This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC1645DEE49211F094A9E085DAE4EC9C.roa
File: AC1645DEE49211F094A9E085DAE4EC9C.roa (raw, json)
Hash identifier: +PBs99v5lUZwwCiIl2FQeH4XHOfhP/6CYKmu5qhBEwE=
Subject key identifier: 41:57:BF:EB:65:2B:5B:19:84:04:B0:58:7D:C6:F0:03:78:FC:E5:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B18E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC1645DEE49211F094A9E085DAE4EC9C.roa
Signing time: Mon 29 Dec 2025 08:45:06 +0000
ROA not before: Mon 29 Dec 2025 08:45:00 +0000
ROA not after: Thu 05 Feb 2026 08:45:00 +0000
asID: 271956
IP address blocks: 154.88.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110990 (0x1b18e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 29 08:45:00 2025 GMT
Not After : Feb 5 08:45:00 2026 GMT
Subject: CN=69523f91-453c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:dd:a8:03:44:f4:aa:74:54:2d:7c:bb:aa:
1c:8a:b2:91:f6:99:93:9b:f9:e4:8c:c9:c1:95:a6:
0e:1e:c2:1f:f1:f0:a1:40:d4:27:42:4a:19:98:fe:
2a:b2:4f:0f:74:7a:31:da:ab:b4:54:49:fc:ad:3f:
d3:0a:9e:82:d1:19:1f:f2:4c:9e:3e:f0:32:10:9e:
da:66:fb:b3:86:38:79:1a:df:6d:a5:1b:0e:60:8f:
19:9d:da:04:6d:36:90:74:48:f8:f3:72:d2:15:c2:
58:52:c2:44:36:2e:6c:16:33:ca:e2:fd:73:52:21:
19:7e:6a:22:14:8a:fb:cb:e9:4c:10:22:90:00:ee:
8a:73:e1:24:57:7e:9c:10:22:d2:27:32:e6:18:44:
ea:1d:cb:83:3f:b7:46:b5:ea:73:c0:72:f7:95:af:
3c:84:be:2b:33:ad:7a:95:f2:1a:06:9e:3d:dd:8c:
59:30:55:85:be:79:b8:47:b5:ac:17:bf:74:12:ef:
9a:2c:8c:72:fa:4c:da:fe:c8:5e:6f:1b:56:0d:5e:
4f:1c:6c:74:fd:3b:33:59:43:77:bd:ad:74:69:06:
4e:74:9d:df:e1:5d:17:90:d8:5b:e9:9d:76:e9:96:
38:0f:6a:08:1f:01:e4:58:37:f5:66:91:25:6f:b7:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:57:BF:EB:65:2B:5B:19:84:04:B0:58:7D:C6:F0:03:78:FC:E5:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC1645DEE49211F094A9E085DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.190.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:82:e4:9a:13:4b:72:44:58:bf:2a:d0:17:dc:37:f8:a6:24:
87:f0:3a:00:b2:cb:80:f2:ad:e6:9b:78:0e:e6:3a:d9:24:14:
d4:a3:0a:1c:26:cf:91:09:4f:64:17:21:73:90:58:bf:91:28:
ba:71:b1:4a:11:2d:b8:ed:83:54:97:22:06:58:e1:05:81:b0:
5e:74:65:04:62:d7:80:e6:1f:65:d2:9f:cb:d2:f3:86:ac:5b:
12:9d:8f:5e:69:de:75:0e:7d:33:ce:55:23:95:50:7e:cc:72:
a7:76:05:37:09:b7:a6:5f:7e:1c:9d:00:9e:be:e9:83:97:86:
9a:3f:d0:1b:b9:25:be:10:ab:83:f9:f5:7a:c9:93:ca:ad:66:
09:44:e9:ae:3e:2e:4b:0d:eb:29:b7:94:cd:e8:2a:df:0b:9f:
a9:14:93:ba:07:70:ef:f3:13:8c:6c:32:21:5e:d7:41:5f:a2:
5b:43:b5:b3:f9:9d:77:fd:6d:c0:8b:2a:a4:80:fa:15:76:ac:
28:e0:48:78:1e:46:14:14:e3:57:b4:fb:f4:98:65:15:0b:18:
ba:1d:0e:d4:41:d4:90:b0:ea:9e:6e:a7:66:e0:9f:43:f6:e1:
d6:85:96:3c:d7:a1:3f:ce:cb:fe:ae:7b:f7:41:53:c7:99:32:
78:96:a2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:32 2026 by rpki-client