This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FA43584E65511F0A53AF0D2DAE4EC9C.roa
File: 0FA43584E65511F0A53AF0D2DAE4EC9C.roa (raw, json)
Hash identifier: 1e676Jvidf1FUadtMQ4q6uXjtusHik8vlMOBEVdn4TM=
Subject key identifier: FC:F7:49:43:56:35:98:C4:67:D1:31:26:91:06:6F:DB:0D:99:4F:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B217
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FA43584E65511F0A53AF0D2DAE4EC9C.roa
Signing time: Wed 31 Dec 2025 14:29:06 +0000
ROA not before: Wed 31 Dec 2025 14:29:01 +0000
ROA not after: Sat 31 Jan 2026 14:29:01 +0000
asID: 140869
IP address blocks: 154.81.32.0/24 maxlen: 24
154.81.33.0/24 maxlen: 24
154.81.34.0/24 maxlen: 24
154.81.35.0/24 maxlen: 24
154.81.36.0/24 maxlen: 24
154.81.37.0/24 maxlen: 24
154.81.38.0/24 maxlen: 24
154.81.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111127 (0x1b217)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 31 14:29:01 2025 GMT
Not After : Jan 31 14:29:01 2026 GMT
Subject: CN=69553332-f35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:64:c2:1c:70:ef:c3:84:0e:6e:c0:a7:05:be:
b3:0f:ce:d5:49:9a:c2:c6:f3:b3:a3:e2:33:bf:7d:
94:b3:c5:07:c1:70:4e:ab:90:8e:81:1c:03:7b:e8:
30:17:34:c2:bc:85:cb:1a:e6:e2:2b:05:6b:46:45:
f9:cd:08:5e:ed:9e:45:9e:0d:3d:0a:87:54:ce:e5:
72:71:c7:bd:c4:a7:17:32:ef:a7:8b:fc:5d:5e:01:
09:38:08:cf:76:65:5c:4a:34:7a:ec:06:b1:dc:a8:
80:8a:90:0b:3b:99:39:9f:d6:1c:ad:04:fc:c9:6f:
bd:80:7e:cc:c6:6a:9d:c2:fb:d1:32:36:cb:76:ab:
f2:05:d6:30:94:2c:d1:de:a5:06:f2:a3:3f:33:5a:
12:3c:1e:f4:c3:8c:92:3b:62:fa:c3:94:1f:c4:ae:
51:df:8c:fb:e9:56:4b:69:54:c9:cd:04:82:59:f4:
a8:c6:cc:d7:5a:b4:ac:f4:96:d9:be:b1:27:7f:70:
be:14:95:72:d2:6c:ab:3d:fd:9f:8f:18:20:e9:ee:
49:56:20:f5:6e:ea:b4:0a:6f:9e:f0:b9:74:45:6b:
c7:ba:55:21:34:1c:31:9c:04:15:ca:39:43:ec:75:
c3:c8:30:ad:4c:29:85:b2:83:a5:16:50:c8:c8:f9:
0e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F7:49:43:56:35:98:C4:67:D1:31:26:91:06:6F:DB:0D:99:4F:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0FA43584E65511F0A53AF0D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.32.0/21
Signature Algorithm: sha256WithRSAEncryption
94:e5:53:ce:dd:9a:a0:65:fd:c4:d2:30:d3:1c:a9:92:22:08:
e4:83:1e:62:cf:3d:1a:8b:74:fe:95:8a:0a:36:d4:5a:5c:1f:
66:9d:ab:46:f2:28:9c:e2:76:63:28:ec:39:23:b2:d9:ba:2c:
ad:f4:eb:bc:34:29:c8:f2:ea:66:66:7b:94:5c:95:67:5b:ac:
01:e0:65:d3:f4:29:ab:81:00:7a:cc:3a:39:f2:c6:b1:28:3e:
5d:71:4b:9a:5e:0e:97:ab:1e:79:1a:b3:54:eb:42:fe:ce:fc:
fc:e4:a4:6d:55:7d:41:b3:1a:fd:95:9f:55:9e:03:28:4f:3e:
b1:4c:11:28:7e:0e:d3:47:a9:72:67:43:25:1e:24:2d:a8:a6:
d2:8b:ab:68:55:62:99:3c:32:1e:b2:d0:40:12:f8:20:5f:af:
1a:89:52:bc:36:50:41:6a:2b:44:dc:63:97:a1:59:9e:7b:87:
9d:5e:64:12:77:76:49:7f:eb:c5:5d:55:94:25:fe:f1:f2:0b:
7f:01:99:a5:ec:0a:01:9b:67:7b:96:7a:7f:d0:16:93:38:20:
5c:f5:02:8d:72:5c:ac:05:70:12:10:0e:d2:f6:80:9a:33:5f:
f9:a0:e3:16:dc:3f:52:9e:81:ad:fe:f6:42:3e:1a:ef:68:72:
08:e6:37:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:43:15 2026 by rpki-client