This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3ECE42F0F96011F089391ECFDAE4EC9C.roa File: 3ECE42F0F96011F089391ECFDAE4EC9C.roa (raw, json) Hash identifier: S1UkR51TnB8kge02NakouPHRX5xFYFHQSQO9mFVQ5Do= Subject key identifier: F2:29:DB:3C:7A:81:83:86:2A:93:78:D7:9D:16:2D:53:36:84:44:73 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B694 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3ECE42F0F96011F089391ECFDAE4EC9C.roa Signing time: Sat 24 Jan 2026 20:07:02 +0000 ROA not before: Sat 24 Jan 2026 20:06:56 +0000 ROA not after: Tue 03 Mar 2026 20:06:56 +0000 asID: 62240 IP address blocks: 154.194.99.0/24 maxlen: 24 154.194.100.0/24 maxlen: 24 154.194.101.0/24 maxlen: 24 154.194.102.0/24 maxlen: 24 154.194.104.0/24 maxlen: 24 154.194.105.0/24 maxlen: 24 154.194.106.0/24 maxlen: 24 154.194.107.0/24 maxlen: 24 154.194.108.0/24 maxlen: 24 154.196.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112276 (0x1b694) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Jan 24 20:06:56 2026 GMT Not After : Mar 3 20:06:56 2026 GMT Subject: CN=69752666-a5e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:89:76:6a:50:d1:c4:7f:bf:6b:c7:c0:1f:11: fc:8a:2a:fc:5d:09:66:80:e5:d8:2c:3e:b9:85:62: 0f:94:83:b9:02:bd:5e:9b:ef:9b:1a:0b:6d:c4:f7: 8b:a0:05:fc:fd:cd:e1:c8:37:b5:58:d6:6b:31:b9: 9f:3e:f5:7a:f4:06:5b:de:41:96:6e:5a:de:79:7e: 15:44:9f:c6:d6:5f:8d:bf:a9:0b:70:5e:6d:20:55: 75:52:e2:80:80:7f:a9:1b:a5:b8:11:9d:cc:88:3d: 52:36:2b:a5:71:52:e6:f8:bb:c3:f7:7d:3a:ad:da: a0:93:4d:f8:b8:77:0b:cb:94:20:a9:33:26:24:60: cb:68:82:e1:8f:e7:46:1a:55:d5:92:cc:8a:53:da: d0:a1:dd:4b:cb:8e:d1:47:95:3c:17:18:52:3f:54: 41:a6:79:79:c9:32:42:98:3a:3f:19:30:a8:a4:ca: 6e:0f:1c:b2:d0:ed:8d:bd:04:8e:33:8c:5f:3a:05: 74:83:b0:80:fc:36:d7:4c:88:aa:8d:a9:8c:5c:5c: 7d:46:9d:e9:4c:f2:9f:d3:2b:55:4b:16:15:32:c3: b9:a2:6b:45:64:65:4b:0e:53:61:34:a1:32:f7:f7: 1f:ee:ff:04:7b:92:41:d4:d5:32:cf:0c:14:98:3a: 41:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:29:DB:3C:7A:81:83:86:2A:93:78:D7:9D:16:2D:53:36:84:44:73 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3ECE42F0F96011F089391ECFDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.194.99.0-154.194.102.255 154.194.104.0-154.194.108.255 154.196.63.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:69:00:13:26:dd:25:c9:60:8b:9e:a4:5f:18:08:1f:cd:8d: 89:9f:65:4c:f7:f0:e6:ce:0b:ad:52:2a:7a:67:39:02:98:14: 75:95:a8:5a:02:77:a8:ee:91:ec:f3:7e:79:35:cb:28:97:c6: fa:bc:19:6d:4a:0c:12:7f:3a:13:b5:9d:9f:77:17:8e:15:56: 01:0f:e0:c2:9e:13:62:31:51:af:d5:43:8c:64:dc:e5:70:80: 4b:a1:18:c3:57:17:24:4a:64:b3:08:73:92:5e:88:93:64:5e: e1:ae:35:11:d0:2b:d2:d7:60:03:5c:90:a1:57:a2:0d:01:71: 43:e4:04:2b:c9:7f:16:5c:3f:ca:5d:5a:9d:58:04:1d:63:70: fe:e6:33:7c:5b:8a:b9:39:df:dc:36:1b:ee:2f:42:f0:5a:0d: 2b:fd:fd:64:e2:10:a2:59:92:db:83:cf:40:7e:77:f4:e5:5f: d9:2e:56:ff:14:b1:72:54:0a:39:05:e1:39:05:fa:88:ec:4f: 67:20:d1:fe:67:89:f9:59:28:b3:a5:95:56:3d:1c:01:2a:54: f3:aa:aa:6d:bf:3d:d1:94:17:a2:53:cd:d9:9e:52:e2:c1:4f: ca:39:5e:b1:de:9d:5c:ae:48:24:5b:1f:b3:42:35:fb:34:56: fd:70:a6:51 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgIDAbaUMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjYwMTI0MjAwNjU2WhcNMjYwMzAzMjAwNjU2WjAYMRYw FAYDVQQDEw02OTc1MjY2Ni1hNWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAzIl2alDRxH+/a8fAHxH8iir8XQlmgOXYLD65hWIPlIO5Ar1em++bGgtt xPeLoAX8/c3hyDe1WNZrMbmfPvV69AZb3kGWblreeX4VRJ/G1l+Nv6kLcF5tIFV1 UuKAgH+pG6W4EZ3MiD1SNiulcVLm+LvD9306rdqgk034uHcLy5QgqTMmJGDLaILh j+dGGlXVksyKU9rQod1Ly47RR5U8FxhSP1RBpnl5yTJCmDo/GTCopMpuDxyy0O2N vQSOM4xfOgV0g7CA/DbXTIiqjamMXFx9Rp3pTPKf0ytVSxYVMsO5omtFZGVLDlNh NKEy9/cf7v8Ee5JB1NUyzwwUmDpBowIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFPIp 2zx6gYOGKpN4150WLVM2hERzMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8zRUNFNDJGMEY5NjAxMUYwODkzOTFFQ0ZEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBACawmMDBACawmYwDAME A5rCaAMEAJrCbAMEAJrEPzANBgkqhkiG9w0BAQsFAAOCAQEALmkAEybdJclgi56k XxgIH82NiZ9lTPfw5s4LrVIqemc5ApgUdZWoWgJ3qO6R7PN+eTXLKJfG+rwZbUoM En86E7Wdn3cXjhVWAQ/gwp4TYjFRr9VDjGTc5XCAS6EYw1cXJEpkswhzkl6Ik2Re 4a41EdAr0tdgA1yQoVeiDQFxQ+QEK8l/Flw/yl1anVgEHWNw/uYzfFuKuTnf3DYb 7i9C8FoNK/39ZOIQolmS24PPQH539OVf2S5W/xSxclQKOQXhOQX6iOxPZyDR/meJ +Vkos6WVVj0cASpU86qqbb890ZQXolPN2Z5S4sFPyjlesd6dXK5IJFsfs0I1+zRW /XCmUQ== -----END CERTIFICATE-----Generated at Sun Jan 25 10:09:31 2026 by rpki-client