This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2FF3A2EE65211F0BC87CDC4DAE4EC9C.roa
File: B2FF3A2EE65211F0BC87CDC4DAE4EC9C.roa (raw, json)
Hash identifier: +J1KJlYrZ713WZeuoI+yZmylaI9V+MbKQPjd7USHvoI=
Subject key identifier: 3C:A9:29:65:29:67:BB:14:37:4E:37:21:9A:A3:32:0E:A4:62:B6:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B215
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2FF3A2EE65211F0BC87CDC4DAE4EC9C.roa
Signing time: Wed 31 Dec 2025 14:12:12 +0000
ROA not before: Wed 31 Dec 2025 14:12:05 +0000
ROA not after: Wed 04 Feb 2026 14:12:05 +0000
asID: 394432
IP address blocks: 154.90.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111125 (0x1b215)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 31 14:12:05 2025 GMT
Not After : Feb 4 14:12:05 2026 GMT
Subject: CN=69552f3c-9cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c2:70:19:6d:e9:d8:b1:39:6a:89:f4:c4:8f:
52:84:9c:14:b1:2a:de:bb:f1:84:b7:5b:35:c9:02:
0d:9d:32:48:48:dd:27:f5:3d:49:b2:d0:8f:b9:f7:
81:a2:b2:fd:bd:a6:76:fd:d0:35:25:82:dc:42:d1:
14:ca:2d:8d:71:38:42:ad:6e:49:d0:19:de:db:62:
47:ae:7f:61:ec:7f:12:92:60:5b:eb:3b:69:8c:7b:
4e:81:cf:40:ee:9d:3a:92:14:e6:78:c5:56:b3:2f:
71:79:12:7e:37:fd:39:7c:92:de:35:94:b6:0b:cb:
08:a8:8f:45:84:f1:89:0c:e3:6d:fd:ce:4e:82:49:
a7:f5:03:15:9c:8e:2c:30:d3:27:a9:65:4a:39:a2:
69:77:88:19:4f:35:97:ed:07:26:60:02:f0:ab:bb:
32:df:19:54:ab:7a:7e:85:98:23:23:e4:81:b3:30:
a0:cc:02:e7:b0:9a:f5:19:b6:46:9d:c9:42:f9:99:
e4:2c:38:6e:26:37:0d:96:f8:fd:10:5f:fe:93:0d:
bc:4a:3e:5d:87:84:38:8e:22:e0:05:49:d0:d7:79:
7a:32:d8:ff:46:bd:89:a5:84:72:dd:89:53:a7:da:
46:b1:32:8c:46:98:60:e5:04:d6:a6:43:d2:0c:1e:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A9:29:65:29:67:BB:14:37:4E:37:21:9A:A3:32:0E:A4:62:B6:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B2FF3A2EE65211F0BC87CDC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.224.0/19
Signature Algorithm: sha256WithRSAEncryption
7f:57:a4:56:05:62:67:31:2e:66:ef:18:15:a9:80:f0:35:a2:
29:b3:49:0d:e5:08:64:ac:39:37:19:89:4c:d7:27:71:dc:13:
60:6b:dc:07:fa:eb:a6:a1:0f:10:40:a3:52:df:a5:0a:74:46:
ce:4f:6c:96:6a:7a:32:d0:35:93:6e:83:b9:58:c0:92:1c:d2:
e2:6b:86:1b:9c:86:f0:2b:39:2b:15:23:48:90:27:0b:1f:ff:
ec:46:fa:eb:ac:1c:70:69:d9:2c:52:d3:77:7c:33:31:d8:88:
ed:41:3d:0e:85:e1:66:ca:3f:f7:22:fe:ec:98:3f:15:4f:b9:
b9:63:51:9f:22:58:43:fd:70:74:58:a5:64:08:bd:5e:1b:73:
9c:23:8c:fe:36:96:34:d6:d8:95:e3:77:21:f0:fd:be:95:7e:
f7:a2:c6:72:a1:88:2a:f8:3b:e1:9d:24:51:1e:86:ba:71:26:
6a:ef:a5:ca:5b:67:55:36:d5:16:74:53:fc:2b:5b:ec:51:d3:
77:3f:62:c2:3d:ec:78:56:24:50:78:bc:47:7d:3b:b8:0c:58:
7f:fd:87:fd:4f:f6:9e:8c:73:23:60:80:05:f9:09:43:c5:58:
56:b6:fd:f7:46:53:98:3f:73:d1:5a:94:6b:fd:38:16:83:f0:
20:70:f0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:01:38 2026 by rpki-client