This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1EF4490F5CE11F097D5CAE6DAE4EC9C.roa
File: B1EF4490F5CE11F097D5CAE6DAE4EC9C.roa (raw, json)
Hash identifier: I7myBEWDjZmYqw0TqAEY/gfKYkoLug2IR8QqklQg488=
Subject key identifier: A6:4C:55:16:91:DC:FB:0E:C3:E9:ED:6B:1D:4A:82:2F:77:FE:09:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B56C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1EF4490F5CE11F097D5CAE6DAE4EC9C.roa
Signing time: Tue 20 Jan 2026 07:07:35 +0000
ROA not before: Tue 20 Jan 2026 07:07:28 +0000
ROA not after: Tue 24 Feb 2026 07:07:28 +0000
asID: 55320
IP address blocks: 154.205.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111980 (0x1b56c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 20 07:07:28 2026 GMT
Not After : Feb 24 07:07:28 2026 GMT
Subject: CN=696f29b7-69e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:cd:83:42:c3:c8:cc:12:cd:c2:39:e4:b9:
fd:13:bc:c4:5c:c8:cb:b5:3a:58:38:51:32:9b:d8:
32:48:59:9c:82:7d:da:bf:64:fc:8d:c9:47:20:ad:
bc:68:ab:e0:c9:79:30:8f:f7:c1:51:65:29:fe:4f:
85:ac:73:05:15:22:d1:13:19:98:d5:3d:d6:84:89:
85:9a:8a:33:79:bc:ec:c6:b2:da:d8:7b:c8:9d:96:
b4:f7:1e:70:a4:57:4e:d8:8b:8a:21:b8:46:70:45:
4d:31:18:b4:2d:6d:36:f2:6a:26:ac:2f:08:53:be:
eb:de:f7:93:48:35:4b:06:ba:07:a2:8d:c4:54:a2:
3e:7a:d8:48:00:00:41:5e:ec:ee:be:1b:ae:86:0d:
69:65:7c:03:33:3c:d3:ee:b8:fc:8b:a2:37:d5:b5:
09:01:b7:61:53:8f:b0:c6:03:96:83:c1:01:7d:43:
fd:95:1c:3f:d0:32:ff:8a:01:49:67:b6:4d:c0:55:
f2:f1:06:0e:0c:38:a9:15:3a:e7:81:25:c4:52:1f:
26:66:45:7e:2e:d4:fe:30:b5:02:66:fb:2d:8d:cb:
c4:9b:0f:a9:5f:ce:b9:b9:78:a3:48:9a:e4:76:1c:
15:81:8c:ff:7a:35:c2:61:d1:d7:a2:fc:49:09:bc:
a5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:4C:55:16:91:DC:FB:0E:C3:E9:ED:6B:1D:4A:82:2F:77:FE:09:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1EF4490F5CE11F097D5CAE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.140.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a6:27:f9:7d:44:37:f1:9e:0f:4a:75:5d:ca:28:08:f0:02:
d8:d6:1d:77:e7:06:ab:68:d5:97:76:83:d9:b3:29:4a:da:ca:
a8:c2:18:7f:e6:e9:49:50:c2:1d:f5:64:1c:d6:1e:d0:9d:3c:
c3:fa:41:40:50:fb:4d:ee:39:3f:d8:2e:33:84:85:b6:32:83:
56:25:e5:fe:c2:22:9b:3f:99:a5:3d:6a:14:09:6a:d6:8c:5d:
b9:04:85:0a:5e:41:3d:27:f2:35:22:42:7e:7a:da:70:6d:6a:
bd:5e:b2:04:d6:48:44:1e:72:d0:a3:62:40:20:12:f4:71:bb:
c0:73:46:1e:52:8d:e9:b3:09:fc:0b:e2:1d:0e:b2:1c:b2:79:
ef:20:39:0d:cb:7a:12:0a:ea:31:06:af:7a:02:86:21:0c:e4:
b5:b6:6d:41:8f:2e:cd:64:eb:51:4c:0a:ed:4e:38:e7:d5:7c:
e4:4d:cb:24:72:e1:8f:7b:cb:87:b0:db:79:b7:e7:15:f4:eb:
a7:83:42:ab:9b:93:d1:1c:c6:a4:50:e6:77:93:5a:a3:34:fc:
03:17:96:c2:e8:a9:97:f6:e4:a7:84:cc:77:4d:3a:f4:e3:ca:
aa:45:06:72:53:14:fe:aa:af:6b:91:ea:fe:67:73:7c:f6:64:
d9:56:d4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:01 2026 by rpki-client