This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5F247BAFB5311F0A0E885DEDAE4EC9C.roa File: B5F247BAFB5311F0A0E885DEDAE4EC9C.roa (raw, json) Hash identifier: OGtVx/LtgHhm9hY1wXBSvQ2HmbmiKtqkktqPq6U3s1o= Subject key identifier: FF:D1:2D:38:ED:D1:C1:5F:F8:F1:BA:2C:B9:F9:0A:C3:3B:6C:C6:31 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B6EA Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5F247BAFB5311F0A0E885DEDAE4EC9C.roa Signing time: Tue 27 Jan 2026 07:42:21 +0000 ROA not before: Tue 27 Jan 2026 07:42:16 +0000 ROA not after: Fri 06 Mar 2026 07:42:16 +0000 asID: 18779 IP address blocks: 154.206.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 30 Jan 2026 12:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112362 (0x1b6ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Jan 27 07:42:16 2026 GMT Not After : Mar 6 07:42:16 2026 GMT Subject: CN=69786c5c-71ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:24:12:97:00:79:e0:3e:12:f5:c3:b3:bc:c2: ea:e9:fb:d1:84:df:f8:18:4b:8e:a2:b2:30:d3:60: f6:bc:95:0c:90:77:5b:23:e8:af:34:28:38:6a:8b: be:0e:b2:8a:00:95:7f:49:5c:2d:5b:dc:47:8d:0d: 8e:70:6a:31:01:4c:88:7c:02:8e:67:b4:e8:68:cd: a1:ad:e2:4d:44:97:ab:46:b2:4d:f9:bf:8d:ce:a8: 1d:f7:a7:1a:f8:da:c4:77:1d:f1:90:53:0b:d5:e8: 17:bb:7f:fa:d7:c6:3b:ef:62:26:c8:e6:65:a0:4b: 10:53:c2:5b:86:e5:d0:38:8d:3b:8e:c4:34:82:8e: c2:6a:06:b3:22:4a:90:f4:55:e8:2a:58:ca:09:6f: 57:8f:5c:3f:aa:29:6f:18:1e:31:1d:19:3c:93:70: d9:85:d4:44:f1:72:09:2c:09:a6:b0:cf:6e:41:c4: 47:29:fc:61:90:5b:a6:4d:d4:f3:fc:85:67:42:09: e0:62:0c:66:8d:fe:fb:24:b4:88:58:bd:96:77:e4: 64:b9:90:61:a0:7c:55:d8:d6:f0:0c:33:5d:d6:d6: 21:ca:4c:52:26:7a:7d:24:be:f5:75:3f:16:b3:c4: 90:d2:ea:81:2b:85:30:cc:bd:6c:1b:8b:f4:cc:79: db:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D1:2D:38:ED:D1:C1:5F:F8:F1:BA:2C:B9:F9:0A:C3:3B:6C:C6:31 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B5F247BAFB5311F0A0E885DEDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.206.20.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:45:10:b9:07:08:7f:60:3a:b7:4e:09:5f:ef:6e:62:fe:11: 92:9f:8a:ec:06:f1:73:c4:ce:54:6b:bd:e1:97:bb:91:ce:91: d6:2e:8e:6a:94:7e:f6:d3:10:7d:20:26:c9:cb:ba:a7:a8:92: 21:d0:3a:db:ec:45:e5:f5:1f:c2:d0:44:fb:45:f2:74:a6:a7: 8b:91:c6:ed:7f:23:57:c7:48:c0:ed:85:18:41:a2:50:df:b0: f4:f3:ce:e7:d0:07:fa:41:24:06:f8:9e:a3:00:95:bb:cf:08: 8c:94:b7:41:fd:7c:b9:06:b7:08:88:a2:51:2f:5f:91:35:52: d9:4c:fe:be:32:ae:41:02:57:a4:44:9d:08:3e:a8:d2:b2:72: c1:1d:0b:fb:6a:74:9d:eb:07:6a:de:7d:58:ab:15:9e:96:71: 6e:21:c6:e7:9e:f4:2e:91:2a:67:a0:df:e1:a8:0a:2e:0a:ac: 7e:43:10:f2:72:74:bb:4f:65:7d:ef:6f:b7:9a:a5:4b:58:57: 8e:cc:db:bf:ff:44:5b:6e:5f:2e:b7:87:8c:16:da:b0:1f:5f: bc:d1:d6:ce:82:17:35:ad:29:1c:9b:21:00:65:fe:16:dd:82: 19:0d:17:91:61:50:97:88:e8:5a:3f:1b:e2:b9:14:df:e1:c0: 19:07:80:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgIDAbbqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjYwMTI3MDc0MjE2WhcNMjYwMzA2MDc0MjE2WjAYMRYw FAYDVQQDEw02OTc4NmM1Yy03MWZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAvCQSlwB54D4S9cOzvMLq6fvRhN/4GEuOorIw02D2vJUMkHdbI+ivNCg4 aou+DrKKAJV/SVwtW9xHjQ2OcGoxAUyIfAKOZ7ToaM2hreJNRJerRrJN+b+Nzqgd 96ca+NrEdx3xkFML1egXu3/618Y772ImyOZloEsQU8JbhuXQOI07jsQ0go7Cagaz IkqQ9FXoKljKCW9Xj1w/qilvGB4xHRk8k3DZhdRE8XIJLAmmsM9uQcRHKfxhkFum TdTz/IVnQgngYgxmjf77JLSIWL2Wd+RkuZBhoHxV2NbwDDNd1tYhykxSJnp9JL71 dT8Ws8SQ0uqBK4UwzL1sG4v0zHnbVwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFP/R LTjt0cFf+PG6LLn5CsM7bMYxMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9CNUYyNDdCQUZCNTMxMUYwQTBFODg1REVEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms4UMA0GCSqGSIb3DQEB CwUAA4IBAQBORRC5Bwh/YDq3Tglf725i/hGSn4rsBvFzxM5Ua73hl7uRzpHWLo5q lH720xB9ICbJy7qnqJIh0Drb7EXl9R/C0ET7RfJ0pqeLkcbtfyNXx0jA7YUYQaJQ 37D0887n0Af6QSQG+J6jAJW7zwiMlLdB/Xy5BrcIiKJRL1+RNVLZTP6+Mq5BAlek RJ0IPqjSsnLBHQv7anSd6wdq3n1YqxWelnFuIcbnnvQukSpnoN/hqAouCqx+QxDy cnS7T2V972+3mqVLWFeOzNu//0Rbbl8ut4eMFtqwH1+80dbOghc1rSkcmyEAZf4W 3YIZDReRYVCXiOhaPxviuRTf4cAZB4Cy -----END CERTIFICATE-----Generated at Wed Jan 28 19:20:05 2026 by rpki-client