This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAFF0E0EE0AA11F0A5C97289DAE4EC9C.roa File: CAFF0E0EE0AA11F0A5C97289DAE4EC9C.roa (raw, json) Hash identifier: Noc0JcCuZPtpRfUnd3QRO12tXjDma6Q+k4Jjl5rrXYg= Subject key identifier: 41:40:A5:97:F4:64:CB:49:73:AA:B2:E6:AF:5E:4F:07:5C:25:33:6D Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B09F Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAFF0E0EE0AA11F0A5C97289DAE4EC9C.roa Signing time: Wed 24 Dec 2025 09:27:41 +0000 ROA not before: Wed 24 Dec 2025 09:27:36 +0000 ROA not after: Thu 29 Jan 2026 09:27:36 +0000 asID: 61461 IP address blocks: 154.216.192.0/18 maxlen: 24 154.218.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110751 (0x1b09f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 24 09:27:36 2025 GMT Not After : Jan 29 09:27:36 2026 GMT Subject: CN=694bb20d-7a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:85:d9:a6:63:22:10:d4:8f:b1:65:ae:26: 62:0b:ed:ad:bc:93:6d:c4:aa:a5:4d:fe:d9:84:ed: 4d:d5:e7:21:b8:d4:e2:96:d0:a0:ab:0c:b4:aa:da: fb:ce:36:fb:19:2f:0c:b9:9b:d6:1a:2e:fe:a6:65: 87:71:0c:91:a7:86:9b:17:44:f1:98:9a:cc:0a:63: e1:fa:3c:cc:7d:50:58:24:7d:eb:03:81:08:fb:c5: 05:e3:24:87:68:56:e1:3e:a7:e3:d7:b8:fb:ea:bb: d4:ac:91:99:75:ca:b0:7f:31:97:89:76:75:33:02: b6:1b:8c:db:c4:66:34:51:2d:3a:1b:b4:33:83:f0: 97:03:f3:9a:d9:df:1e:f7:13:58:af:0d:b5:b5:c2: ed:6a:f0:32:01:3a:99:5c:ce:69:50:df:a3:3a:3f: 12:c7:05:81:e9:5b:c9:93:42:48:ef:b4:88:2a:9d: 98:30:0c:a7:3d:76:60:45:c6:eb:51:66:cb:20:df: ca:fc:ba:19:bf:18:b2:2d:39:03:ee:f7:ac:c6:91: e4:a0:2a:e6:98:c5:76:6e:a7:43:12:e2:7a:fa:04: 11:d8:5f:98:2d:71:48:42:b5:e3:35:67:c8:1c:79: 61:e0:19:2f:9c:c8:01:a8:e4:5c:37:9a:69:8e:ec: 73:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:40:A5:97:F4:64:CB:49:73:AA:B2:E6:AF:5E:4F:07:5C:25:33:6D X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CAFF0E0EE0AA11F0A5C97289DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.216.192.0/18 154.218.192.0/18 Signature Algorithm: sha256WithRSAEncryption 53:a6:8f:30:f0:9b:c2:d0:31:b9:a0:32:59:3f:c2:91:b0:e7: bf:ed:94:eb:26:1e:81:cf:ca:19:37:98:22:70:20:c7:4d:cc: 27:cb:3b:89:1e:d2:fd:bd:6e:d3:98:d9:44:9b:c5:86:25:fd: 33:86:fa:a8:f1:62:a3:bb:5a:07:30:f4:a2:f6:67:23:1b:3c: 91:57:eb:fd:62:4a:e3:ff:5b:68:29:42:3e:0b:3b:bc:dd:a5: 26:01:a3:57:08:33:63:e7:9f:a6:f7:0c:83:52:4a:7d:ba:98: 1c:3d:d7:45:1a:02:31:dc:bc:a0:6e:33:97:f9:38:d4:ad:9e: 94:a1:d6:fb:4d:bd:27:ce:b6:db:57:ec:a2:43:22:2a:2e:25: d3:4c:bb:17:a0:6a:f9:23:3f:a6:7a:fe:38:4c:fa:db:0e:6c: 61:32:b8:42:69:18:3d:a9:3f:18:26:59:85:10:b4:93:2a:63: f8:36:fe:c0:66:58:44:f8:06:03:90:be:34:81:65:2d:e8:d0: dc:1e:c2:8c:5a:42:79:62:c1:af:b6:56:ee:3c:44:79:87:4d: 6d:08:8f:a1:59:ac:07:ff:3d:a1:88:92:4a:d0:8e:9a:a1:02: eb:db:be:87:bf:7b:d8:d2:d7:2e:1a:a1:1d:a2:a5:15:21:53: f0:b9:61:53 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIDAbCfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjI0MDkyNzM2WhcNMjYwMTI5MDkyNzM2WjAYMRYw FAYDVQQDEw02OTRiYjIwZC03YThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAuISF2aZjIhDUj7FlriZiC+2tvJNtxKqlTf7ZhO1N1echuNTiltCgqwy0 qtr7zjb7GS8MuZvWGi7+pmWHcQyRp4abF0TxmJrMCmPh+jzMfVBYJH3rA4EI+8UF 4ySHaFbhPqfj17j76rvUrJGZdcqwfzGXiXZ1MwK2G4zbxGY0US06G7Qzg/CXA/Oa 2d8e9xNYrw21tcLtavAyATqZXM5pUN+jOj8SxwWB6VvJk0JI77SIKp2YMAynPXZg RcbrUWbLIN/K/LoZvxiyLTkD7vesxpHkoCrmmMV2bqdDEuJ6+gQR2F+YLXFIQrXj NWfIHHlh4BkvnMgBqORcN5ppjuxz2wIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFEFA pZf0ZMtJc6qy5q9eTwdcJTNtMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DQUZGMEUwRUUwQUExMUYwQTVDOTcyODlEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGmtjAAwQGmtrAMA0GCSqG SIb3DQEBCwUAA4IBAQBTpo8w8JvC0DG5oDJZP8KRsOe/7ZTrJh6Bz8oZN5gicCDH TcwnyzuJHtL9vW7TmNlEm8WGJf0zhvqo8WKju1oHMPSi9mcjGzyRV+v9Ykrj/1to KUI+Czu83aUmAaNXCDNj55+m9wyDUkp9upgcPddFGgIx3LygbjOX+TjUrZ6Uodb7 Tb0nzrbbV+yiQyIqLiXTTLsXoGr5Iz+mev44TPrbDmxhMrhCaRg9qT8YJlmFELST KmP4Nv7AZlhE+AYDkL40gWUt6NDcHsKMWkJ5YsGvtlbuPER5h01tCI+hWawH/z2h iJJK0I6aoQLr276Hv3vY0tcuGqEdoqUVIVPwuWFT -----END CERTIFICATE-----Generated at Sun Jan 25 07:20:37 2026 by rpki-client