This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/128BF7F8E00D11F08364B5A3DAE4EC9C.roa
File: 128BF7F8E00D11F08364B5A3DAE4EC9C.roa (raw, json)
Hash identifier: nlGaoAS0yYJm9RUD2uvxKy5vHZJx4Caq3LNTugt4haU=
Subject key identifier: 30:68:71:8E:B1:8E:C1:19:5A:17:C4:CB:4E:3F:94:AE:B8:B2:F6:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B04F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/128BF7F8E00D11F08364B5A3DAE4EC9C.roa
Signing time: Tue 23 Dec 2025 14:38:40 +0000
ROA not before: Tue 23 Dec 2025 14:38:35 +0000
ROA not after: Wed 28 Jan 2026 14:38:35 +0000
asID: 17561
IP address blocks: 154.82.154.0/23 maxlen: 24
154.82.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110671 (0x1b04f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 23 14:38:35 2025 GMT
Not After : Jan 28 14:38:35 2026 GMT
Subject: CN=694aa970-0b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a7:6e:20:28:67:2a:20:91:7b:64:1e:9d:fc:
e4:6e:f9:05:43:93:ae:bb:ed:0f:ec:13:3b:fe:2d:
d4:bd:da:5a:f5:a0:c5:7d:e2:25:7b:86:ee:9e:c2:
c2:36:73:b3:f3:00:f8:46:5c:75:12:28:d0:28:33:
eb:06:7c:8d:6f:52:07:84:3f:7f:ef:ab:bb:97:5c:
a3:5b:b6:82:d0:fd:0c:13:f1:31:14:33:60:28:61:
b7:d1:44:2a:c7:a5:fc:62:73:ff:aa:b0:ad:7d:62:
65:09:26:35:87:18:ee:d1:6f:e6:57:5d:e2:90:e2:
99:3f:2c:5e:a0:3f:94:d8:72:21:9b:99:95:f7:b8:
1f:8f:a0:aa:2e:7a:62:d3:8c:28:8b:3b:85:32:9b:
39:35:f6:43:1e:40:a5:3f:e8:7b:5b:d5:3c:47:ab:
1f:95:d7:d8:a8:aa:da:5a:2f:d6:51:e4:98:51:e3:
8a:1e:31:ff:89:ab:b4:dc:4c:77:d0:49:8a:cf:ed:
27:58:31:15:5c:78:1b:5e:91:f8:df:0e:d2:ab:6f:
97:da:ce:27:fb:f6:96:78:b7:60:43:4c:8e:cf:cc:
59:60:67:a9:fe:96:48:8e:32:c6:7d:79:0f:0b:8c:
83:8c:c3:d4:45:24:50:c2:31:50:91:80:1c:8d:b0:
eb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:68:71:8E:B1:8E:C1:19:5A:17:C4:CB:4E:3F:94:AE:B8:B2:F6:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/128BF7F8E00D11F08364B5A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.154.0-154.82.157.255
Signature Algorithm: sha256WithRSAEncryption
a8:11:64:f6:55:98:98:0a:8d:a1:3f:8f:d6:67:54:02:c7:48:
4b:23:79:65:b8:78:77:58:95:45:19:b3:db:aa:a8:66:57:15:
72:26:c0:78:29:f3:d6:07:a8:25:4f:ab:18:a1:2a:a5:4c:b5:
dc:24:0f:7f:f4:0e:b6:84:7f:7e:7e:af:05:4c:0b:cb:8e:42:
c9:c7:f5:b8:cb:4b:f6:fe:3b:d4:de:a8:3b:96:f8:07:a2:d6:
0a:50:88:ea:a6:22:4e:1e:11:e0:b0:13:b7:c9:b1:99:ae:9a:
02:70:56:61:46:fd:18:3c:d8:7a:a7:02:bd:83:2b:e1:dc:c5:
20:89:a5:7b:d0:21:93:f1:ba:b9:81:89:62:69:1f:33:4e:90:
59:6d:d9:85:b7:e3:9f:3d:0e:68:df:ab:a4:9d:01:f5:d6:59:
49:7b:dc:1d:78:81:dc:2f:20:f8:c6:6c:0d:c9:8b:67:0e:09:
41:00:bb:1c:df:41:d9:6e:76:8a:cd:b6:36:36:04:14:c5:2b:
ba:a3:a9:f0:76:42:9c:79:5f:43:50:48:fc:85:7d:a1:fe:4f:
21:7f:dd:2c:f3:fd:9b:fe:71:21:44:ac:e9:88:dc:04:52:be:
3d:1e:70:39:cc:23:78:14:69:07:f5:23:7f:bd:8a:6c:d0:e2:
0a:a3:35:d7
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAbBPMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjIzMTQzODM1WhcNMjYwMTI4MTQzODM1WjAYMRYw
FAYDVQQDEw02OTRhYTk3MC0wYjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2qduIChnKiCRe2QenfzkbvkFQ5Ouu+0P7BM7/i3Uvdpa9aDFfeIle4bu
nsLCNnOz8wD4Rlx1EijQKDPrBnyNb1IHhD9/76u7l1yjW7aC0P0ME/ExFDNgKGG3
0UQqx6X8YnP/qrCtfWJlCSY1hxju0W/mV13ikOKZPyxeoD+U2HIhm5mV97gfj6Cq
Lnpi04woizuFMps5NfZDHkClP+h7W9U8R6sfldfYqKraWi/WUeSYUeOKHjH/iau0
3Ex30EmKz+0nWDEVXHgbXpH43w7Sq2+X2s4n+/aWeLdgQ0yOz8xZYGep/pZIjjLG
fXkPC4yDjMPURSRQwjFQkYAcjbDrsQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFDBo
cY6xjsEZWhfEy04/lK64svaqMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMjhCRjdGOEUwMEQxMUYwODM2NEI1QTNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGaUpoDBAGaUpwwDQYJ
KoZIhvcNAQELBQADggEBAKgRZPZVmJgKjaE/j9ZnVALHSEsjeWW4eHdYlUUZs9uq
qGZXFXImwHgp89YHqCVPqxihKqVMtdwkD3/0DraEf35+rwVMC8uOQsnH9bjLS/b+
O9TeqDuW+Aei1gpQiOqmIk4eEeCwE7fJsZmumgJwVmFG/Rg82HqnAr2DK+HcxSCJ
pXvQIZPxurmBiWJpHzNOkFlt2YW34589Dmjfq6SdAfXWWUl73B14gdwvIPjGbA3J
i2cOCUEAuxzfQdludorNtjY2BBTFK7qjqfB2Qpx5X0NQSPyFfaH+TyF/3Szz/Zv+
cSFErOmI3ARSvj0ecDnMI3gUaQf1I3+9imzQ4gqjNdc=
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:04 2026 by rpki-client