This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CD7D71CE17011F0BC3E38E3DAE4EC9C.roa File: 2CD7D71CE17011F0BC3E38E3DAE4EC9C.roa (raw, json) Hash identifier: 9wfLGg3SnOq5WPwlh9gaWa7+aGNDTva7bSOiZ5M+VfE= Subject key identifier: 5B:78:A9:EF:6B:B2:AB:E8:42:1D:59:F7:79:97:11:DE:F0:48:58:8A Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B140 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CD7D71CE17011F0BC3E38E3DAE4EC9C.roa Signing time: Thu 25 Dec 2025 09:00:36 +0000 ROA not before: Thu 25 Dec 2025 09:00:31 +0000 ROA not after: Sun 01 Feb 2026 09:00:31 +0000 asID: 44559 IP address blocks: 154.203.225.0/24 maxlen: 24 154.203.229.0/24 maxlen: 24 154.203.250.0/24 maxlen: 24 154.205.28.0/24 maxlen: 24 154.205.29.0/24 maxlen: 24 154.205.224.0/24 maxlen: 24 154.205.225.0/24 maxlen: 24 154.205.241.0/24 maxlen: 24 154.205.242.0/24 maxlen: 24 154.205.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 21 Jan 2026 13:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110912 (0x1b140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 25 09:00:31 2025 GMT Not After : Feb 1 09:00:31 2026 GMT Subject: CN=694cfd34-58fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a4:d0:5f:e4:d1:ac:eb:3e:49:b0:1a:34:06: ea:8a:65:cc:da:4c:7d:d1:61:2b:10:8d:8d:86:5b: 7f:64:9d:21:39:c3:fe:98:9b:1e:06:ca:56:10:95: 6e:38:b3:38:d8:d7:83:fc:0c:9e:7f:c9:c6:3f:62: b8:c8:18:dd:de:37:8e:03:96:43:54:47:fc:9f:40: 3e:0e:51:7b:86:fc:dd:82:06:7d:41:e8:65:c0:1e: 4f:06:90:ec:e5:9b:a0:af:5b:eb:c1:a1:3c:26:13: 1c:2d:b7:f5:85:29:6b:5d:75:c3:6d:3e:5a:c4:8b: 46:53:a3:74:79:af:a1:dc:83:f7:2b:9e:78:b0:b4: 7a:bd:4f:d1:92:77:6b:7d:b0:eb:39:52:c8:2d:e3: 89:45:f4:0a:57:54:04:74:74:d7:60:59:3f:9c:71: cc:72:27:21:98:e0:17:7b:dd:5d:2b:c5:ef:66:ab: f5:63:df:54:21:3f:cc:18:40:79:5d:af:3e:0a:9b: 6d:ed:77:65:d4:85:21:30:69:41:bc:a4:39:76:47: 1a:12:88:02:5e:15:b5:2f:aa:18:2c:f0:00:57:ad: 37:9b:38:d0:d6:8a:9b:7c:42:59:3e:8b:9f:2e:dd: 57:61:93:7c:86:d9:6e:79:95:63:65:3e:8e:33:5c: 9c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:78:A9:EF:6B:B2:AB:E8:42:1D:59:F7:79:97:11:DE:F0:48:58:8A X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2CD7D71CE17011F0BC3E38E3DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.203.225.0/24 154.203.229.0/24 154.203.250.0/24 154.205.28.0/23 154.205.224.0/23 154.205.241.0-154.205.243.255 Signature Algorithm: sha256WithRSAEncryption 8b:ee:d5:4a:30:89:ac:d7:68:ce:c8:93:7e:09:ea:86:7b:c1: 2c:a0:21:33:7e:ae:b7:a3:ea:3b:6b:89:83:69:40:83:ac:10: a7:e5:1d:41:e4:97:69:92:82:73:bf:a2:62:57:8a:bd:07:36: 65:c9:28:04:93:75:41:7c:21:e4:48:13:ac:0f:c0:4d:60:ff: a5:4f:f5:5c:c1:d8:a1:3a:35:fe:90:d7:90:4d:85:26:b9:a2: 62:63:fc:f1:be:0f:c1:3f:bc:69:cc:35:a9:de:86:d3:a0:73: 5b:88:60:7b:f2:ae:da:d6:d0:6c:f3:de:f4:7f:24:f8:59:08: a8:68:7c:63:38:5c:4f:bb:1a:3e:53:a3:9b:8c:35:d7:2c:80: c5:dd:db:97:40:78:42:61:37:b5:b4:57:4b:c1:a8:3c:cb:4c: bd:d5:83:d8:0b:5b:d0:b3:d2:95:1e:cd:3b:ba:c6:1b:1c:fd: 0f:4f:e8:d0:31:cc:c3:ff:84:58:7d:68:15:46:52:5b:95:c3: 30:15:b3:13:1d:54:72:94:28:6e:ad:2e:d7:14:9b:b7:a4:7c: b8:21:46:b7:89:99:92:23:e8:6a:de:b4:d3:17:64:60:a8:9d: 06:f0:df:1e:68:2a:68:e5:a5:e5:cd:ac:b9:27:ed:e3:c1:3f: 8d:af:41:03 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgIDAbFAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjI1MDkwMDMxWhcNMjYwMjAxMDkwMDMxWjAYMRYw FAYDVQQDEw02OTRjZmQzNC01OGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA1KTQX+TRrOs+SbAaNAbqimXM2kx90WErEI2Nhlt/ZJ0hOcP+mJseBspW EJVuOLM42NeD/Ayef8nGP2K4yBjd3jeOA5ZDVEf8n0A+DlF7hvzdggZ9QehlwB5P BpDs5Zugr1vrwaE8JhMcLbf1hSlrXXXDbT5axItGU6N0ea+h3IP3K554sLR6vU/R kndrfbDrOVLILeOJRfQKV1QEdHTXYFk/nHHMcichmOAXe91dK8XvZqv1Y99UIT/M GEB5Xa8+Cptt7Xdl1IUhMGlBvKQ5dkcaEogCXhW1L6oYLPAAV603mzjQ1oqbfEJZ PoufLt1XYZN8htlueZVjZT6OM1ycnwIDAQABo4ICyzCCAscwHQYDVR0OBBYEFFt4 qe9rsqvoQh1Z93mXEd7wSFiKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8yQ0Q3RDcxQ0UxNzAxMUYwQkMzRTM4RTNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAmsvhAwQAmsvlAwQAmsv6 AwQBms0cAwQBms3gMAwDBACazfEDBAKazfAwDQYJKoZIhvcNAQELBQADggEBAIvu 1UowiazXaM7Ik34J6oZ7wSygITN+rrej6jtriYNpQIOsEKflHUHkl2mSgnO/omJX ir0HNmXJKASTdUF8IeRIE6wPwE1g/6VP9VzB2KE6Nf6Q15BNhSa5omJj/PG+D8E/ vGnMNanehtOgc1uIYHvyrtrW0Gzz3vR/JPhZCKhofGM4XE+7Gj5To5uMNdcsgMXd 25dAeEJhN7W0V0vBqDzLTL3Vg9gLW9Cz0pUezTu6xhsc/Q9P6NAxzMP/hFh9aBVG UluVwzAVsxMdVHKUKG6tLtcUm7ekfLghRreJmZIj6GretNMXZGConQbw3x5oKmjl peXNrLkn7ePBP42vQQM= -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:10 2026 by rpki-client