This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89A4FB12E6EF11F08CAFA58CDAE4EC9C.roa File: 89A4FB12E6EF11F08CAFA58CDAE4EC9C.roa (raw, json) Hash identifier: K10HgobI3e0h5P3k/iWjzCH19VR1Pbvdt6amrhZf+v0= Subject key identifier: 62:54:E9:81:38:B7:0E:AE:BB:93:5F:A0:DF:27:A5:E3:A0:33:E4:CE Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B25E Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89A4FB12E6EF11F08CAFA58CDAE4EC9C.roa Signing time: Thu 01 Jan 2026 08:54:53 +0000 ROA not before: Thu 01 Jan 2026 08:54:48 +0000 ROA not after: Thu 05 Feb 2026 08:54:48 +0000 asID: 202656 IP address blocks: 154.219.192.0/24 maxlen: 24 154.219.195.0/24 maxlen: 24 154.219.201.0/24 maxlen: 24 154.219.202.0/24 maxlen: 24 154.219.203.0/24 maxlen: 24 154.219.208.0/24 maxlen: 24 154.219.209.0/24 maxlen: 24 154.219.210.0/24 maxlen: 24 154.219.212.0/24 maxlen: 24 154.219.213.0/24 maxlen: 24 154.219.214.0/24 maxlen: 24 154.219.215.0/24 maxlen: 24 154.219.216.0/24 maxlen: 24 154.220.1.0/24 maxlen: 24 154.221.1.0/24 maxlen: 24 154.221.53.0/24 maxlen: 24 154.221.54.0/24 maxlen: 24 154.221.55.0/24 maxlen: 24 154.221.62.0/24 maxlen: 24 154.221.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 21 Jan 2026 13:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111198 (0x1b25e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Jan 1 08:54:48 2026 GMT Not After : Feb 5 08:54:48 2026 GMT Subject: CN=6956365d-521d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:46:08:47:56:64:02:81:c8:fb:e4:e3:b9:cb: 71:1f:37:36:8e:00:83:e0:44:e9:aa:31:e0:a1:c0: da:be:28:a4:61:21:ba:2e:64:ec:45:be:d4:87:34: 10:f4:02:34:42:db:0a:20:1c:19:8f:45:87:ee:63: 2f:16:f2:e4:a6:db:e5:42:cc:45:b4:f6:c4:4b:ab: c7:41:25:cc:ad:78:04:a2:f5:89:82:ce:c3:a6:3e: 47:94:a3:63:1a:b5:05:2e:85:0f:91:b6:0a:98:3b: 25:2c:c6:9c:3a:4c:f6:05:29:64:9b:50:0b:9c:8c: 0a:ab:f1:f9:8e:05:8b:a1:70:8a:67:21:b4:68:e8: 2c:a0:a8:2d:a1:7f:10:fa:f4:19:6d:07:14:82:39: 05:d1:31:2c:fc:9f:43:d1:8a:d2:a5:78:9d:dd:89: 3b:27:00:e2:c2:22:83:ab:b6:28:bc:07:67:93:f8: e6:57:1f:b8:29:59:f0:dd:25:0e:a0:74:64:8d:11: 41:d5:34:29:d0:74:7e:3c:ee:7b:6c:fd:4e:12:c8: 43:99:ba:d3:b1:f6:36:f5:2e:28:a1:da:2d:94:84: de:82:4a:ec:84:ad:ba:ab:96:b3:ac:bc:dc:16:91: d0:9f:3b:76:02:da:80:d9:58:c3:92:5d:78:71:4c: 46:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:54:E9:81:38:B7:0E:AE:BB:93:5F:A0:DF:27:A5:E3:A0:33:E4:CE X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/89A4FB12E6EF11F08CAFA58CDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.219.192.0/24 154.219.195.0/24 154.219.201.0-154.219.203.255 154.219.208.0-154.219.210.255 154.219.212.0-154.219.216.255 154.220.1.0/24 154.221.1.0/24 154.221.53.0-154.221.55.255 154.221.62.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:9a:7a:bc:2f:44:b1:2a:f5:9d:24:0c:aa:6a:f7:2f:dc:63: b4:b2:5e:86:fb:cb:5f:b1:c1:8c:20:e5:e0:04:e6:5a:88:d5: 06:02:f9:bd:ce:70:90:57:60:4e:68:a6:d2:3a:0e:df:ed:56: cc:59:a7:f4:e3:00:37:70:90:63:0d:2c:e7:3e:cd:86:ed:ce: 76:40:e0:0f:46:75:89:16:99:0b:1e:19:c7:f7:1d:72:89:c7: 9c:d0:43:2a:09:1e:e3:81:ab:cb:c0:36:d1:82:2e:6f:e8:9a: 9f:12:84:5b:5b:f5:4c:a5:dc:0c:17:eb:c0:6d:d8:7b:98:e5: 15:2d:1f:51:5d:09:c3:c2:3c:86:89:82:23:55:47:f6:d6:ab: 87:7b:87:c4:5f:35:94:9d:c7:8c:19:ae:c0:3b:0e:f7:b5:51: d5:0e:69:8f:57:f2:7f:64:a4:cf:7c:d3:83:7b:e9:87:f7:be: 06:d5:c4:26:b5:86:08:f8:5c:a8:a4:60:3c:43:fe:40:83:48: 62:25:fd:8f:2e:93:a4:f6:0b:0a:69:d3:bc:6b:34:93:b0:77: 7a:db:af:bd:57:36:9f:6f:8f:71:66:b2:40:16:25:77:03:db: 2a:b6:b4:4b:3c:c3:2f:c3:7c:53:f7:e7:e8:67:b8:ad:99:e9: c7:50:15:8d -----BEGIN CERTIFICATE----- MIIF1DCCBLygAwIBAgIDAbJeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjYwMTAxMDg1NDQ4WhcNMjYwMjA1MDg1NDQ4WjAYMRYw FAYDVQQDEw02OTU2MzY1ZC01MjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAxEYIR1ZkAoHI++TjuctxHzc2jgCD4ETpqjHgocDaviikYSG6LmTsRb7U hzQQ9AI0QtsKIBwZj0WH7mMvFvLkptvlQsxFtPbES6vHQSXMrXgEovWJgs7Dpj5H lKNjGrUFLoUPkbYKmDslLMacOkz2BSlkm1ALnIwKq/H5jgWLoXCKZyG0aOgsoKgt oX8Q+vQZbQcUgjkF0TEs/J9D0YrSpXid3Yk7JwDiwiKDq7YovAdnk/jmVx+4KVnw 3SUOoHRkjRFB1TQp0HR+PO57bP1OEshDmbrTsfY29S4oodotlITegkrshK26q5az rLzcFpHQnzt2AtqA2VjDkl14cUxGKQIDAQABo4IC9TCCAvEwHQYDVR0OBBYEFGJU 6YE4tw6uu5NfoN8npeOgM+TOMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC84OUE0RkIxMkU2RUYxMUYwOENBRkE1OENEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAmtvAAwQAmtvDMAwDBACa 28kDBAKa28gwDAMEBJrb0AMEAJrb0jAMAwQCmtvUAwQAmtvYAwQAmtwBAwQAmt0B MAwDBACa3TUDBAOa3TADBAGa3T4wDQYJKoZIhvcNAQELBQADggEBAAuaerwvRLEq 9Z0kDKpq9y/cY7SyXob7y1+xwYwg5eAE5lqI1QYC+b3OcJBXYE5optI6Dt/tVsxZ p/TjADdwkGMNLOc+zYbtznZA4A9GdYkWmQseGcf3HXKJx5zQQyoJHuOBq8vANtGC Lm/omp8ShFtb9Uyl3AwX68Bt2HuY5RUtH1FdCcPCPIaJgiNVR/bWq4d7h8RfNZSd x4wZrsA7Dve1UdUOaY9X8n9kpM9804N76Yf3vgbVxCa1hgj4XKikYDxD/kCDSGIl /Y8uk6T2Cwpp07xrNJOwd3rbr71XNp9vj3FmskAWJXcD2yq2tEs8wy/DfFP35+hn uK2Z6cdQFY0= -----END CERTIFICATE-----Generated at Mon Jan 19 23:23:24 2026 by rpki-client