This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D2167CEE05611F0B9CCBAE3DAE4EC9C.roa File: 4D2167CEE05611F0B9CCBAE3DAE4EC9C.roa (raw, json) Hash identifier: ldwdodz+8pe1flj4elbMPFyTena5dtl9PIH/Jf8QYbc= Subject key identifier: 4C:82:87:9C:A9:3F:8A:45:39:17:39:FD:06:AE:09:A3:61:01:10:24 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B08B Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D2167CEE05611F0B9CCBAE3DAE4EC9C.roa Signing time: Tue 23 Dec 2025 23:22:52 +0000 ROA not before: Tue 23 Dec 2025 23:22:45 +0000 ROA not after: Fri 30 Jan 2026 23:22:45 +0000 asID: 9304 IP address blocks: 154.193.2.0/24 maxlen: 24 154.196.160.0/24 maxlen: 24 154.199.4.0/24 maxlen: 24 154.200.129.0/24 maxlen: 24 154.200.130.0/24 maxlen: 24 154.200.156.0/24 maxlen: 24 154.200.157.0/24 maxlen: 24 154.200.158.0/24 maxlen: 24 154.200.159.0/24 maxlen: 24 154.200.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 20 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110731 (0x1b08b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Dec 23 23:22:45 2025 GMT Not After : Jan 30 23:22:45 2026 GMT Subject: CN=694b244c-ffa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:14:28:14:a3:ad:be:ff:e8:33:66:e0:df: dd:1a:cb:a5:e5:84:69:38:3c:ee:fb:37:7f:26:9c: d9:47:5a:9c:1a:92:df:dc:e4:59:7e:57:be:c1:8a: 0b:28:a7:c0:a0:7d:2b:9e:18:ac:5d:99:7b:d6:85: f0:5a:68:f9:25:09:94:be:be:be:1d:fb:d7:a3:7d: 06:22:9d:dc:6d:05:ea:c9:6c:94:2f:84:49:cf:af: ca:97:86:bb:1c:dc:ca:6f:a8:70:16:d4:26:50:7a: 53:6a:f8:3f:ce:96:7b:bc:15:06:5b:df:b2:ad:5e: 33:72:2c:0f:37:b2:86:44:4c:a2:33:0c:8e:47:15: ef:4c:f0:25:13:00:22:d4:ae:4f:19:2e:2a:7c:cb: aa:8a:c4:82:da:ca:6a:0e:dc:36:a8:cb:bc:29:64: 63:cd:1c:4f:e0:f4:1e:92:51:6c:13:b4:a7:ea:31: 9d:9a:eb:be:f2:45:e0:21:9b:ed:9d:4c:a5:53:50: f8:ca:43:1e:8c:d9:8c:28:08:b6:a1:9c:aa:7c:08: 9e:d0:b9:f2:5a:9a:03:3f:87:fa:18:09:f0:2f:29: 0a:0e:6f:b6:2a:0a:34:a9:f4:93:9e:68:fa:04:f6: 72:54:a2:f6:d5:f9:78:e0:58:bc:ca:73:88:31:6e: 1f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:82:87:9C:A9:3F:8A:45:39:17:39:FD:06:AE:09:A3:61:01:10:24 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D2167CEE05611F0B9CCBAE3DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.193.2.0/24 154.196.160.0/24 154.199.4.0/24 154.200.129.0-154.200.130.255 154.200.156.0/22 154.200.161.0/24 Signature Algorithm: sha256WithRSAEncryption 86:e1:7b:ff:23:87:79:8c:61:a8:cf:a9:e9:35:0b:43:83:fb: 5d:19:4a:38:c7:be:4f:af:e0:2d:db:9b:aa:15:c2:48:2f:9b: ba:7c:82:d9:c0:dc:85:54:62:e3:a5:2a:2e:f1:25:00:c3:26: 7d:d0:8b:8b:46:da:0f:97:6a:ad:de:2b:8c:53:79:e5:e1:f1: f5:c1:fd:d7:f1:12:29:48:f2:e0:da:0e:4c:d1:74:51:95:57: 1d:de:13:c4:a9:04:30:11:a3:9d:7d:9b:97:ec:9f:c7:2e:2d: b4:fe:88:3e:b6:ec:15:01:4a:b5:ce:0e:1f:f9:69:af:55:73: 32:c2:aa:8d:d7:ad:64:39:ac:ab:0d:99:0a:ef:8a:60:0b:a7: 39:a3:03:b9:a2:03:87:74:58:32:b9:7d:2c:fb:b2:f7:e4:c2: 8d:e7:c0:3b:99:94:3e:59:dc:3e:d3:fb:60:0a:6b:0c:fb:55: 3e:93:70:4f:e7:8b:b7:0a:a9:c8:9d:8c:9e:42:67:95:88:9d: 1b:f8:84:b3:73:6d:bd:7f:7c:7f:37:f1:b3:1f:bc:e6:c0:b7: b4:bc:58:55:62:83:30:dc:84:4b:04:da:c6:3a:88:4a:8a:f2: 86:c0:38:d8:ad:ce:ee:de:8e:b1:bd:24:2d:d5:a7:d0:7d:cb: e4:7a:35:b7 -----BEGIN CERTIFICATE----- MIIFqjCCBJKgAwIBAgIDAbCLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjUxMjIzMjMyMjQ1WhcNMjYwMTMwMjMyMjQ1WjAYMRYw FAYDVQQDEw02OTRiMjQ0Yy1mZmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAoLoUKBSjrb7/6DNm4N/dGsul5YRpODzu+zd/JpzZR1qcGpLf3ORZfle+ wYoLKKfAoH0rnhisXZl71oXwWmj5JQmUvr6+HfvXo30GIp3cbQXqyWyUL4RJz6/K l4a7HNzKb6hwFtQmUHpTavg/zpZ7vBUGW9+yrV4zciwPN7KGREyiMwyORxXvTPAl EwAi1K5PGS4qfMuqisSC2spqDtw2qMu8KWRjzRxP4PQeklFsE7Sn6jGdmuu+8kXg IZvtnUylU1D4ykMejNmMKAi2oZyqfAie0LnyWpoDP4f6GAnwLykKDm+2Kgo0qfST nmj6BPZyVKL21fl44Fi8ynOIMW4fPwIDAQABo4ICyzCCAscwHQYDVR0OBBYEFEyC h5ypP4pFORc5/QauCaNhARAkMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC80RDIxNjdDRUUwNTYxMUYwQjlDQ0JBRTNEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAmsECAwQAmsSgAwQAmscE MAwDBACayIEDBACayIIDBAKayJwDBACayKEwDQYJKoZIhvcNAQELBQADggEBAIbh e/8jh3mMYajPqek1C0OD+10ZSjjHvk+v4C3bm6oVwkgvm7p8gtnA3IVUYuOlKi7x JQDDJn3Qi4tG2g+Xaq3eK4xTeeXh8fXB/dfxEilI8uDaDkzRdFGVVx3eE8SpBDAR o519m5fsn8cuLbT+iD627BUBSrXODh/5aa9VczLCqo3XrWQ5rKsNmQrvimALpzmj A7miA4d0WDK5fSz7svfkwo3nwDuZlD5Z3D7T+2AKawz7VT6TcE/ni7cKqcidjJ5C Z5WInRv4hLNzbb1/fH838bMfvObAt7S8WFVigzDchEsE2sY6iEqK8obAONitzu7e jrG9JC3Vp9B9y+R6Nbc= -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:56 2026 by rpki-client