This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/043CA4FAE6F611F0B67B7AB5DAE4EC9C.roa
File: 043CA4FAE6F611F0B67B7AB5DAE4EC9C.roa (raw, json)
Hash identifier: eiATUZRS63Q0v02BFYkjJQd/B0yQ5LdWvJe1qW8sTAk=
Subject key identifier: 24:8D:7D:E9:F8:CE:D0:64:53:E0:6A:56:27:D5:09:5E:7A:EC:66:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B27E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/043CA4FAE6F611F0B67B7AB5DAE4EC9C.roa
Signing time: Thu 01 Jan 2026 09:41:16 +0000
ROA not before: Thu 01 Jan 2026 09:41:11 +0000
ROA not after: Thu 05 Feb 2026 09:41:11 +0000
asID: 214238
IP address blocks: 154.219.23.0/24 maxlen: 24
154.219.25.0/24 maxlen: 24
154.219.30.0/24 maxlen: 24
154.219.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111230 (0x1b27e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 1 09:41:11 2026 GMT
Not After : Feb 5 09:41:11 2026 GMT
Subject: CN=6956413c-42e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5b:f8:77:66:83:28:03:7b:c4:2c:4f:49:17:
45:9b:ac:d3:82:88:57:fe:0c:93:e8:e0:73:46:ea:
30:b2:e6:a7:cd:4e:7b:0e:7e:21:c1:3a:cc:71:ac:
49:98:35:de:78:ee:67:9a:95:ca:7c:03:c4:46:8c:
e8:e3:17:40:dd:0a:0c:63:54:36:72:1d:31:ce:b6:
26:c5:e9:f3:63:d3:69:a4:6a:ff:c4:0d:81:75:3e:
47:6e:a5:a6:f8:96:81:e6:fd:02:00:f2:ea:9f:0c:
37:3f:b8:1a:d3:a7:c8:49:24:60:5d:22:c4:56:b2:
e8:a5:f2:c3:ca:4b:a3:c6:fd:c5:77:2c:3e:04:c8:
b5:74:e5:74:86:13:af:15:93:22:50:84:2b:d4:56:
51:5e:ba:a7:d6:7b:66:df:24:fd:93:54:43:1e:54:
ac:2e:cf:39:b2:61:31:fe:da:87:85:de:6f:d2:32:
60:61:e5:6f:b9:13:d9:54:ea:cd:e2:4d:1b:8b:01:
fa:73:31:ad:3a:3a:ba:42:d8:72:e4:f6:26:56:02:
f2:74:be:f2:dd:67:c2:b4:cc:4c:5d:40:41:d8:09:
41:93:32:d1:f0:0e:07:65:e8:d3:7c:97:99:2c:89:
d0:97:9e:28:b7:1e:c3:78:40:7c:93:9c:22:34:5c:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8D:7D:E9:F8:CE:D0:64:53:E0:6A:56:27:D5:09:5E:7A:EC:66:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/043CA4FAE6F611F0B67B7AB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.23.0/24
154.219.25.0/24
154.219.30.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:7b:93:33:dd:5f:bb:fe:49:47:4e:94:91:ae:e1:69:33:67:
bd:70:6f:7d:31:ff:87:0a:33:bd:e6:fb:ba:77:c1:ec:d6:0d:
bf:df:a8:7b:3d:92:18:53:d9:a3:27:93:22:ac:2d:5f:f7:02:
c6:fb:dd:de:4a:ee:f7:0f:82:32:0d:40:9b:e7:b6:71:e9:97:
4b:74:e1:b5:b1:04:ac:f9:ad:e7:32:1e:9c:9e:44:bd:c3:dc:
ae:57:34:94:d9:a6:63:77:15:56:bc:bd:2c:e7:59:de:ac:92:
09:c0:26:02:23:4a:19:9e:ce:ad:e7:20:7b:d2:45:a8:5c:57:
65:58:03:5b:02:a2:a4:a4:4d:57:82:11:77:89:83:3a:ee:12:
5f:f5:24:4e:09:cc:33:15:80:45:9e:94:8f:4c:09:5c:3e:74:
42:f1:52:23:90:54:40:3d:bd:e0:28:22:67:73:93:6f:10:99:
1b:16:e4:fc:53:e4:18:9b:0f:82:ff:af:a7:b6:45:c1:5d:d4:
39:d7:aa:52:93:29:65:d8:a5:c0:60:85:e1:b3:47:dc:bf:e1:
ce:95:5f:88:d4:f0:ac:5b:78:5f:8f:24:37:5f:28:bd:5f:d2:
9a:83:34:12:a0:c6:2c:9f:af:77:24:75:2c:c0:c2:7b:b1:9a:
c9:ad:f2:46
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgIDAbJ+MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTAxMDk0MTExWhcNMjYwMjA1MDk0MTExWjAYMRYw
FAYDVQQDEw02OTU2NDEzYy00MmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuFv4d2aDKAN7xCxPSRdFm6zTgohX/gyT6OBzRuowsuanzU57Dn4hwTrM
caxJmDXeeO5nmpXKfAPERozo4xdA3QoMY1Q2ch0xzrYmxenzY9NppGr/xA2BdT5H
bqWm+JaB5v0CAPLqnww3P7ga06fISSRgXSLEVrLopfLDykujxv3Fdyw+BMi1dOV0
hhOvFZMiUIQr1FZRXrqn1ntm3yT9k1RDHlSsLs85smEx/tqHhd5v0jJgYeVvuRPZ
VOrN4k0biwH6czGtOjq6Qthy5PYmVgLydL7y3WfCtMxMXUBB2AlBkzLR8A4HZejT
fJeZLInQl54otx7DeEB8k5wiNFy4TwIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFCSN
fen4ztBkU+BqVifVCV567GZrMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8wNDNDQTRGQUU2RjYxMUYwQjY3QjdBQjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAmtsXAwQAmtsZAwQBmtse
MA0GCSqGSIb3DQEBCwUAA4IBAQAfe5Mz3V+7/klHTpSRruFpM2e9cG99Mf+HCjO9
5vu6d8Hs1g2/36h7PZIYU9mjJ5MirC1f9wLG+93eSu73D4IyDUCb57Zx6ZdLdOG1
sQSs+a3nMh6cnkS9w9yuVzSU2aZjdxVWvL0s51nerJIJwCYCI0oZns6t5yB70kWo
XFdlWANbAqKkpE1XghF3iYM67hJf9SROCcwzFYBFnpSPTAlcPnRC8VIjkFRAPb3g
KCJnc5NvEJkbFuT8U+QYmw+C/6+ntkXBXdQ516pSkyll2KXAYIXhs0fcv+HOlV+I
1PCsW3hfjyQ3Xyi9X9KagzQSoMYsn693JHUswMJ7sZrJrfJG
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:15 2026 by rpki-client