This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/667567B8F5DA11F0B293E6AFDAE4EC9C.roa
File: 667567B8F5DA11F0B293E6AFDAE4EC9C.roa (raw, json)
Hash identifier: 2OOipCgT0go5r4o+Z0zvRnRkzcmcMgxaOqjQN7yXIpg=
Subject key identifier: E9:7E:CB:5F:C4:DB:53:0C:E9:5E:98:9C:58:08:E0:D8:77:B6:FB:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B596
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/667567B8F5DA11F0B293E6AFDAE4EC9C.roa
Signing time: Tue 20 Jan 2026 08:31:22 +0000
ROA not before: Tue 20 Jan 2026 08:31:16 +0000
ROA not after: Thu 26 Feb 2026 08:31:16 +0000
asID: 6079
IP address blocks: 154.90.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112022 (0x1b596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 20 08:31:16 2026 GMT
Not After : Feb 26 08:31:16 2026 GMT
Subject: CN=696f3d5a-ab01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:d4:85:4a:70:66:2d:97:48:8f:0c:26:c4:
9c:3a:8c:70:9d:e7:ab:0b:29:8f:3f:89:b1:84:ea:
16:03:d6:d6:fb:ed:b7:a0:cf:8b:fc:6f:5d:26:65:
8c:44:7e:c5:d5:56:53:c2:7c:72:a4:5c:83:b1:dd:
a1:6e:97:c4:95:8b:97:64:03:68:0c:3f:5a:d1:0e:
21:97:f2:d2:28:2e:d3:02:50:f5:e3:be:9c:e7:ef:
38:86:82:05:c2:01:42:f0:29:0f:05:69:2b:f2:95:
ba:f7:0e:55:60:ca:ba:09:06:aa:ed:55:aa:f8:53:
9a:03:51:85:71:9b:71:3e:c6:61:51:04:13:91:0d:
ed:87:0b:44:c8:7c:58:00:ad:15:4a:de:c6:09:cd:
0c:49:42:e6:ff:38:4e:24:9f:16:fe:44:30:64:45:
96:bf:68:e3:58:76:b6:5c:5e:41:9c:cd:66:5d:45:
05:48:4b:d4:74:42:03:8f:07:99:fe:77:0a:7d:d9:
75:e7:fe:06:41:d8:c2:f6:c9:76:d8:ec:92:4b:a0:
2e:0b:83:3a:4a:5e:6a:93:55:cf:2b:0c:f9:97:69:
47:cb:6c:a6:1d:6a:6a:03:2b:9c:c0:d7:54:e0:d9:
a0:91:22:ad:df:00:60:20:41:59:47:58:8c:90:c8:
9d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7E:CB:5F:C4:DB:53:0C:E9:5E:98:9C:58:08:E0:D8:77:B6:FB:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/667567B8F5DA11F0B293E6AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.190.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:25:00:43:23:07:ef:9a:6f:b6:03:c4:93:5c:92:8b:78:9b:
ac:f0:63:5b:79:91:f7:09:8d:29:90:77:52:9a:a6:df:0d:fd:
89:89:7f:f4:e1:94:6c:18:98:2c:23:85:24:e6:fc:14:e9:6e:
62:54:df:0e:4d:19:02:d2:63:32:28:cd:5d:71:49:71:5c:ba:
22:3a:93:e9:cb:53:30:27:98:f5:59:9a:f9:5b:1b:50:61:ea:
00:18:8d:6e:3d:61:0e:22:e0:a6:42:eb:f4:65:7d:22:dd:ef:
f5:85:4a:8e:89:cd:9a:7a:e9:79:6e:91:ab:d8:e5:1e:67:0d:
81:e0:cf:70:2a:34:89:a9:0c:ef:b9:6f:30:e2:b6:1f:dc:9f:
7a:35:54:38:d6:11:e8:54:20:74:80:61:91:23:ea:e9:fb:cf:
74:89:eb:96:d6:10:19:4c:f3:ab:10:bc:e7:90:33:50:6b:6b:
76:bd:e8:eb:26:bf:e9:d2:cd:67:87:ee:9c:fe:7e:b7:02:ec:
83:1e:b5:1b:fd:03:de:0c:0a:08:0b:4f:59:7e:79:7e:0e:1f:
e0:e9:53:5f:86:7d:76:50:45:34:6c:6c:36:f5:84:8e:34:4f:
d6:34:3c:9a:e9:d7:cf:f5:35:36:4e:14:24:17:be:86:46:ab:
8a:db:6b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:40 2026 by rpki-client