This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E864FC8F93811F09AA8EFDDDAE4EC9C.roa
File: 7E864FC8F93811F09AA8EFDDDAE4EC9C.roa (raw, json)
Hash identifier: yUvkC1qmlHevOWUyijKsUqqtadSY/PG7GodJWHgyBvA=
Subject key identifier: A0:62:19:BC:3D:39:CB:88:3A:01:1B:02:1B:74:2A:F1:8C:55:53:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B628
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E864FC8F93811F09AA8EFDDDAE4EC9C.roa
Signing time: Sat 24 Jan 2026 15:22:29 +0000
ROA not before: Sat 24 Jan 2026 15:22:24 +0000
ROA not after: Sun 01 Mar 2026 15:22:24 +0000
asID: 214143
IP address blocks: 154.200.72.0/21 maxlen: 24
154.200.109.0/24 maxlen: 24
154.205.248.0/22 maxlen: 24
154.206.4.0/22 maxlen: 24
154.208.72.0/22 maxlen: 24
154.222.72.0/23 maxlen: 24
154.223.232.0/21 maxlen: 24
154.223.248.0/21 maxlen: 24
154.223.248.0/22 maxlen: 24
154.223.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112168 (0x1b628)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 15:22:24 2026 GMT
Not After : Mar 1 15:22:24 2026 GMT
Subject: CN=6974e3b5-1a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:cd:f9:fd:5e:98:d5:ce:6e:1a:c3:d1:56:
d4:cb:5f:4f:9b:55:0e:e0:32:9e:d4:cb:48:d8:bd:
ac:95:69:2c:54:9c:02:8b:46:36:b6:e1:6d:f7:39:
55:6e:8a:81:f2:bd:16:f9:d9:6a:58:1e:58:99:4e:
62:18:ea:6e:96:de:26:52:4a:e2:22:c5:3d:c0:bf:
34:80:e4:d8:2a:58:91:3e:eb:6f:0c:96:d7:44:5e:
22:04:bf:c8:c1:26:84:e3:14:0e:f1:7e:ba:e5:78:
ba:46:12:61:da:d3:8a:07:a8:0a:20:15:fc:f8:41:
11:f9:3b:7b:e8:7d:bf:0c:e6:59:c5:4a:a6:fe:9b:
8c:37:78:92:60:2c:8f:d3:40:39:49:b6:54:ae:7d:
1e:eb:a3:df:35:7c:c0:53:89:1a:f2:b2:92:3f:0c:
62:63:27:b4:a4:df:f8:fb:ce:05:4e:6a:f8:d8:9b:
f6:3e:ec:f9:d2:09:81:bb:41:2a:7f:82:6f:0c:75:
35:66:32:13:1c:16:0b:b1:d0:77:ee:8e:48:89:8b:
98:c6:60:11:a6:90:7d:ed:6e:64:a7:d0:08:31:8f:
fc:8a:20:47:ac:06:65:25:7b:e7:a1:19:7f:e5:c1:
3b:5b:9e:66:f3:cd:e4:ab:64:39:03:00:6e:8f:b8:
19:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:62:19:BC:3D:39:CB:88:3A:01:1B:02:1B:74:2A:F1:8C:55:53:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7E864FC8F93811F09AA8EFDDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.72.0/21
154.200.109.0/24
154.205.248.0/22
154.206.4.0/22
154.208.72.0/22
154.222.72.0/23
154.223.232.0/21
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:36:9f:82:d2:33:a5:c7:ff:98:29:8c:df:47:87:22:04:ca:
84:d4:42:81:0e:41:64:84:4d:58:df:4b:f6:c0:ed:7e:bc:35:
ea:00:16:66:2e:99:92:e9:96:8c:eb:20:84:05:ce:8d:28:0f:
f6:09:f1:47:8b:17:e6:d7:a5:19:b4:7d:1d:62:a5:a0:aa:49:
50:04:cb:98:4a:a6:78:55:c7:ec:68:88:f7:af:ef:d9:27:d1:
ce:f9:b0:8f:db:44:dd:a8:f4:80:25:82:6f:b0:3f:31:77:45:
36:0d:86:ac:0a:f2:62:20:a2:65:f9:54:e9:88:b3:7f:66:fe:
e9:24:47:3f:ae:7c:62:f8:d7:0f:ce:5f:e3:7e:a5:72:45:b5:
d5:d9:24:05:ca:db:89:b7:bc:9c:31:f7:36:76:92:23:d9:1a:
b8:64:97:aa:8e:95:04:50:2a:a7:0c:5f:f5:f6:ac:fb:96:6a:
52:85:99:9d:29:0c:57:9a:2f:fe:e8:58:13:c2:cb:fd:be:98:
1e:4c:f5:cc:24:0c:c2:5d:61:b8:43:f9:59:1c:ef:4e:09:52:
17:21:81:b9:67:57:1f:5f:65:61:cc:de:dd:7c:a7:d5:a3:0a:
1f:2d:c7:f2:96:5b:34:54:31:ef:94:af:5c:22:a5:5c:29:6a:
4c:0c:8a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:20:48 2026 by rpki-client