This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A07BB4DFF911F0AC71E4A7DAE4EC9C.roa File: 27A07BB4DFF911F0AC71E4A7DAE4EC9C.roa (raw, json) Hash identifier: uPRcqwU0/486u+1ZAzeM7BLPm+Qk8txR6xmyIEq2+jE= Subject key identifier: A7:C7:F9:65:65:A8:12:B6:6B:C1:BF:1B:AC:1B:AA:8F:90:71:4C:48 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B043 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A07BB4DFF911F0AC71E4A7DAE4EC9C.roa Signing time: Tue 23 Dec 2025 12:16:06 +0000 ROA not before: Tue 23 Dec 2025 12:16:01 +0000 ROA not after: Fri 30 Jan 2026 12:16:01 +0000 asID: 401783 IP address blocks: 154.90.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 21 Jan 2026 00:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110659 (0x1b043) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 23 12:16:01 2025 GMT Not After : Jan 30 12:16:01 2026 GMT Subject: CN=694a8805-060c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:0f:f3:34:98:bd:3e:4f:4b:1b:7e:97:3b:90: 03:7a:9c:ce:0f:bd:04:f3:e0:06:1b:bd:6e:53:09: 28:a2:d9:a0:3b:25:19:52:7a:39:64:ef:00:af:3d: 0e:de:a8:d7:9a:52:b8:70:9f:fe:58:3d:0a:10:99: 19:ec:72:a0:be:69:5a:31:04:1d:42:02:97:d3:4c: b6:7d:b0:c4:e1:c7:4e:78:c9:59:86:c6:6b:aa:4c: bb:e1:78:07:02:3c:92:27:40:87:b3:e6:58:04:09: 4c:00:41:38:4f:29:29:52:b1:b6:f0:15:08:f7:f4: 74:04:6c:75:54:e0:31:1c:2c:d9:3f:97:41:17:b3: 7a:c1:b2:88:89:c1:2b:66:8d:32:8f:70:1a:eb:9a: e1:7e:48:aa:f2:eb:1c:84:cd:bd:79:53:e4:72:c2: 88:f9:ee:4b:49:d4:25:c2:bb:3c:e9:4b:35:03:02: 22:b4:e5:62:75:83:91:4e:cb:bb:f3:a3:b0:98:9e: 19:fd:fd:b7:c3:ae:61:11:e4:b7:5c:d4:58:af:80: 71:ee:dc:2e:35:2c:02:4f:59:e0:a1:5e:fb:30:f7: 51:3e:60:77:09:a1:bb:f4:f9:37:a6:0e:bf:5e:cb: c7:02:90:cd:57:02:7c:15:a7:e5:65:f4:a7:1e:de: 43:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C7:F9:65:65:A8:12:B6:6B:C1:BF:1B:AC:1B:AA:8F:90:71:4C:48 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/27A07BB4DFF911F0AC71E4A7DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.90.65.0/24 Signature Algorithm: sha256WithRSAEncryption 59:d9:4f:7e:11:c9:09:29:3b:f0:7d:ff:ce:e5:e7:f0:3d:88: 27:bd:7e:c0:26:c8:02:10:25:ff:ee:50:e1:b8:f2:c2:92:54: 6e:0e:24:2d:94:0d:14:2f:76:63:67:a9:05:13:6d:17:57:20: f6:e2:ca:6c:2a:6d:fa:cb:c3:07:3f:f4:d4:86:52:07:bb:75: 02:42:bd:fb:36:d8:e0:fe:13:3f:25:c1:98:69:53:06:c8:f9: 12:24:bd:a5:ed:d6:c6:86:f8:06:49:76:ad:61:66:db:66:fe: 90:e9:eb:51:b3:06:b4:11:01:ee:1a:d7:de:01:a9:68:b3:ed: e2:fe:c9:40:06:4e:ed:48:5c:ef:81:85:8f:2f:d1:85:5c:58: cf:06:65:ee:70:13:bc:78:40:b4:90:79:40:be:e3:bf:94:b7: f2:f4:1a:11:f2:fc:ab:ab:bd:72:83:4e:ca:3a:e2:87:b0:6d: 55:3a:05:ab:97:2a:d1:df:db:6c:4e:71:88:52:1f:8e:a3:da: 31:e7:e4:f8:cb:e9:ca:fb:94:0d:73:a6:9f:12:2b:87:a8:75: de:60:1f:95:24:be:2d:df:17:71:b9:f0:55:a2:e5:3d:e6:38: 43:bd:4b:d5:14:88:49:11:6d:9b:75:8d:ae:49:9a:29:2c:23: 35:51:0d:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAbBDMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjIzMTIxNjAxWhcNMjYwMTMwMTIxNjAxWjAYMRYw FAYDVQQDEw02OTRhODgwNS0wNjBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAvw/zNJi9Pk9LG36XO5ADepzOD70E8+AGG71uUwkootmgOyUZUno5ZO8A rz0O3qjXmlK4cJ/+WD0KEJkZ7HKgvmlaMQQdQgKX00y2fbDE4cdOeMlZhsZrqky7 4XgHAjySJ0CHs+ZYBAlMAEE4TykpUrG28BUI9/R0BGx1VOAxHCzZP5dBF7N6wbKI icErZo0yj3Aa65rhfkiq8uschM29eVPkcsKI+e5LSdQlwrs86Us1AwIitOVidYOR Tsu786OwmJ4Z/f23w65hEeS3XNRYr4Bx7twuNSwCT1ngoV77MPdRPmB3CaG79Pk3 pg6/XsvHApDNVwJ8FaflZfSnHt5D+wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKfH +WVlqBK2a8G/G6wbqo+QcUxIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8yN0EwN0JCNERGRjkxMUYwQUM3MUU0QTdEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlpBMA0GCSqGSIb3DQEB CwUAA4IBAQBZ2U9+EckJKTvwff/O5efwPYgnvX7AJsgCECX/7lDhuPLCklRuDiQt lA0UL3ZjZ6kFE20XVyD24spsKm36y8MHP/TUhlIHu3UCQr37Ntjg/hM/JcGYaVMG yPkSJL2l7dbGhvgGSXatYWbbZv6Q6etRswa0EQHuGtfeAalos+3i/slABk7tSFzv gYWPL9GFXFjPBmXucBO8eEC0kHlAvuO/lLfy9BoR8vyrq71yg07KOuKHsG1VOgWr lyrR39tsTnGIUh+Oo9ox5+T4y+nK+5QNc6afEiuHqHXeYB+VJL4t3xdxufBVouU9 5jhDvUvVFIhJEW2bdY2uSZopLCM1UQ3L -----END CERTIFICATE-----Generated at Mon Jan 19 11:25:44 2026 by rpki-client