This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04AA95F2F5E011F0AEAFF1D0DAE4EC9C.roa
File: 04AA95F2F5E011F0AEAFF1D0DAE4EC9C.roa (raw, json)
Hash identifier: XcepTlrQ9kaP3Ci7Hw6QSqhRXzvlkRKUY+z+xn29xR0=
Subject key identifier: 97:5F:57:5E:7B:3E:3E:0C:C8:DD:22:5D:53:24:8C:03:F7:B5:74:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B5AC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04AA95F2F5E011F0AEAFF1D0DAE4EC9C.roa
Signing time: Tue 20 Jan 2026 09:11:35 +0000
ROA not before: Tue 20 Jan 2026 09:11:30 +0000
ROA not after: Tue 24 Feb 2026 09:11:30 +0000
asID: 63139
IP address blocks: 154.194.68.0/24 maxlen: 24
154.203.160.0/24 maxlen: 24
154.203.161.0/24 maxlen: 24
154.203.162.0/24 maxlen: 24
154.203.163.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.165.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.203.167.0/24 maxlen: 24
154.203.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112044 (0x1b5ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 20 09:11:30 2026 GMT
Not After : Feb 24 09:11:30 2026 GMT
Subject: CN=696f46c7-2a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:cf:de:66:11:ba:9b:06:a8:39:ae:98:01:
b4:8d:7e:95:d4:e0:58:e1:6c:b5:1f:c0:63:d0:56:
45:99:07:6c:42:64:d7:b4:7c:ef:74:c8:36:81:96:
4e:af:81:0c:10:59:76:53:da:c8:a7:a8:06:40:d4:
4f:28:4f:f4:68:69:18:d2:31:70:06:0f:3d:8a:de:
ef:0e:d8:98:9e:47:73:28:2b:61:d9:4b:eb:07:34:
4d:1c:77:30:4c:4e:55:fe:d6:64:7d:30:c9:99:29:
fc:6f:90:80:56:46:72:73:04:8c:30:8e:cf:c7:74:
66:80:00:4b:91:29:19:d2:04:67:e4:33:c9:15:4f:
1f:ad:cc:18:66:14:5c:3b:dd:8c:f9:47:66:b6:ed:
8a:39:aa:0a:8b:a1:c7:62:ce:43:3f:cf:1e:b6:6a:
71:5a:e9:a3:28:44:fb:69:1c:17:02:8a:0f:5c:b2:
6d:fa:69:0b:97:1b:59:66:ae:eb:6b:e0:1f:20:b3:
bb:7f:50:3d:1f:fc:ab:78:7e:a3:93:7d:57:47:75:
29:9c:5a:9c:83:7d:cf:83:33:a8:ac:6c:74:08:bd:
b7:41:f0:d6:a0:66:56:12:14:d8:96:db:bc:30:34:
a8:fc:93:a3:47:37:1a:9c:1c:0d:a4:35:02:34:c8:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5F:57:5E:7B:3E:3E:0C:C8:DD:22:5D:53:24:8C:03:F7:B5:74:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/04AA95F2F5E011F0AEAFF1D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.68.0/24
154.203.160.0-154.203.168.255
Signature Algorithm: sha256WithRSAEncryption
29:69:ef:f2:42:e4:c6:06:e4:e9:d0:d0:b1:3f:0b:3a:a4:50:
98:14:ee:87:75:98:60:3c:af:f3:10:b0:0b:6c:6e:1e:bd:f0:
e9:83:34:a8:42:dc:ef:ca:31:a7:e1:fc:52:7a:56:5f:ee:33:
75:75:d7:ad:b4:26:be:ea:7b:a2:54:63:24:4d:1e:cd:40:a9:
dc:bb:ad:0d:98:fa:e9:e7:ec:a3:ef:0c:a8:eb:54:88:f3:d1:
f0:02:cb:65:69:09:6a:18:5f:9b:c1:f1:4f:f8:8f:5c:9d:4a:
b8:93:0f:c4:45:30:60:07:c2:8d:88:4b:78:0a:22:f0:59:63:
3d:f3:cb:e9:e6:19:c1:6a:5c:e8:01:f3:59:80:77:f2:0b:a0:
28:5e:bb:c3:66:28:31:b9:7d:a3:65:49:38:e3:69:77:8c:13:
18:28:b0:5d:70:3a:a1:cf:4d:5d:b1:8c:36:38:f8:43:f6:b0:
ac:46:92:92:83:06:eb:79:23:56:c5:16:7d:4e:be:c8:62:fa:
a1:3c:d6:23:21:a4:71:8e:51:bd:72:a6:75:33:50:11:63:6e:
44:32:c4:97:f8:7f:8d:ac:9b:d4:83:65:2a:ba:34:64:92:e4:
83:75:9d:f8:42:7b:7d:c5:ee:01:6c:f8:f1:53:fd:cd:31:03:
9f:8f:fa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:36 2026 by rpki-client