/24 maxlen: 24 154.199.173.0/24 maxlen: 24 154.199.174.0/24 maxlen: 24 154.199.175.0/24 maxlen: 24 154.199.176.0/24 maxlen: 24 154.199.177.0/24 maxlen: 24 154.199.178.0/24 maxlen: 24 154.199.179.0/24 maxlen: 24 154.199.180.0/24 maxlen: 24 154.199.181.0/24 maxlen: 24 154.199.182.0/24 maxlen: 24 154.199.183.0/24 maxlen: 24 154.199.184.0/24 maxlen: 24 154.199.185.0/24 maxlen: 24 154.199.186.0/24 maxlen: 24 154.199.187.0/24 maxlen: 24 154.199.188.0/24 maxlen: 24 154.199.189.0/24 maxlen: 24 154.199.190.0/24 maxlen: 24 154.199.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112130 (0x1b602) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Jan 22 20:44:11 2026 GMT Not After : Jan 22 20:44:11 2029 GMT Subject: CN=69728c20-3c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e7:a6:20:63:98:c8:5a:67:27:31:fd:a5:28: 56:30:8e:16:56:c1:53:0d:d5:87:6a:31:52:ba:77: d7:f3:b8:fe:ed:28:b5:07:65:b5:49:ed:91:93:c6: 9f:c0:25:c9:75:55:b5:91:04:1d:3e:a1:6c:31:b0: 2b:e0:37:47:fa:3d:84:f6:ba:9d:37:b5:76:e5:58: 4d:aa:8a:dd:58:ef:61:2f:aa:14:40:78:3b:32:07: 5b:2b:e4:59:0d:54:14:f7:02:5f:c5:91:fa:55:64: 18:9f:48:17:35:1b:39:73:6f:1c:a9:31:6d:c1:b9: e5:2a:5e:b9:ca:83:69:be:8d:4d:d2:bc:ab:ad:0b: 24:94:c9:46:ef:32:fc:46:e7:7c:4c:d0:9d:c7:0f: 18:65:0e:ba:53:87:9e:1a:3b:45:f2:a4:89:d0:72: 96:09:d3:fb:e0:35:af:2f:29:0a:49:34:a4:66:da: ef:64:a2:70:1d:88:6a:96:fc:1d:01:e8:be:2a:b6: 12:bc:c3:35:04:38:34:64:89:71:f0:2e:fd:5c:82: d4:2f:28:f5:d0:19:6b:a4:e9:f5:76:4b:43:a2:3e: 27:85:c8:31:36:d0:de:e3:08:d9:58:8c:17:bd:79: 14:c6:85:4a:51:f5:cd:f4:1c:de:c2:5e:aa:b4:19: a4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:88:F0:C3:B3:C5:CB:CC:4D:DC:6C:D6:60:68:99:B3:BA:53:A1:2A X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1D9552C4F7D311F0A1266BC1DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.199.160.0/19 Signature Algorithm: sha256WithRSAEncryption 86:78:4d:07:92:1b:44:a3:6a:e8:fa:3d:9e:a8:7c:b4:9c:7f: 01:3d:4c:7b:38:e9:f0:77:5e:cb:88:18:d1:7b:45:cd:2f:9a: 9f:9f:a8:e2:93:14:ba:11:49:4e:52:9e:63:03:2f:7a:ac:5b: 83:49:ed:54:57:aa:c6:5a:9d:1c:f9:6c:37:91:6c:41:0e:49: 67:8d:94:73:e6:1f:fc:0d:48:a6:c2:39:39:10:ec:b8:e3:a1: 62:8b:a0:2f:b4:50:fd:36:a1:e3:9c:ca:df:d9:9c:f8:9b:78: ca:48:b9:f4:27:22:a6:59:c1:66:da:06:21:71:68:ae:48:4d: a7:6e:1b:24:33:c5:f1:cd:78:5e:ce:de:c2:88:d6:65:95:ed: c7:80:90:3c:55:e1:22:52:a3:dc:06:b0:02:05:62:3c:15:fc: e6:47:b2:0c:6a:a2:43:c1:c3:c4:85:25:e6:c9:c4:ae:5e:fd: 3c:53:8b:7e:8c:e5:42:09:d7:31:df:28:80:0f:04:83:5d:33: 41:f6:a9:8a:e5:8e:e9:9d:e0:d5:89:93:62:3a:33:d9:c6:37: c3:a7:a5:78:9a:7c:cf:01:ba:d3:8a:bc:ff:9c:18:b3:68:36: f7:35:cc:da:9b:ef:33:81:17:7f:26:5e:ba:29:5d:be:2c:27: b8:e4:8e:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAbYCMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjYwMTIyMjA0NDExWhcNMjkwMTIyMjA0NDExWjAYMRYw FAYDVQQDEw02OTcyOGMyMC0zYzFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAwuemIGOYyFpnJzH9pShWMI4WVsFTDdWHajFSunfX87j+7Si1B2W1Se2R k8afwCXJdVW1kQQdPqFsMbAr4DdH+j2E9rqdN7V25VhNqordWO9hL6oUQHg7Mgdb K+RZDVQU9wJfxZH6VWQYn0gXNRs5c28cqTFtwbnlKl65yoNpvo1N0ryrrQsklMlG 7zL8Rud8TNCdxw8YZQ66U4eeGjtF8qSJ0HKWCdP74DWvLykKSTSkZtrvZKJwHYhq lvwdAei+KrYSvMM1BDg0ZIlx8C79XILULyj10BlrpOn1dktDoj4nhcgxNtDe4wjZ WIwXvXkUxoVKUfXN9Bzewl6qtBmkpwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHeI 8MOzxcvMTdxs1mBombO6U6EqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8xRDk1NTJDNEY3RDMxMUYwQTEyNjZCQzFEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmsegMA0GCSqGSIb3DQEB CwUAA4IBAQCGeE0HkhtEo2ro+j2eqHy0nH8BPUx7OOnwd17LiBjRe0XNL5qfn6ji kxS6EUlOUp5jAy96rFuDSe1UV6rGWp0c+Ww3kWxBDklnjZRz5h/8DUimwjk5EOy4 46Fii6AvtFD9NqHjnMrf2Zz4m3jKSLn0JyKmWcFm2gYhcWiuSE2nbhskM8XxzXhe zt7CiNZlle3HgJA8VeEiUqPcBrACBWI8FfzmR7IMaqJDwcPEhSXmycSuXv08U4t+ jOVCCdcx3yiADwSDXTNB9qmK5Y7pneDViZNiOjPZxjfDp6V4mnzPAbrTirz/nBiz aDb3Nczam+8zgRd/Jl66KV2+LCe45I4r -----END CERTIFICATE-----Generated at Sun Jan 25 07:20:56 2026 by rpki-client