This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FB05BC6F12D11F0A5BD7193DAE4EC9C.roa File: 3FB05BC6F12D11F0A5BD7193DAE4EC9C.roa (raw, json) Hash identifier: NdR0oIA1QXwqDYm37c03tpPq5mon9dJMZHdEwodpaOM= Subject key identifier: 3A:BF:4D:E9:24:78:03:57:E1:C7:04:B6:04:01:8B:C3:D0:F5:CF:14 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B4A1 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FB05BC6F12D11F0A5BD7193DAE4EC9C.roa Signing time: Wed 14 Jan 2026 09:41:50 +0000 ROA not before: Wed 14 Jan 2026 09:41:44 +0000 ROA not after: Fri 27 Feb 2026 09:41:44 +0000 asID: 401701 IP address blocks: 154.219.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111777 (0x1b4a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Jan 14 09:41:44 2026 GMT Not After : Feb 27 09:41:44 2026 GMT Subject: CN=696764dd-b852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2a:dd:b5:bb:9b:43:6a:d4:7c:02:aa:78:cf: 1c:11:55:ce:7c:46:14:ed:b4:60:ed:9f:1d:84:0e: 39:e3:6d:0b:cd:d5:ef:40:fd:2e:42:5f:b8:a7:22: cb:fa:11:4d:ba:cd:e0:98:3d:40:a7:9d:d2:80:59: 61:9d:cc:20:72:f1:d2:3c:e3:e0:cc:ac:55:0c:1b: cd:f8:c5:21:07:8f:d1:5c:8d:65:3d:82:3e:f9:3b: 77:01:c0:a2:06:d8:58:1d:38:0d:47:0d:2b:e9:36: 75:33:e1:bd:51:c5:ca:cd:e2:6a:49:07:23:18:57: f4:47:0d:24:59:a5:96:b9:12:9d:14:d3:e2:3c:72: d1:7a:42:5a:c1:a3:70:13:e0:e5:ff:4c:f7:e3:e2: 97:1b:51:a5:3c:5f:72:fc:59:b5:df:11:6f:dc:eb: 42:80:c5:c6:01:b4:c5:81:a7:5f:38:25:c2:7e:f6: 33:c5:8c:9d:6f:ff:c9:d1:dc:c0:8d:10:44:37:cf: 51:42:6a:48:56:7f:21:cc:f1:72:77:30:04:22:a0: 5f:0a:e6:d8:7e:bc:f7:20:b0:97:61:ab:e6:09:31: 1a:8d:f9:1b:31:06:0a:74:8e:87:05:f1:b0:92:c5: d0:e9:09:e3:31:40:5c:c1:9c:78:9f:54:9f:48:d0: e7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BF:4D:E9:24:78:03:57:E1:C7:04:B6:04:01:8B:C3:D0:F5:CF:14 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FB05BC6F12D11F0A5BD7193DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.219.96.0/19 Signature Algorithm: sha256WithRSAEncryption b9:93:38:ed:cb:2a:3b:b1:af:ec:b3:cf:23:3a:30:b5:9d:d6: 57:5e:c1:ae:aa:c8:1d:9c:7a:4a:ae:15:24:10:f5:c4:02:48: 9c:b9:5d:10:5b:66:ae:22:e8:13:33:5c:13:10:15:08:93:80: b9:dc:cd:32:d6:68:14:95:8a:76:7e:59:f7:36:78:8e:4c:d6: 72:96:db:11:b3:52:01:fe:e5:5b:59:68:2a:da:af:33:c2:8f: 55:eb:bc:cf:52:70:c9:f4:e2:b0:4e:9f:c3:22:3b:91:62:48: 7b:8c:c3:39:d6:a0:c2:20:5d:32:48:ce:88:5a:a4:ff:ed:60: c6:87:8c:b3:fc:bf:4d:6e:c3:70:ff:fb:35:37:53:a6:84:81: a0:9e:a9:2f:7b:b4:fc:f8:67:14:06:6f:f6:d3:11:7c:98:7f: 8d:58:43:6b:0e:f5:51:32:79:7a:c9:23:a1:ec:66:17:a3:88: 88:fc:ba:23:af:f3:6f:88:88:64:3d:9d:39:3c:ea:cc:8e:a0: fb:d4:3d:fc:d5:69:92:6f:80:52:86:1e:36:70:e0:f4:88:2a: 0e:d6:55:b3:40:3c:32:dd:ed:45:94:92:5a:9c:22:4c:c5:1f: 7e:51:79:83:3b:08:05:26:f0:db:3d:6e:8c:1d:81:3d:a2:63: b9:6f:31:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAbShMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjYwMTE0MDk0MTQ0WhcNMjYwMjI3MDk0MTQ0WjAYMRYw FAYDVQQDEw02OTY3NjRkZC1iODUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAwirdtbubQ2rUfAKqeM8cEVXOfEYU7bRg7Z8dhA45420LzdXvQP0uQl+4 pyLL+hFNus3gmD1Ap53SgFlhncwgcvHSPOPgzKxVDBvN+MUhB4/RXI1lPYI++Tt3 AcCiBthYHTgNRw0r6TZ1M+G9UcXKzeJqSQcjGFf0Rw0kWaWWuRKdFNPiPHLRekJa waNwE+Dl/0z34+KXG1GlPF9y/Fm13xFv3OtCgMXGAbTFgadfOCXCfvYzxYydb//J 0dzAjRBEN89RQmpIVn8hzPFydzAEIqBfCubYfrz3ILCXYavmCTEajfkbMQYKdI6H BfGwksXQ6QnjMUBcwZx4n1SfSNDn1QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDq/ TekkeANX4ccEtgQBi8PQ9c8UMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8zRkIwNUJDNkYxMkQxMUYwQTVCRDcxOTNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmttgMA0GCSqGSIb3DQEB CwUAA4IBAQC5kzjtyyo7sa/ss88jOjC1ndZXXsGuqsgdnHpKrhUkEPXEAkicuV0Q W2auIugTM1wTEBUIk4C53M0y1mgUlYp2fln3NniOTNZyltsRs1IB/uVbWWgq2q8z wo9V67zPUnDJ9OKwTp/DIjuRYkh7jMM51qDCIF0ySM6IWqT/7WDGh4yz/L9NbsNw //s1N1OmhIGgnqkve7T8+GcUBm/20xF8mH+NWENrDvVRMnl6ySOh7GYXo4iI/Loj r/NviIhkPZ05POrMjqD71D381WmSb4BShh42cOD0iCoO1lWzQDwy3e1FlJJanCJM xR9+UXmDOwgFJvDbPW6MHYE9omO5bzGq -----END CERTIFICATE-----Generated at Sun Jan 25 07:20:29 2026 by rpki-client