This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F86B44F4F20A11F09A68F4E4DAE4EC9C.roa File: F86B44F4F20A11F09A68F4E4DAE4EC9C.roa (raw, json) Hash identifier: 8/JaQayK/x5QJXpGwd2nBAUvs0jtQnAfMwpaKY3Bw0o= Subject key identifier: 83:6A:04:DF:E0:98:95:C8:E8:7D:8A:12:E2:0F:65:31:EA:C5:E0:FE Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B4C1 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F86B44F4F20A11F09A68F4E4DAE4EC9C.roa Signing time: Thu 15 Jan 2026 12:08:58 +0000 ROA not before: Thu 15 Jan 2026 12:08:54 +0000 ROA not after: Tue 17 Feb 2026 12:08:54 +0000 asID: 153671 IP address blocks: 154.81.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111809 (0x1b4c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Jan 15 12:08:54 2026 GMT Not After : Feb 17 12:08:54 2026 GMT Subject: CN=6968d8da-7826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f7:5c:25:28:31:c1:9a:3d:f6:b7:9c:eb:28: 1e:18:bc:e7:c1:f9:c2:d6:88:c4:20:d2:ea:cb:1b: 93:a9:be:5d:c7:2e:ef:7b:54:4b:08:93:d1:d8:46: a0:a7:25:87:66:77:3f:74:0b:30:1d:59:85:8b:c2: f6:30:1f:60:19:cf:0e:1a:33:b9:5b:b1:e8:67:dd: 4e:d9:7f:34:27:cb:1f:dc:4a:a8:46:59:14:af:2c: a9:ee:74:3a:52:f6:2b:8d:82:43:b1:a6:fe:d4:87: cd:33:bf:d0:c1:43:1c:c4:89:60:40:34:e1:db:36: 61:c8:9e:a8:75:a8:76:93:c8:7f:b1:85:ae:12:74: 89:b8:5e:e4:0c:df:e4:0c:56:bd:28:82:52:3e:9f: c7:76:49:15:bf:e6:e6:5e:1a:81:a2:77:2a:a6:6c: 06:d6:1d:f8:20:72:b4:86:2b:2f:aa:11:aa:e2:1e: 0f:6a:d1:3d:ea:c7:24:77:bb:fe:cc:d6:24:fb:4c: f9:5d:ce:38:5d:86:80:aa:3d:14:45:13:67:19:03: 62:79:6f:db:e6:39:67:3e:33:2c:70:e0:15:5d:44: 9c:75:75:6f:1d:91:58:b8:e2:df:1e:35:9e:5a:6e: 3e:ed:35:e2:22:c7:56:ee:6f:c2:ca:4b:27:b3:c3: 92:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6A:04:DF:E0:98:95:C8:E8:7D:8A:12:E2:0F:65:31:EA:C5:E0:FE X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F86B44F4F20A11F09A68F4E4DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.81.152.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:7f:59:86:d0:1f:19:90:60:5d:67:0b:68:a7:eb:70:93:88: 3a:73:6e:2a:3e:c7:e5:77:30:69:d4:ba:88:db:da:4d:e3:62: 94:49:74:56:be:59:28:3e:6d:2b:39:6f:85:e3:20:39:4b:40: 93:10:4a:eb:31:05:81:47:af:b3:48:b6:bf:71:25:70:92:6b: 75:73:f0:30:b1:9e:8a:a6:15:10:e7:7d:78:04:48:6b:6e:18: 47:24:9e:dc:40:e4:4d:82:a8:03:69:10:8a:73:e9:cd:d4:8b: 4d:44:65:18:c6:79:89:7f:71:30:e5:2f:93:ff:03:43:50:00: c7:5d:a2:87:4e:bd:f3:86:60:14:06:68:c7:c4:2b:89:a3:bb: 36:38:5f:fd:0e:72:f4:4d:12:d1:f0:36:1c:0f:fc:57:10:d0: 93:d9:c5:67:c0:58:7a:4f:6a:1e:b2:84:8a:cb:72:e5:10:aa: 5f:2f:1b:5e:c0:36:33:e0:13:bb:45:97:99:68:3a:67:43:1c: 38:19:56:3f:4e:bf:96:11:8f:9e:11:9b:ac:69:00:84:ce:4a: 77:64:40:8d:e1:07:24:2a:bd:0b:5a:2c:45:8c:c7:bc:d2:d8: 90:c2:4c:2d:2b:ab:4a:f4:44:89:6b:d5:73:f4:ca:de:50:57: e9:03:9d:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAbTBMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjYwMTE1MTIwODU0WhcNMjYwMjE3MTIwODU0WjAYMRYw FAYDVQQDEw02OTY4ZDhkYS03ODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAz/dcJSgxwZo99rec6ygeGLznwfnC1ojEINLqyxuTqb5dxy7ve1RLCJPR 2EagpyWHZnc/dAswHVmFi8L2MB9gGc8OGjO5W7HoZ91O2X80J8sf3EqoRlkUryyp 7nQ6UvYrjYJDsab+1IfNM7/QwUMcxIlgQDTh2zZhyJ6odah2k8h/sYWuEnSJuF7k DN/kDFa9KIJSPp/HdkkVv+bmXhqBoncqpmwG1h34IHK0hisvqhGq4h4PatE96sck d7v+zNYk+0z5Xc44XYaAqj0URRNnGQNieW/b5jlnPjMscOAVXUScdXVvHZFYuOLf HjWeWm4+7TXiIsdW7m/Cyksns8OSaQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFINq BN/gmJXI6H2KEuIPZTHqxeD+MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9GODZCNDRGNEYyMEExMUYwOUE2OEY0RTREQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlGYMA0GCSqGSIb3DQEB CwUAA4IBAQANf1mG0B8ZkGBdZwtop+twk4g6c24qPsfldzBp1LqI29pN42KUSXRW vlkoPm0rOW+F4yA5S0CTEErrMQWBR6+zSLa/cSVwkmt1c/AwsZ6KphUQ5314BEhr bhhHJJ7cQORNgqgDaRCKc+nN1ItNRGUYxnmJf3Ew5S+T/wNDUADHXaKHTr3zhmAU BmjHxCuJo7s2OF/9DnL0TRLR8DYcD/xXENCT2cVnwFh6T2oesoSKy3LlEKpfLxte wDYz4BO7RZeZaDpnQxw4GVY/Tr+WEY+eEZusaQCEzkp3ZECN4QckKr0LWixFjMe8 0tiQwkwtK6tK9ESJa9Vz9MreUFfpA50i -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:54 2026 by rpki-client