This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F886204EBDF11F0BA9E74E9DAE4EC9C.roa File: 8F886204EBDF11F0BA9E74E9DAE4EC9C.roa (raw, json) Hash identifier: CmQBWvWZL2kidmer9t8hWpMY3qAz53jOWeq0Q/KyxtM= Subject key identifier: CD:41:C9:A3:D5:33:00:37:CD:98:25:B9:F7:25:E0:7A:F6:43:E8:9D Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B3A1 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F886204EBDF11F0BA9E74E9DAE4EC9C.roa Signing time: Wed 07 Jan 2026 15:43:07 +0000 ROA not before: Wed 07 Jan 2026 15:43:02 +0000 ROA not after: Tue 27 Jan 2026 15:43:02 +0000 asID: 55320 IP address blocks: 154.205.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111521 (0x1b3a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Jan 7 15:43:02 2026 GMT Not After : Jan 27 15:43:02 2026 GMT Subject: CN=695e7f0b-0950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6f:c9:1f:e4:18:08:a3:d9:fe:be:44:61:58: 60:55:07:7b:71:c4:3e:91:10:75:2f:5a:4d:28:a9: 81:92:48:e5:b6:cf:68:f1:a0:10:9f:7d:43:6a:e2: 4d:0c:09:fe:9f:30:88:74:5a:3a:68:22:3c:73:70: f4:fc:70:7c:a1:57:7c:f8:dc:b5:4e:a3:9d:e1:d8: 72:dd:f0:bd:6d:8f:a5:67:df:31:c2:2d:8d:94:e6: ad:d7:56:43:68:76:10:0d:3a:2d:7c:cc:e0:d8:d6: 6b:9c:83:b0:3a:62:a3:70:17:c6:96:03:a7:93:61: 20:e4:9f:31:d5:ea:6b:51:97:ad:e3:a9:e7:13:8c: 19:8d:2a:50:dd:17:8d:07:6f:de:bc:cf:b7:69:5b: 8d:e3:cb:58:ef:bf:c5:a6:ed:fa:a6:71:1b:d0:d0: 4b:11:67:d8:c3:b9:c9:86:ec:0f:38:a1:14:c0:e0: f3:15:5a:88:64:6c:27:f5:ab:fa:7f:70:2c:c1:e8: b0:59:99:63:24:41:1f:a1:b7:eb:59:e3:d1:4c:80: 5f:0d:22:74:02:48:c3:f3:8f:51:34:36:64:95:17: 01:3e:2e:bf:2e:c2:29:e7:e9:05:5e:99:c7:37:19: 0f:6b:06:9f:db:7f:77:aa:ff:c7:61:67:ea:8e:8d: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:41:C9:A3:D5:33:00:37:CD:98:25:B9:F7:25:E0:7A:F6:43:E8:9D X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F886204EBDF11F0BA9E74E9DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.205.140.0/24 Signature Algorithm: sha256WithRSAEncryption 52:71:fe:20:b9:96:53:d6:f1:69:ce:b5:7e:03:a6:01:c4:65: 8b:38:7e:e1:a4:3f:bb:5a:2f:00:68:08:82:f0:ab:56:0d:da: 07:4e:d5:bd:82:92:57:e8:29:36:81:35:06:c2:e7:46:a8:34: a0:f9:26:2d:d0:35:49:16:ef:b6:41:66:74:b8:83:29:7b:db: dc:90:b5:93:9f:a6:ba:80:f5:88:ce:17:50:a4:5a:ba:f5:47: c5:37:cf:da:65:d6:c3:27:a3:19:70:9b:78:04:8e:43:85:de: e2:68:3f:24:54:86:db:a9:c5:76:97:4f:fc:f9:0f:47:0c:59: e6:27:4a:b9:07:a2:9e:0c:12:64:f3:50:f9:36:9f:c6:e6:fa: 51:5f:42:9e:13:9a:b6:e4:15:bd:60:d3:d9:60:de:95:0e:cd: 96:06:8c:72:13:a7:30:c5:6f:bf:79:2d:42:d9:9b:26:d4:e3: ef:f6:18:e7:b7:70:40:d9:4a:61:be:18:1b:d3:02:3f:b7:30: 46:83:1e:55:2e:c8:3e:db:c1:18:29:db:c3:56:f3:81:4e:b7: c9:17:ac:fc:5c:c1:65:9b:de:4e:d3:6c:0c:a2:a2:f8:55:50: dc:b1:f8:04:bb:d2:71:75:e3:56:7b:0a:7f:f0:35:a3:a8:01: 0b:d3:ff:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAbOhMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjYwMTA3MTU0MzAyWhcNMjYwMTI3MTU0MzAyWjAYMRYw FAYDVQQDEw02OTVlN2YwYi0wOTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA2G/JH+QYCKPZ/r5EYVhgVQd7ccQ+kRB1L1pNKKmBkkjlts9o8aAQn31D auJNDAn+nzCIdFo6aCI8c3D0/HB8oVd8+Ny1TqOd4dhy3fC9bY+lZ98xwi2NlOat 11ZDaHYQDTotfMzg2NZrnIOwOmKjcBfGlgOnk2Eg5J8x1eprUZet46nnE4wZjSpQ 3ReNB2/evM+3aVuN48tY77/Fpu36pnEb0NBLEWfYw7nJhuwPOKEUwODzFVqIZGwn 9av6f3AsweiwWZljJEEfobfrWePRTIBfDSJ0AkjD849RNDZklRcBPi6/LsIp5+kF XpnHNxkPawaf2393qv/HYWfqjo1tOQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFM1B yaPVMwA3zZglufcl4Hr2Q+idMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC84Rjg4NjIwNEVCREYxMUYwQkE5RTc0RTlEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms2MMA0GCSqGSIb3DQEB CwUAA4IBAQBScf4guZZT1vFpzrV+A6YBxGWLOH7hpD+7Wi8AaAiC8KtWDdoHTtW9 gpJX6Ck2gTUGwudGqDSg+SYt0DVJFu+2QWZ0uIMpe9vckLWTn6a6gPWIzhdQpFq6 9UfFN8/aZdbDJ6MZcJt4BI5Dhd7iaD8kVIbbqcV2l0/8+Q9HDFnmJ0q5B6KeDBJk 81D5Np/G5vpRX0KeE5q25BW9YNPZYN6VDs2WBoxyE6cwxW+/eS1C2Zsm1OPv9hjn t3BA2Uphvhgb0wI/tzBGgx5VLsg+28EYKdvDVvOBTrfJF6z8XMFlm95O02wMoqL4 VVDcsfgEu9JxdeNWewp/8DWjqAEL0/+L -----END CERTIFICATE-----Generated at Sun Jan 25 08:50:16 2026 by rpki-client