This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A5D456AF97811F0B1F9BADEDAE4EC9C.roa
File: 2A5D456AF97811F0B1F9BADEDAE4EC9C.roa (raw, json)
Hash identifier: zOLtpcgZenRM5LkH9Yycl5PgjnPZ2doqh3fmDP2cJ4s=
Subject key identifier: D6:CE:A7:45:4C:EE:17:EF:DB:75:B7:4E:73:22:93:83:E5:43:7E:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B6A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A5D456AF97811F0B1F9BADEDAE4EC9C.roa
Signing time: Sat 24 Jan 2026 22:58:16 +0000
ROA not before: Sat 24 Jan 2026 22:58:11 +0000
ROA not after: Tue 03 Mar 2026 22:58:11 +0000
asID: 14315
IP address blocks: 154.194.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112296 (0x1b6a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 22:58:11 2026 GMT
Not After : Mar 3 22:58:11 2026 GMT
Subject: CN=69754e88-15af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bf:2d:dd:81:21:67:fb:32:78:b3:e2:61:59:
d7:b9:53:cc:26:d0:e4:3e:63:80:70:a4:7f:96:11:
33:b5:7b:be:fa:15:5d:e8:0f:fb:33:aa:bf:14:ef:
81:f4:97:15:52:c1:90:64:f0:a5:ef:c6:35:6a:ef:
da:07:17:27:3c:c4:36:5e:a3:e5:a0:ca:ca:83:01:
1f:f2:80:a4:e4:9f:77:f3:f5:e5:12:e3:06:e6:82:
3d:01:5a:39:1d:97:f5:71:9c:9e:00:e1:2e:98:ff:
9e:b4:21:a9:47:7b:60:63:76:9d:83:e3:52:b7:37:
e5:14:af:75:29:a9:c2:5d:57:d4:64:6c:25:f8:a9:
ec:11:ac:5b:45:4b:0a:66:b4:59:e5:b4:a6:0d:e8:
32:85:f8:fc:57:c4:db:d3:af:44:23:f9:b1:ce:a3:
ec:de:89:a3:b2:33:f0:11:0c:52:96:07:d7:5c:59:
17:1e:98:ca:d0:59:da:4d:ff:a8:ff:88:de:1a:58:
5a:e4:7f:a9:62:6d:e2:80:3b:41:9e:69:bd:74:84:
e6:27:6b:44:bf:f7:ee:d5:5d:c8:04:39:ed:8f:de:
ca:1a:7e:c3:c5:c8:5a:66:5a:8a:44:de:c7:bf:13:
65:43:a0:ca:98:68:3b:da:be:8d:e1:3b:21:44:d6:
84:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CE:A7:45:4C:EE:17:EF:DB:75:B7:4E:73:22:93:83:E5:43:7E:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A5D456AF97811F0B1F9BADEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.50.0/24
Signature Algorithm: sha256WithRSAEncryption
57:5f:37:d8:9f:6f:bf:4f:47:26:b1:ec:77:d2:8d:48:43:f3:
68:0a:a8:38:fd:30:fe:6b:a0:4b:70:fa:db:55:3b:45:8a:bd:
7a:b6:02:82:7d:64:bb:8a:74:c5:85:33:ea:7e:d4:f2:d0:1f:
dd:75:ba:16:81:1d:c8:f5:e6:5e:36:9b:40:bd:cb:ae:3c:36:
f6:51:95:69:61:17:9d:58:91:a7:42:5c:f0:2a:a7:2c:60:7f:
81:71:cf:26:b1:5e:c9:db:41:ea:f1:2e:89:d8:6e:a1:cb:a9:
b5:a3:b7:cc:fe:30:37:2e:e6:56:f5:73:7f:11:77:c5:b1:35:
86:6a:95:2f:9c:fd:a8:b3:12:15:de:0d:89:b6:89:33:bb:f1:
f9:da:4b:e6:a5:78:09:1b:d6:8c:89:b6:42:22:0e:23:39:17:
eb:2e:e3:59:ef:43:8b:79:9b:dc:ac:7e:cd:9a:42:d9:8c:e9:
a6:15:dd:88:ae:2b:de:61:c8:ba:89:bd:f5:1b:9c:1d:6d:1f:
07:da:46:87:af:0d:0d:fc:38:9e:3f:07:07:74:ee:01:86:02:
60:19:e6:14:9a:5d:f7:bb:48:72:3e:10:a4:3e:a9:eb:4f:e9:
1b:fc:80:a0:0e:b0:fe:e3:e1:e1:56:8c:60:ca:74:17:74:63:
e7:57:45:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbaoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTI0MjI1ODExWhcNMjYwMzAzMjI1ODExWjAYMRYw
FAYDVQQDEw02OTc1NGU4OC0xNWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvL8t3YEhZ/syeLPiYVnXuVPMJtDkPmOAcKR/lhEztXu++hVd6A/7M6q/
FO+B9JcVUsGQZPCl78Y1au/aBxcnPMQ2XqPloMrKgwEf8oCk5J938/XlEuMG5oI9
AVo5HZf1cZyeAOEumP+etCGpR3tgY3adg+NStzflFK91KanCXVfUZGwl+KnsEaxb
RUsKZrRZ5bSmDegyhfj8V8Tb069EI/mxzqPs3omjsjPwEQxSlgfXXFkXHpjK0Fna
Tf+o/4jeGlha5H+pYm3igDtBnmm9dITmJ2tEv/fu1V3IBDntj97KGn7DxchaZlqK
RN7HvxNlQ6DKmGg72r6N4TshRNaE6QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNbO
p0VM7hfv23W3TnMik4PlQ36eMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yQTVENDU2QUY5NzgxMUYwQjFGOUJBREVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIyMA0GCSqGSIb3DQEB
CwUAA4IBAQBXXzfYn2+/T0cmsex30o1IQ/NoCqg4/TD+a6BLcPrbVTtFir16tgKC
fWS7inTFhTPqftTy0B/ddboWgR3I9eZeNptAvcuuPDb2UZVpYRedWJGnQlzwKqcs
YH+Bcc8msV7J20Hq8S6J2G6hy6m1o7fM/jA3LuZW9XN/EXfFsTWGapUvnP2osxIV
3g2Jtokzu/H52kvmpXgJG9aMibZCIg4jORfrLuNZ70OLeZvcrH7NmkLZjOmmFd2I
riveYci6ib31G5wdbR8H2kaHrw0N/DiePwcHdO4BhgJgGeYUml33u0hyPhCkPqnr
T+kb/ICgDrD+4+HhVoxgynQXdGPnV0Uv
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:43:11 2026 by rpki-client