This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/499E9E3EE96911F0B016BEC8DAE4EC9C.roa
File: 499E9E3EE96911F0B016BEC8DAE4EC9C.roa (raw, json)
Hash identifier: WDGGZ1dqyBCrsZZz3kASrniw7uBOM3H4655h/Q7qhNw=
Subject key identifier: 6E:EF:AC:90:60:49:B1:1B:50:3F:15:DB:1D:6A:FE:6F:B2:42:85:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B304
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/499E9E3EE96911F0B016BEC8DAE4EC9C.roa
Signing time: Sun 04 Jan 2026 12:31:27 +0000
ROA not before: Sun 04 Jan 2026 12:31:20 +0000
ROA not after: Tue 10 Feb 2026 12:31:20 +0000
asID: 142032
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111364 (0x1b304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 4 12:31:20 2026 GMT
Not After : Feb 10 12:31:20 2026 GMT
Subject: CN=695a5d9f-c2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:7c:f3:f2:38:05:17:67:f3:fd:9c:d9:05:
fb:42:a7:79:ab:33:a6:a1:9f:78:91:fb:50:f1:0f:
9f:7a:e2:05:2a:6b:72:5c:57:a9:92:98:ae:56:a7:
7c:99:f4:3d:f9:55:75:8f:2d:54:59:00:bb:79:7b:
d5:f2:cb:b7:7c:03:66:f2:db:f3:1d:02:ac:6d:6e:
47:c3:fb:77:34:c4:b0:33:a5:a4:44:b8:6f:32:e5:
06:2d:b3:29:8c:69:42:19:8e:61:ec:0b:5b:99:6e:
e2:c3:17:0b:c3:48:24:05:15:41:46:2f:d5:57:45:
fd:0b:fb:a4:50:f9:09:30:af:00:bf:8f:57:ae:bb:
59:be:a3:47:f3:ed:ca:93:c4:19:18:19:74:83:84:
ed:89:7c:f2:9c:30:29:f8:a5:a2:ee:9b:a6:ad:20:
f2:bd:dc:4c:35:bb:ef:45:9c:fc:dd:31:86:b4:ed:
20:81:29:65:d5:7b:7e:b0:31:19:54:93:9a:36:b3:
a2:a4:e2:d8:94:16:0f:6d:11:8e:a2:5a:ca:3a:c4:
c5:01:b5:b9:1a:3b:f1:7a:f7:72:4b:cd:fc:24:d8:
fc:2a:1f:e7:b2:d7:4c:17:22:91:06:12:d6:f7:e2:
d1:54:73:91:c4:23:6f:e7:7a:d1:43:66:5d:b5:3c:
9f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EF:AC:90:60:49:B1:1B:50:3F:15:DB:1D:6A:FE:6F:B2:42:85:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/499E9E3EE96911F0B016BEC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
7f:b8:00:66:db:b0:e4:ee:c1:b3:80:1b:5c:8f:7f:5c:70:31:
78:c9:19:6d:b6:19:4a:e6:0e:58:19:38:b3:3d:2b:4c:c3:99:
ff:26:37:87:4d:d7:65:4d:30:6b:4b:64:f7:d4:60:f3:d4:88:
73:36:5a:e0:50:8a:4b:f0:4e:e0:45:bf:65:a9:1e:17:ae:0b:
66:01:83:51:3e:4d:db:b0:dc:cc:b0:28:ee:b4:fd:39:92:26:
1f:50:5d:00:24:19:bd:5a:84:4e:19:59:e1:10:6d:93:d6:15:
6e:03:40:e0:58:4c:d7:f0:05:ba:12:be:97:83:d4:b0:69:4d:
57:df:95:12:0d:3c:3a:a3:f1:50:04:b7:e5:c1:a6:df:a6:42:
2c:ea:a7:82:1f:83:67:5d:82:66:e7:7f:fa:d7:6e:f1:21:e5:
48:ca:2f:4f:94:aa:db:ee:54:0a:ce:37:a4:52:2e:08:78:59:
4a:ef:b1:2a:52:d4:43:ca:9c:6a:fa:ab:b9:24:e4:13:32:28:
b1:06:f9:e9:80:df:71:30:40:d8:d2:53:c7:c7:ce:a9:72:59:
0a:5a:a1:06:d9:23:b3:07:97:ef:3d:93:cd:bb:44:38:b4:14:
3f:57:d7:5f:bf:a4:e4:f6:a7:88:0f:69:79:e6:25:72:55:b5:
d9:b3:73:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:04 2026 by rpki-client