This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFC8BC38F5EA11F09E42B091DAE4EC9C.roa File: BFC8BC38F5EA11F09E42B091DAE4EC9C.roa (raw, json) Hash identifier: Nj68EWpha7FRUavEgWKBhCrqMPcf4kK3I8tIXEN/it4= Subject key identifier: BF:46:50:EA:CA:A7:FF:95:62:D1:2A:63:77:02:6E:30:9C:88:DD:8B Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B5C6 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFC8BC38F5EA11F09E42B091DAE4EC9C.roa Signing time: Tue 20 Jan 2026 10:28:24 +0000 ROA not before: Tue 20 Jan 2026 10:28:19 +0000 ROA not after: Fri 06 Mar 2026 10:28:19 +0000 asID: 63023 IP address blocks: 154.222.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112070 (0x1b5c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Jan 20 10:28:19 2026 GMT Not After : Mar 6 10:28:19 2026 GMT Subject: CN=696f58c8-e4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:2e:e8:d7:c7:c2:59:5f:f6:10:34:5c:7d: a7:81:b5:70:72:d3:40:80:c8:a3:a4:51:15:6c:3f: 00:a9:de:43:a5:9e:43:60:c8:d1:56:85:6d:2e:b9: 71:d8:ad:12:7d:2c:e7:98:53:09:94:c0:ef:35:9e: 9b:fd:52:2c:ce:d8:e6:c1:c2:36:33:a0:a3:c5:fe: 44:4b:1f:4e:34:e8:61:b8:8b:6f:d7:70:b3:ae:ca: 4e:18:90:bc:11:03:d3:1c:bf:d4:51:71:77:97:1b: fc:39:31:f4:a9:f8:8d:8b:05:d6:cb:b0:10:92:fc: f4:9f:91:8e:5d:92:fa:0c:70:a0:f9:89:13:7c:06: 7b:fa:11:a2:12:c9:9d:85:98:c0:c6:b9:1b:5f:66: b4:b4:c0:6d:ef:d2:ca:67:7e:13:c1:03:e3:73:5b: 7f:f3:cc:c5:4d:28:84:0e:9b:cf:62:91:b2:b9:ec: 72:aa:74:78:8b:aa:33:b4:44:eb:3e:10:b8:43:fc: a1:39:1c:83:80:ae:2f:cb:12:ab:c8:4a:3d:54:40: 41:c1:2a:ea:9f:04:a6:6c:07:61:d4:d2:b1:6c:67: 7c:47:e7:78:5d:36:6b:6d:71:f4:ab:7e:5a:1d:b2: 17:64:d1:df:57:ac:e3:71:c5:c5:19:e9:62:47:43: 8d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:46:50:EA:CA:A7:FF:95:62:D1:2A:63:77:02:6E:30:9C:88:DD:8B X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFC8BC38F5EA11F09E42B091DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.222.11.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:d8:8b:fe:27:de:b3:06:23:67:98:60:ae:14:20:f0:b0:f3: b6:54:ce:00:2c:3d:38:6b:1b:d7:fe:89:87:17:3a:70:0c:cd: 08:6e:8b:1b:a1:73:01:ea:60:3e:93:75:c1:38:1a:a1:ac:17: c7:0a:c7:b7:12:66:60:e9:b3:fe:c0:17:6d:c9:5d:b1:ba:7e: b7:44:21:53:f2:db:d3:1b:67:e3:dc:a0:e9:c2:7d:e4:89:f5: a0:4e:ae:61:81:55:52:d5:a6:a9:a4:c7:08:2e:65:47:0a:9a: f3:86:a2:a0:cf:58:68:42:e6:39:2a:2d:5c:a2:d7:58:9a:8d: 7b:76:8f:57:ea:d5:7f:da:41:4f:df:e9:11:aa:69:be:37:b6: 50:18:89:e5:33:51:04:b4:4e:5d:82:5d:a4:3a:d5:f4:f5:42: 76:c2:df:46:e4:95:09:20:b8:62:98:45:a4:24:87:5d:f6:06: 43:51:dd:98:3c:82:9c:0e:b8:60:15:d0:24:14:3b:74:1b:7c: 33:7d:e2:95:dd:6b:e3:d1:fc:b8:d0:75:83:b6:a9:f0:a3:d8: f4:ca:e6:9d:fd:3f:74:7f:d1:5a:82:78:a1:75:1c:a8:62:82: 0a:5d:b7:9d:56:c3:41:59:1c:69:7d:c7:4f:18:87:1f:d6:57: a0:2e:95:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAbXGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjYwMTIwMTAyODE5WhcNMjYwMzA2MTAyODE5WjAYMRYw FAYDVQQDEw02OTZmNThjOC1lNGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAtfku6NfHwllf9hA0XH2ngbVwctNAgMijpFEVbD8Aqd5DpZ5DYMjRVoVt Lrlx2K0SfSznmFMJlMDvNZ6b/VIsztjmwcI2M6Cjxf5ESx9ONOhhuItv13CzrspO GJC8EQPTHL/UUXF3lxv8OTH0qfiNiwXWy7AQkvz0n5GOXZL6DHCg+YkTfAZ7+hGi EsmdhZjAxrkbX2a0tMBt79LKZ34TwQPjc1t/88zFTSiEDpvPYpGyuexyqnR4i6oz tETrPhC4Q/yhORyDgK4vyxKryEo9VEBBwSrqnwSmbAdh1NKxbGd8R+d4XTZrbXH0 q35aHbIXZNHfV6zjccXFGeliR0ONdQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFL9G UOrKp/+VYtEqY3cCbjCciN2LMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9CRkM4QkMzOEY1RUExMUYwOUU0MkIwOTFEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmt4LMA0GCSqGSIb3DQEB CwUAA4IBAQAM2Iv+J96zBiNnmGCuFCDwsPO2VM4ALD04axvX/omHFzpwDM0Ibosb oXMB6mA+k3XBOBqhrBfHCse3EmZg6bP+wBdtyV2xun63RCFT8tvTG2fj3KDpwn3k ifWgTq5hgVVS1aappMcILmVHCprzhqKgz1hoQuY5Ki1cotdYmo17do9X6tV/2kFP 3+kRqmm+N7ZQGInlM1EEtE5dgl2kOtX09UJ2wt9G5JUJILhimEWkJIdd9gZDUd2Y PIKcDrhgFdAkFDt0G3wzfeKV3Wvj0fy40HWDtqnwo9j0yuad/T90f9FagnihdRyo YoIKXbedVsNBWRxpfcdPGIcf1legLpVg -----END CERTIFICATE-----Generated at Sun Jan 25 07:20:47 2026 by rpki-client