This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDBFCC6AF48B11F09242C3A0DAE4EC9C.roa File: CDBFCC6AF48B11F09242C3A0DAE4EC9C.roa (raw, json) Hash identifier: L9t/9p6mfM1+CV2JVtYkL5/mVKCX4rXdclX0E8ZnRgo= Subject key identifier: 21:87:E3:FA:3B:CC:E2:EE:4A:9A:AD:83:04:3C:04:A9:0E:85:A8:EF Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B55E Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDBFCC6AF48B11F09242C3A0DAE4EC9C.roa Signing time: Sun 18 Jan 2026 16:36:14 +0000 ROA not before: Sun 18 Jan 2026 16:36:09 +0000 ROA not after: Wed 28 Jan 2026 16:36:09 +0000 asID: 54801 IP address blocks: 154.201.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111966 (0x1b55e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Jan 18 16:36:09 2026 GMT Not After : Jan 28 16:36:09 2026 GMT Subject: CN=696d0bfe-6b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:27:fd:b7:93:f4:23:ed:54:57:26:2d:d0:95: 62:e2:a6:69:7a:59:6a:50:f8:fc:a8:36:be:b6:c2: a1:0b:3d:c4:ed:00:8f:e4:e7:00:cd:3f:cb:7a:47: 65:64:2b:fc:00:94:b7:a7:7c:e5:c0:19:ad:cd:ef: bb:c8:e3:01:37:67:59:bf:d8:ae:bf:7c:94:4a:73: 13:a9:ed:99:90:c0:36:5d:aa:ce:5f:94:a3:bd:5f: 22:cb:ec:90:fd:6f:1b:5b:3a:6c:8a:f2:2a:19:a2: ce:25:72:bf:98:a4:5f:98:74:3e:e4:a7:fa:3e:38: 1d:a2:21:95:58:27:6e:24:2b:8a:98:83:14:03:12: 99:27:49:16:0a:c3:39:f6:e2:02:b4:1b:a8:70:ee: cb:ec:18:9c:b6:d9:40:d7:b9:2e:f7:0a:d0:50:7d: fe:38:67:49:64:46:e3:18:c2:6e:87:0f:fb:04:09: 1d:c2:3c:bc:cf:dc:61:28:21:55:0b:15:2f:3a:07: de:7e:02:4e:3a:88:3e:32:98:04:7c:ea:2d:ab:af: a0:31:a7:d5:2f:d7:ee:43:17:78:85:f8:44:ca:39: 83:d5:98:05:2d:65:87:c7:aa:e1:27:1b:12:80:f4: ef:5e:9c:2a:84:cf:f9:56:e6:69:0e:01:92:a6:7f: 2b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:87:E3:FA:3B:CC:E2:EE:4A:9A:AD:83:04:3C:04:A9:0E:85:A8:EF X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDBFCC6AF48B11F09242C3A0DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.201.8.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:a7:60:88:8f:7d:20:4e:e8:39:2a:a3:7f:e3:77:36:e4:f8: 35:ea:ce:5f:77:e6:0d:37:8e:e6:56:71:05:97:50:ea:96:9e: be:6c:0a:b0:1b:bc:53:1d:0a:50:b7:de:6a:51:df:7d:ac:e4: dc:d5:3d:c0:a4:9c:f0:ce:58:22:be:6e:45:fe:cc:b7:6f:5f: 85:98:5f:e8:f7:89:64:fb:ce:2a:51:59:25:be:14:3f:e9:f5: da:a6:28:4b:32:bc:5b:ea:94:7d:78:ea:c7:28:21:84:bc:38: 69:ff:45:8f:5d:6c:14:1f:ee:3a:01:fe:95:14:44:f7:0f:e7: 04:7d:58:b7:5c:da:e7:3b:e0:25:52:54:0b:9c:a7:82:97:42: 8c:41:30:e2:b0:c1:be:b9:d8:4b:0a:f4:34:43:82:c9:0c:f4: 8d:f8:48:1e:36:5b:ae:9e:c7:12:88:55:d1:4d:8a:25:df:41: a7:52:d8:fd:ec:fa:7f:06:62:0e:e9:82:4f:3b:5e:fd:67:36: 8b:db:30:0c:40:4c:e6:31:20:82:f0:44:a6:cd:d1:6c:f5:65: 78:18:02:d3:8d:87:76:3c:d9:80:34:ae:85:a7:10:d6:be:ba: cc:cc:88:fd:87:fa:f2:c9:19:2c:d6:b1:25:83:8d:08:b7:f1: ce:50:c1:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAbVeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjYwMTE4MTYzNjA5WhcNMjYwMTI4MTYzNjA5WjAYMRYw FAYDVQQDEw02OTZkMGJmZS02YjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA1yf9t5P0I+1UVyYt0JVi4qZpellqUPj8qDa+tsKhCz3E7QCP5OcAzT/L ekdlZCv8AJS3p3zlwBmtze+7yOMBN2dZv9iuv3yUSnMTqe2ZkMA2XarOX5SjvV8i y+yQ/W8bWzpsivIqGaLOJXK/mKRfmHQ+5Kf6PjgdoiGVWCduJCuKmIMUAxKZJ0kW CsM59uICtBuocO7L7BicttlA17ku9wrQUH3+OGdJZEbjGMJuhw/7BAkdwjy8z9xh KCFVCxUvOgfefgJOOog+MpgEfOotq6+gMafVL9fuQxd4hfhEyjmD1ZgFLWWHx6rh JxsSgPTvXpwqhM/5VuZpDgGSpn8rawIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFCGH 4/o7zOLuSpqtgwQ8BKkOhajvMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9DREJGQ0M2QUY0OEIxMUYwOTI0MkMzQTBEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmskIMA0GCSqGSIb3DQEB CwUAA4IBAQCLp2CIj30gTug5KqN/43c25Pg16s5fd+YNN47mVnEFl1Dqlp6+bAqw G7xTHQpQt95qUd99rOTc1T3ApJzwzlgivm5F/sy3b1+FmF/o94lk+84qUVklvhQ/ 6fXapihLMrxb6pR9eOrHKCGEvDhp/0WPXWwUH+46Af6VFET3D+cEfVi3XNrnO+Al UlQLnKeCl0KMQTDisMG+udhLCvQ0Q4LJDPSN+EgeNluunscSiFXRTYol30GnUtj9 7Pp/BmIO6YJPO179ZzaL2zAMQEzmMSCC8ESmzdFs9WV4GALTjYd2PNmANK6FpxDW vrrMzIj9h/ryyRks1rElg40It/HOUMEB -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:24 2026 by rpki-client