This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDF36B5AEBDA11F0862B6CCEDAE4EC9C.roa File: DDF36B5AEBDA11F0862B6CCEDAE4EC9C.roa (raw, json) Hash identifier: vSXYNbbVd2efwfLWtIOwrzuGFEZsgXfzOFBgGSirpA8= Subject key identifier: 85:F5:C5:7C:B3:A3:86:C8:46:01:A8:B6:1E:D7:28:3C:B5:3D:92:88 Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Certificate serial: 01B396 Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDF36B5AEBDA11F0862B6CCEDAE4EC9C.roa Signing time: Wed 07 Jan 2026 15:09:31 +0000 ROA not before: Wed 07 Jan 2026 15:09:26 +0000 ROA not after: Tue 27 Jan 2026 15:09:26 +0000 asID: 138915 IP address blocks: 154.203.142.0/24 maxlen: 24 154.203.143.0/24 maxlen: 24 154.203.144.0/23 maxlen: 24 154.203.163.0/24 maxlen: 24 154.203.164.0/24 maxlen: 24 154.203.165.0/24 maxlen: 24 154.203.166.0/24 maxlen: 24 154.203.178.0/24 maxlen: 24 154.203.181.0/24 maxlen: 24 154.203.191.0/24 maxlen: 24 154.205.128.0/24 maxlen: 24 154.205.129.0/24 maxlen: 24 154.205.130.0/24 maxlen: 24 154.205.131.0/24 maxlen: 24 154.205.132.0/24 maxlen: 24 154.205.133.0/24 maxlen: 24 154.205.134.0/24 maxlen: 24 154.205.135.0/24 maxlen: 24 154.205.136.0/23 maxlen: 24 154.205.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 21 Jan 2026 00:06:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111510 (0x1b396) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC Validity Not Before: Jan 7 15:09:26 2026 GMT Not After : Jan 27 15:09:26 2026 GMT Subject: CN=695e772b-6199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ee:5d:e6:93:52:72:d2:4a:65:78:bc:a6:49: 17:e2:4a:ec:26:78:da:60:6a:24:46:f4:bd:bf:5d: 0c:bc:df:b6:47:c4:af:9a:ca:bb:95:7f:a2:24:94: 46:66:23:86:94:e6:84:ae:05:74:3a:c0:89:d4:2d: 8d:a4:59:47:50:c1:1f:ed:0a:9c:db:4e:39:86:19: cd:6f:f6:f6:da:e4:4b:af:44:da:92:b7:c9:db:b8: 69:b9:57:77:a2:7f:60:52:9d:e9:f8:ec:ad:da:0a: 0a:0b:88:91:de:d3:77:2f:01:73:10:ef:db:e5:8b: c6:b7:59:84:79:c3:cc:65:bd:eb:8b:e6:57:7b:4b: 8f:76:69:b4:64:e2:54:b5:42:2e:20:0d:27:69:37: 97:9a:9f:a6:d8:f1:87:ea:c3:9a:8e:e3:1e:e1:56: 93:2d:4a:08:39:c2:09:a7:ed:8e:1e:7f:64:9d:c3: ad:6a:07:ee:3b:c1:68:de:d2:97:e2:51:05:8f:44: 8c:04:64:e6:19:51:e7:5f:4a:16:83:89:19:1a:d7: 88:71:08:3a:e2:54:b3:aa:0c:12:02:d6:a8:4b:0f: b1:10:38:12:39:fa:bd:e0:92:6f:c2:3d:26:30:b4: 19:af:53:d1:27:9c:11:00:46:35:5b:8a:d9:7a:35: 59:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F5:C5:7C:B3:A3:86:C8:46:01:A8:B6:1E:D7:28:3C:B5:3D:92:88 X509v3 Authority Key Identifier: keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDF36B5AEBDA11F0862B6CCEDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 154.203.142.0-154.203.145.255 154.203.163.0-154.203.166.255 154.203.178.0/24 154.203.181.0/24 154.203.191.0/24 154.205.128.0-154.205.138.255 Signature Algorithm: sha256WithRSAEncryption c4:ce:99:2e:42:94:59:52:3d:27:15:83:71:ca:b0:93:07:a9: cb:33:ad:94:68:78:c9:d8:68:3e:22:76:9d:ad:ae:1b:fc:f3: c8:b5:46:99:92:e7:c1:0d:f2:d3:68:e0:74:1c:f0:5f:95:04: ca:d4:27:2b:08:dd:81:5f:aa:a5:0b:90:ad:c5:80:d4:00:42: 2d:9c:5e:b4:02:e5:e6:c8:62:7d:6d:d1:29:85:7b:6e:04:a9: 27:6d:96:1d:7c:ee:ee:96:c4:bf:ff:63:44:1e:34:aa:ea:ca: 54:7e:58:5e:1d:b9:a2:f7:c7:34:22:36:c2:c6:86:f6:b6:a3: e0:7a:ed:41:f5:3a:b0:a8:19:20:79:2c:30:5d:ac:9b:7a:6e: 96:97:92:cb:72:1a:05:d2:ba:e4:b3:cd:2f:8d:51:aa:b5:b1: 51:76:0d:68:b0:0f:53:95:bc:96:1d:d0:2b:28:b0:e2:26:9c: 04:6a:b3:a7:6f:6e:6d:f4:86:01:f3:e4:75:b8:b4:b1:1d:21: 5d:79:55:69:a1:27:1b:5f:7c:e8:b3:cd:84:75:95:43:9e:c5: 6c:fe:8b:84:0c:36:75:87:b7:98:a4:c4:e0:c3:1a:77:9d:4d: f3:0f:84:f9:9c:2c:38:e9:7d:25:59:b6:e3:b2:3e:f9:8a:a3: 7a:1a:6e:49 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgIDAbOWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0 MTE2REUxNUIzREMwHhcNMjYwMTA3MTUwOTI2WhcNMjYwMTI3MTUwOTI2WjAYMRYw FAYDVQQDEw02OTVlNzcyYi02MTk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAq+5d5pNSctJKZXi8pkkX4krsJnjaYGokRvS9v10MvN+2R8Svmsq7lX+i JJRGZiOGlOaErgV0OsCJ1C2NpFlHUMEf7Qqc2045hhnNb/b22uRLr0TakrfJ27hp uVd3on9gUp3p+Oyt2goKC4iR3tN3LwFzEO/b5YvGt1mEecPMZb3ri+ZXe0uPdmm0 ZOJUtUIuIA0naTeXmp+m2PGH6sOajuMe4VaTLUoIOcIJp+2OHn9kncOtagfuO8Fo 3tKX4lEFj0SMBGTmGVHnX0oWg4kZGteIcQg64lSzqgwSAtaoSw+xEDgSOfq94JJv wj0mMLQZr1PRJ5wRAEY1W4rZejVZLwIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFIX1 xXyzo4bIRgGoth7XKDy1PZKIMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG OEFFQTIyOC9EREYzNkI1QUVCREExMUYwODYyQjZDQ0VEQUU0RUM5Qy5yb2EwNQYI KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u eG1sMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8MAwDBAGay44DBAGay5AwDAME AJrLowMEAJrLpgMEAJrLsgMEAJrLtQMEAJrLvzAMAwQHms2AAwQAms2KMA0GCSqG SIb3DQEBCwUAA4IBAQDEzpkuQpRZUj0nFYNxyrCTB6nLM62UaHjJ2Gg+Inadra4b /PPItUaZkufBDfLTaOB0HPBflQTK1CcrCN2BX6qlC5CtxYDUAEItnF60AuXmyGJ9 bdEphXtuBKknbZYdfO7ulsS//2NEHjSq6spUflheHbmi98c0IjbCxob2tqPgeu1B 9TqwqBkgeSwwXaybem6Wl5LLchoF0rrks80vjVGqtbFRdg1osA9TlbyWHdArKLDi JpwEarOnb25t9IYB8+R1uLSxHSFdeVVpoScbX3zos82EdZVDnsVs/ouEDDZ1h7eY pMTgwxp3nU3zD4T5nCw46X0lWbbjsj75iqN6Gm5J -----END CERTIFICATE-----Generated at Mon Jan 19 08:59:53 2026 by rpki-client