This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B6BD930F93911F08A2A0FE2DAE4EC9C.roa File: 5B6BD930F93911F08A2A0FE2DAE4EC9C.roa (raw, json) Hash identifier: 3d7h4JTSehyRTYV7Tj0JHm8Cj2XEq2/aex/1RziuIwU= Subject key identifier: 5F:CF:12:FE:F8:C7:3A:88:73:8D:F8:65:59:D5:CF:24:B9:5C:B7:F8 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B62C Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B6BD930F93911F08A2A0FE2DAE4EC9C.roa Signing time: Sat 24 Jan 2026 15:28:39 +0000 ROA not before: Sat 24 Jan 2026 15:28:34 +0000 ROA not after: Sun 01 Mar 2026 15:28:34 +0000 asID: 214143 IP address blocks: 154.197.25.0/24 maxlen: 24 154.197.90.0/24 maxlen: 24 154.197.127.0/24 maxlen: 24 154.203.196.0/22 maxlen: 24 154.203.208.0/22 maxlen: 24 154.203.240.0/24 maxlen: 24 154.206.11.0/24 maxlen: 24 154.222.80.0/23 maxlen: 24 154.222.82.0/23 maxlen: 24 154.222.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112172 (0x1b62c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Jan 24 15:28:34 2026 GMT Not After : Mar 1 15:28:34 2026 GMT Subject: CN=6974e527-c045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:43:45:bb:02:9f:83:67:0a:69:a5:61:b6:37: 20:25:78:3f:ea:6d:8b:13:a7:08:31:ca:ab:33:9c: 6e:58:31:02:af:b3:12:33:39:5e:e6:7b:43:03:dd: 78:cb:c2:4a:3b:cd:a9:a9:86:97:01:34:b7:54:94: 93:bb:ca:3e:1d:f3:09:ad:5e:50:94:4e:b8:4e:a4: 0c:d7:0b:07:a0:4f:81:e7:86:2f:a7:d2:3b:ac:44: d6:80:00:84:a5:d5:3b:eb:c0:95:05:18:c6:a1:7a: 6e:16:8d:43:34:06:14:49:6f:5c:51:17:e2:90:5b: 80:a9:ef:64:18:0a:09:ca:5f:e8:4f:a7:f2:02:58: 0a:9f:e5:9d:99:d6:df:79:62:4d:87:1d:5b:a2:0c: 2f:58:6d:95:00:d1:27:ff:2b:55:d3:49:c2:e1:6a: a0:16:40:e9:22:ed:76:e9:01:60:63:f5:dd:5b:f6: a0:30:4d:71:d3:a6:b3:f0:e9:3a:8b:d0:c9:5b:cd: 48:51:96:15:c7:a4:97:53:86:84:6f:a8:e5:76:7a: 0c:e0:c5:52:95:84:03:0d:87:f3:87:b1:71:ac:33: 58:8e:27:4c:b4:11:8b:fc:77:73:5e:af:ac:16:04: 43:74:e9:95:b5:7f:03:de:39:a6:5f:ab:d0:88:14: 1a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CF:12:FE:F8:C7:3A:88:73:8D:F8:65:59:D5:CF:24:B9:5C:B7:F8 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B6BD930F93911F08A2A0FE2DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.197.25.0/24 154.197.90.0/24 154.197.127.0/24 154.203.196.0/22 154.203.208.0/22 154.203.240.0/24 154.206.11.0/24 154.222.80.0-154.222.85.255 Signature Algorithm: sha256WithRSAEncryption 66:92:fd:65:ab:6f:bc:3f:0a:bb:15:b5:e1:29:24:cf:a9:8a: d9:97:d7:86:90:13:67:d6:2a:ea:2e:8b:b9:67:4b:9f:7e:a7: b5:ba:38:47:cc:6f:2e:a2:f4:67:24:d1:51:dc:a8:25:fe:9c: 7c:a8:7e:0e:7b:26:83:5f:83:0e:df:11:0e:3d:58:32:31:c5: 6a:e8:b6:26:90:c5:89:78:57:8a:ef:52:cd:39:99:08:0e:5b: 23:0a:17:38:cc:3f:5e:95:55:41:fb:c7:3d:5f:de:29:f8:31: b2:f7:cb:7d:de:8d:e0:65:27:8e:73:b7:41:f0:81:18:56:41: e1:cf:5f:47:b1:11:2b:5e:33:7b:f2:00:26:26:81:91:ea:29: 55:e9:c6:2f:18:81:93:5a:3d:b3:fc:25:59:b9:e7:ec:fe:8d: c7:c8:c9:14:82:7a:9e:38:a5:ce:c4:cd:6d:61:9a:08:94:49: dd:14:08:f3:ba:18:c5:6d:fb:3f:42:67:45:13:31:d0:a0:d5: f4:a4:e4:0e:dc:bd:6e:a8:f5:99:f7:01:03:4f:cf:06:cd:d1: ac:e6:4f:b0:26:1d:18:75:30:47:a7:99:af:30:f2:e6:25:76: 7b:38:42:bb:d2:b2:03:18:ab:7f:79:8a:74:04:85:b0:65:21: 71:84:c8:6f -----BEGIN CERTIFICATE----- MIIFtjCCBJ6gAwIBAgIDAbYsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjYwMTI0MTUyODM0WhcNMjYwMzAxMTUyODM0WjAYMRYw FAYDVQQDEw02OTc0ZTUyNy1jMDQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA30NFuwKfg2cKaaVhtjcgJXg/6m2LE6cIMcqrM5xuWDECr7MSMzle5ntD A914y8JKO82pqYaXATS3VJSTu8o+HfMJrV5QlE64TqQM1wsHoE+B54Yvp9I7rETW gACEpdU768CVBRjGoXpuFo1DNAYUSW9cURfikFuAqe9kGAoJyl/oT6fyAlgKn+Wd mdbfeWJNhx1bogwvWG2VANEn/ytV00nC4WqgFkDpIu126QFgY/XdW/agME1x06az 8Ok6i9DJW81IUZYVx6SXU4aEb6jldnoM4MVSlYQDDYfzh7FxrDNYjidMtBGL/Hdz Xq+sFgRDdOmVtX8D3jmmX6vQiBQa0QIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFF/P Ev74xzqIc434ZVnVzyS5XLf4MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC81QjZCRDkzMEY5MzkxMUYwOEEyQTBGRTJEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAmsUZAwQAmsVaAwQAmsV/ AwQCmsvEAwQCmsvQAwQAmsvwAwQAms4LMAwDBASa3lADBAGa3lQwDQYJKoZIhvcN AQELBQADggEBAGaS/WWrb7w/CrsVteEpJM+pitmX14aQE2fWKuoui7lnS59+p7W6 OEfMby6i9Gck0VHcqCX+nHyofg57JoNfgw7fEQ49WDIxxWrotiaQxYl4V4rvUs05 mQgOWyMKFzjMP16VVUH7xz1f3in4MbL3y33ejeBlJ45zt0HwgRhWQeHPX0exESte M3vyACYmgZHqKVXpxi8YgZNaPbP8JVm55+z+jcfIyRSCep44pc7EzW1hmgiUSd0U CPO6GMVt+z9CZ0UTMdCg1fSk5A7cvW6o9Zn3AQNPzwbN0azmT7AmHRh1MEenma8w 8uYldns4QrvSsgMYq395inQEhbBlIXGEyG8= -----END CERTIFICATE-----Generated at Sun Jan 25 07:21:25 2026 by rpki-client