This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32044D64F60711F09777A8BDDAE4EC9C.roa
File: 32044D64F60711F09777A8BDDAE4EC9C.roa (raw, json)
Hash identifier: M1Lvx5Nu44TrzWVUJuW7+XIT00R2Nslqb4dSasay1bU=
Subject key identifier: 10:2A:51:8D:EA:5C:77:A8:C8:05:62:55:55:F8:41:E1:5E:6C:83:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B5D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32044D64F60711F09777A8BDDAE4EC9C.roa
Signing time: Tue 20 Jan 2026 13:52:02 +0000
ROA not before: Tue 20 Jan 2026 13:51:57 +0000
ROA not after: Tue 24 Feb 2026 13:51:57 +0000
asID: 138915
IP address blocks: 154.203.128.0/23 maxlen: 24
154.203.130.0/23 maxlen: 24
154.203.132.0/24 maxlen: 24
154.203.133.0/24 maxlen: 24
154.203.134.0/24 maxlen: 24
154.203.136.0/24 maxlen: 24
154.206.70.0/23 maxlen: 24
154.206.96.0/23 maxlen: 24
154.206.98.0/23 maxlen: 24
154.206.100.0/23 maxlen: 24
154.206.102.0/23 maxlen: 24
154.206.104.0/23 maxlen: 24
154.206.106.0/24 maxlen: 24
154.206.107.0/24 maxlen: 24
154.206.108.0/23 maxlen: 24
154.206.110.0/23 maxlen: 24
154.206.112.0/23 maxlen: 24
154.206.114.0/23 maxlen: 24
154.206.116.0/23 maxlen: 24
154.206.118.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112083 (0x1b5d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 20 13:51:57 2026 GMT
Not After : Feb 24 13:51:57 2026 GMT
Subject: CN=696f8881-d04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:54:72:73:bc:7b:b2:16:e5:4c:2d:36:73:f4:
07:85:c8:52:69:d8:76:8d:71:ca:bf:56:79:1a:7d:
ce:77:47:4d:b1:27:0f:5f:04:82:ad:04:b1:09:19:
3d:37:c0:c6:96:cd:21:4b:47:ee:84:1c:96:98:12:
7c:04:b5:0c:83:70:b3:5b:2a:89:4d:08:60:e1:be:
9e:a6:d9:7d:6b:3b:c0:ef:88:f1:6f:1c:62:67:ca:
a7:c8:91:c2:88:cd:56:cb:13:ef:05:8d:b6:55:1a:
e7:84:19:d6:1e:0e:15:db:ec:c7:db:fc:bd:e3:c2:
71:b1:0e:62:87:55:c1:f8:c8:61:77:a1:94:89:f1:
e1:f3:c6:11:e9:5a:be:8d:43:15:47:25:8b:b1:c9:
c7:c6:1e:61:ce:95:64:ac:f1:76:94:16:be:ca:79:
6a:d7:44:d4:c0:54:f5:cf:8b:b6:30:77:e3:8d:8c:
dd:b6:4d:fb:7c:60:6b:d8:7f:44:3a:3d:8f:53:29:
6a:98:bd:a9:8d:2c:4a:4e:9d:21:05:12:bb:f6:37:
e3:9d:44:27:d8:7b:b5:49:1e:d2:8f:ff:19:d8:c7:
fa:be:1e:fc:cf:ea:5a:05:1c:ba:0a:41:fd:d1:28:
9c:51:97:a1:df:86:a5:e1:c4:35:36:26:d2:f1:32:
45:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2A:51:8D:EA:5C:77:A8:C8:05:62:55:55:F8:41:E1:5E:6C:83:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/32044D64F60711F09777A8BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.128.0-154.203.134.255
154.203.136.0/24
154.206.70.0/23
154.206.96.0-154.206.119.255
Signature Algorithm: sha256WithRSAEncryption
5f:0d:60:4e:b3:e0:cc:5e:b4:ff:d8:b5:6c:cd:98:18:7c:2e:
2b:97:16:04:c7:69:69:fe:d9:fd:6f:bd:5b:ef:9b:78:f3:eb:
5b:35:fc:46:10:f0:cc:86:37:a0:1d:bd:bb:53:46:a8:8a:be:
6f:8b:03:cc:eb:e3:2e:19:03:9a:0b:54:bb:0d:cd:7f:16:0e:
6f:da:4b:27:8f:ad:7a:da:2f:3a:9a:a2:2b:94:d8:4e:5b:85:
61:58:e5:9f:57:31:99:1a:b7:62:06:a1:d6:ed:8c:ed:c7:a5:
4c:4d:54:9d:81:3e:9b:f5:02:02:a3:b4:d7:62:ce:de:14:da:
2b:0e:e2:40:71:3c:c3:9e:a8:cc:17:44:ad:d2:78:a7:5a:91:
6c:02:e7:cd:b3:e5:95:7d:3c:81:cf:2d:3e:ba:98:b3:e2:6e:
a6:bc:08:d9:93:68:2c:ad:fa:79:d5:5d:6a:0a:9e:17:67:76:
75:4f:64:aa:78:9d:7f:27:cf:4e:39:fd:2f:07:9a:a0:35:c8:
c8:08:c0:d1:43:0b:40:fe:a8:2f:48:eb:22:23:7f:7e:e3:58:
ce:12:6d:49:07:56:bf:cb:be:3b:b4:1d:c6:7b:02:34:43:8e:
83:72:be:9f:63:3e:df:21:5f:bb:18:7b:13:35:bc:b8:fa:f3:
d1:ce:a9:62
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAbXTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTIwMTM1MTU3WhcNMjYwMjI0MTM1MTU3WjAYMRYw
FAYDVQQDEw02OTZmODg4MS1kMDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoFRyc7x7shblTC02c/QHhchSadh2jXHKv1Z5Gn3Od0dNsScPXwSCrQSx
CRk9N8DGls0hS0fuhByWmBJ8BLUMg3CzWyqJTQhg4b6eptl9azvA74jxbxxiZ8qn
yJHCiM1WyxPvBY22VRrnhBnWHg4V2+zH2/y948JxsQ5ih1XB+Mhhd6GUifHh88YR
6Vq+jUMVRyWLscnHxh5hzpVkrPF2lBa+ynlq10TUwFT1z4u2MHfjjYzdtk37fGBr
2H9EOj2PUylqmL2pjSxKTp0hBRK79jfjnUQn2Hu1SR7Sj/8Z2Mf6vh78z+paBRy6
CkH90SicUZeh34al4cQ1NibS8TJFJQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFBAq
UY3qXHeoyAViVVX4QeFebIMYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zMjA0NEQ2NEY2MDcxMUYwOTc3N0E4QkREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAeay4ADBACay4YDBACa
y4gDBAGazkYwDAMEBZrOYAMEA5rOcDANBgkqhkiG9w0BAQsFAAOCAQEAXw1gTrPg
zF60/9i1bM2YGHwuK5cWBMdpaf7Z/W+9W++bePPrWzX8RhDwzIY3oB29u1NGqIq+
b4sDzOvjLhkDmgtUuw3NfxYOb9pLJ4+tetovOpqiK5TYTluFYVjln1cxmRq3Ygah
1u2M7celTE1UnYE+m/UCAqO012LO3hTaKw7iQHE8w56ozBdErdJ4p1qRbALnzbPl
lX08gc8tPrqYs+JuprwI2ZNoLK36edVdagqeF2d2dU9kqnidfyfPTjn9LweaoDXI
yAjA0UMLQP6oL0jrIiN/fuNYzhJtSQdWv8u+O7QdxnsCNEOOg3K+n2M+3yFfuxh7
EzW8uPrz0c6pYg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:41:09 2026 by rpki-client