This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/395966D4DFDD11F09AAE107DDAE4EC9C.roa File: 395966D4DFDD11F09AAE107DDAE4EC9C.roa (raw, json) Hash identifier: lyUemTz5wENgnw7l39pl2nb1DM9zGwsE43AQUnhEw2A= Subject key identifier: 45:F0:F9:64:11:37:17:6A:54:42:49:8C:39:B1:28:CF:FC:25:1F:24 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B025 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/395966D4DFDD11F09AAE107DDAE4EC9C.roa Signing time: Tue 23 Dec 2025 08:56:09 +0000 ROA not before: Tue 23 Dec 2025 08:56:04 +0000 ROA not after: Mon 26 Jan 2026 08:56:04 +0000 asID: 6079 IP address blocks: 154.194.230.0/24 maxlen: 24 154.194.231.0/24 maxlen: 24 154.199.16.0/24 maxlen: 24 154.199.17.0/24 maxlen: 24 154.199.19.0/24 maxlen: 24 154.199.20.0/24 maxlen: 24 154.199.21.0/24 maxlen: 24 154.199.22.0/24 maxlen: 24 154.199.23.0/24 maxlen: 24 154.199.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 21 Jan 2026 13:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110629 (0x1b025) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 23 08:56:04 2025 GMT Not After : Jan 26 08:56:04 2026 GMT Subject: CN=694a5929-190b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:8a:e9:90:3e:2b:5e:15:17:7b:86:89:3c: 9c:07:1e:c4:24:13:c0:52:59:67:aa:2b:d5:f5:d7: a5:c2:51:11:f7:f2:61:ca:72:5f:47:04:d4:8c:70: 42:1b:3b:eb:79:41:19:c8:3e:8f:fa:41:43:d7:c6: ac:d5:d0:2a:9c:7a:b2:39:3a:89:68:d8:3a:45:04: 86:1f:f3:5f:40:ef:6b:c6:82:0c:0b:6c:2f:6c:e4: f4:03:81:23:e6:33:2b:cd:83:08:76:da:49:21:2c: 33:66:c1:21:03:38:11:86:80:9c:99:a2:53:72:2a: 16:a1:32:9d:11:e4:49:5c:5f:71:00:4b:36:19:1d: 35:dc:5d:c7:49:dc:9f:45:39:11:ba:84:5b:09:83: a3:d0:2e:9d:a2:5f:72:6c:72:a9:2e:ec:8d:91:02: ac:16:8a:f2:35:0f:6e:4f:29:8a:a1:a1:c4:0b:e1: 1c:aa:e8:ef:04:1a:cd:13:cf:1b:d7:c8:7a:60:5a: 2a:58:c0:fa:89:14:21:9b:b9:5c:ca:cb:90:97:dc: b5:a3:a2:dc:2a:17:ef:55:ee:fe:ee:b1:34:80:29: 5a:e8:4c:98:d4:90:26:df:2c:d3:44:f0:1e:25:7a: 66:8a:5d:fa:cb:23:0b:04:a6:02:d5:88:15:a5:55: 81:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:F0:F9:64:11:37:17:6A:54:42:49:8C:39:B1:28:CF:FC:25:1F:24 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/395966D4DFDD11F09AAE107DDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.194.230.0/23 154.199.16.0/23 154.199.19.0-154.199.23.255 154.199.48.0/24 Signature Algorithm: sha256WithRSAEncryption 42:7a:0c:53:f3:6a:bc:a7:be:0b:e4:c0:01:f5:7c:19:25:9a: 62:2b:43:6d:04:27:af:58:8c:80:49:2f:cc:cc:70:23:33:b4: 89:42:b7:e6:65:77:c5:4a:a4:fa:51:9f:55:7e:dd:3a:a2:b5: 1b:4a:c2:20:22:16:66:46:9f:c3:51:4f:6e:c9:f4:9c:9b:aa: 4f:11:e6:53:29:91:ab:2c:f4:e6:3d:c6:af:2b:79:07:05:97: c1:56:dd:e0:e2:d8:23:3c:e7:2b:d2:f6:28:1a:db:1d:dc:47: 68:42:82:ad:bb:29:2f:69:fa:15:82:4c:b8:16:4e:b0:72:40: 19:64:03:db:45:54:4d:3c:cc:51:6e:14:f9:f2:28:7c:3a:31: 46:da:0c:70:17:49:83:ca:f6:b5:26:0b:47:7f:a7:c5:30:e1: 26:87:4e:e1:17:29:90:df:08:78:bb:c0:ba:7c:f4:1c:2e:23: 2a:44:89:e1:87:f2:f8:e2:06:b9:15:73:0b:46:2e:fb:aa:2e: 30:75:84:ec:4d:45:20:bd:0f:c7:27:f8:f9:81:c9:43:e5:22: 4f:f8:6f:b2:2c:9d:4f:08:0b:ab:5b:7e:b0:d2:23:42:50:7c: a5:dc:f9:38:e0:c1:86:f8:69:c2:a8:88:8e:f3:60:3c:8e:01: 7b:52:c4:13 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIDAbAlMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjIzMDg1NjA0WhcNMjYwMTI2MDg1NjA0WjAYMRYw FAYDVQQDEw02OTRhNTkyOS0xOTBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAuV6K6ZA+K14VF3uGiTycBx7EJBPAUllnqivV9delwlER9/JhynJfRwTU jHBCGzvreUEZyD6P+kFD18as1dAqnHqyOTqJaNg6RQSGH/NfQO9rxoIMC2wvbOT0 A4Ej5jMrzYMIdtpJISwzZsEhAzgRhoCcmaJTcioWoTKdEeRJXF9xAEs2GR013F3H SdyfRTkRuoRbCYOj0C6dol9ybHKpLuyNkQKsForyNQ9uTymKoaHEC+EcqujvBBrN E88b18h6YFoqWMD6iRQhm7lcysuQl9y1o6LcKhfvVe7+7rE0gCla6EyY1JAm3yzT RPAeJXpmil36yyMLBKYC1YgVpVWBmwIDAQABo4ICvzCCArswHQYDVR0OBBYEFEXw +WQRNxdqVEJJjDmxKM/8JR8kMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC8zOTU5NjZENERGREQxMUYwOUFBRTEwN0REQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBmsLmAwQBmscQMAwDBACa xxMDBAOaxxADBACaxzAwDQYJKoZIhvcNAQELBQADggEBAEJ6DFPzarynvgvkwAH1 fBklmmIrQ20EJ69YjIBJL8zMcCMztIlCt+Zld8VKpPpRn1V+3TqitRtKwiAiFmZG n8NRT27J9Jybqk8R5lMpkass9OY9xq8reQcFl8FW3eDi2CM85yvS9iga2x3cR2hC gq27KS9p+hWCTLgWTrByQBlkA9tFVE08zFFuFPnyKHw6MUbaDHAXSYPK9rUmC0d/ p8Uw4SaHTuEXKZDfCHi7wLp89BwuIypEieGH8vjiBrkVcwtGLvuqLjB1hOxNRSC9 D8cn+PmByUPlIk/4b7IsnU8IC6tbfrDSI0JQfKXc+TjgwYb4acKoiI7zYDyOAXtS xBM= -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:24 2026 by rpki-client