This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85590228E97F11F0A6EA4DCFDAE4EC9C.roa
File: 85590228E97F11F0A6EA4DCFDAE4EC9C.roa (raw, json)
Hash identifier: CoCEpK4mqyp7jTsV4Xsao0s4XyAGsWrmsLsGAd/6zu0=
Subject key identifier: D2:F3:7A:2F:90:41:52:79:E3:FD:A7:87:F9:B6:2F:99:BB:AE:F8:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B322
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85590228E97F11F0A6EA4DCFDAE4EC9C.roa
Signing time: Sun 04 Jan 2026 15:10:36 +0000
ROA not before: Sun 04 Jan 2026 15:10:31 +0000
ROA not after: Thu 16 Apr 2026 15:10:31 +0000
asID: 211826
IP address blocks: 154.197.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111394 (0x1b322)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 4 15:10:31 2026 GMT
Not After : Apr 16 15:10:31 2026 GMT
Subject: CN=695a82ec-ee6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:55:9d:ba:aa:c9:df:71:f3:da:46:14:43:72:
c0:7b:d3:51:f5:cb:b0:44:d4:64:11:fc:8b:59:70:
6b:d0:a9:ac:3c:05:22:2b:82:42:54:15:be:de:c5:
9e:82:f3:4d:3b:85:1d:92:80:06:cf:8e:63:b1:3b:
80:8d:99:4c:d3:d3:c7:1a:b8:14:7f:a8:67:21:1a:
ab:b8:92:29:83:e8:e2:e3:8d:07:9d:80:f9:42:cd:
23:2a:29:62:42:a2:f3:63:13:5e:6d:56:47:4f:84:
6f:3e:ae:c8:89:45:4e:3a:ba:14:b9:52:bb:8b:77:
de:1c:9e:0c:ed:68:d0:57:23:fb:3c:47:a5:30:2e:
5f:22:fd:3c:e9:6b:70:87:17:8d:63:2a:1e:3e:24:
3f:c5:87:33:89:7d:46:13:f6:20:74:7f:7b:af:42:
d2:ae:2a:6a:1f:bb:7c:d2:ec:59:a7:90:3f:3c:14:
86:07:4b:a5:9d:ae:66:4c:a4:f3:7a:9c:9b:97:d3:
cc:9a:07:93:ef:71:0f:55:83:3d:20:83:ee:92:75:
5a:79:1e:a8:d2:bd:37:e6:33:9b:b8:70:4a:16:7b:
ad:b8:c1:a6:d6:dc:30:dc:db:e3:16:a0:6e:a3:48:
5c:2b:c0:15:fd:d2:de:b5:72:e5:a4:30:5e:84:ac:
b9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:F3:7A:2F:90:41:52:79:E3:FD:A7:87:F9:B6:2F:99:BB:AE:F8:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85590228E97F11F0A6EA4DCFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ce:ec:5d:22:1f:46:08:bb:ba:89:a7:cb:07:51:f0:76:27:
86:43:8d:f6:7a:09:bc:0c:35:78:5b:72:fb:d9:6f:31:38:ad:
0a:f7:fc:64:dc:49:57:e7:12:43:33:3f:fe:88:48:a3:8b:58:
7c:ea:fd:17:86:a8:07:34:07:80:80:38:10:49:ac:1f:87:7f:
b0:e0:5a:79:b7:ea:a7:f5:fa:a2:7e:02:bd:a1:1f:35:5d:12:
11:79:63:60:4b:0e:5e:39:ca:a9:36:db:a0:b4:db:86:81:52:
0c:aa:05:cf:57:c4:c5:50:1a:56:ef:60:84:b8:51:88:cb:1b:
62:1e:f0:44:c4:5d:9c:3e:ea:37:77:40:88:f9:71:28:af:d2:
6a:09:29:2f:cd:96:b4:49:62:d9:31:aa:0a:a2:dc:77:97:58:
cd:02:ee:ee:29:01:d3:e8:49:df:db:4a:44:e4:36:18:c3:24:
94:dc:1f:a0:ea:58:ec:19:95:74:2a:a5:3c:06:84:29:01:7f:
35:9f:22:b4:bf:f5:7a:74:a2:66:23:61:50:3b:75:92:18:48:
11:b9:ac:a7:9a:f3:72:59:a4:0c:ae:9d:f9:b9:e3:d3:1e:30:
25:b7:ea:8e:d9:f6:a6:4a:7b:13:06:68:3a:6e:aa:3d:c7:27:
ac:47:82:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbMiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTA0MTUxMDMxWhcNMjYwNDE2MTUxMDMxWjAYMRYw
FAYDVQQDEw02OTVhODJlYy1lZTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAplWduqrJ33Hz2kYUQ3LAe9NR9cuwRNRkEfyLWXBr0KmsPAUiK4JCVBW+
3sWegvNNO4UdkoAGz45jsTuAjZlM09PHGrgUf6hnIRqruJIpg+ji440HnYD5Qs0j
KiliQqLzYxNebVZHT4RvPq7IiUVOOroUuVK7i3feHJ4M7WjQVyP7PEelMC5fIv08
6WtwhxeNYyoePiQ/xYcziX1GE/YgdH97r0LSripqH7t80uxZp5A/PBSGB0ulna5m
TKTzepybl9PMmgeT73EPVYM9IIPuknVaeR6o0r035jObuHBKFnutuMGm1tww3Nvj
FqBuo0hcK8AV/dLetXLlpDBehKy5zQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNLz
ei+QQVJ54/2nh/m2L5m7rvjjMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NTU5MDIyOEU5N0YxMUYwQTZFQTREQ0ZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVbMA0GCSqGSIb3DQEB
CwUAA4IBAQAOzuxdIh9GCLu6iafLB1HwdieGQ432egm8DDV4W3L72W8xOK0K9/xk
3ElX5xJDMz/+iEiji1h86v0XhqgHNAeAgDgQSawfh3+w4Fp5t+qn9fqifgK9oR81
XRIReWNgSw5eOcqpNtugtNuGgVIMqgXPV8TFUBpW72CEuFGIyxtiHvBExF2cPuo3
d0CI+XEor9JqCSkvzZa0SWLZMaoKotx3l1jNAu7uKQHT6Enf20pE5DYYwySU3B+g
6ljsGZV0KqU8BoQpAX81nyK0v/V6dKJmI2FQO3WSGEgRuaynmvNyWaQMrp35uePT
HjAlt+qO2famSnsTBmg6bqo9xyesR4Lr
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:38 2026 by rpki-client