This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B355A258E56011F0B5B0FDF5DAE4EC9C.roa
File: B355A258E56011F0B5B0FDF5DAE4EC9C.roa (raw, json)
Hash identifier: ctnC6qrcKhypep08OEy3dLqSWTc695jFj+j4IkVOuBA=
Subject key identifier: 37:7E:E5:DF:DB:57:5A:4F:A1:B6:C4:6E:C1:F4:0E:53:E3:6A:34:D8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B1D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B355A258E56011F0B5B0FDF5DAE4EC9C.roa
Signing time: Tue 30 Dec 2025 09:19:54 +0000
ROA not before: Tue 30 Dec 2025 09:19:49 +0000
ROA not after: Fri 30 Jan 2026 09:19:49 +0000
asID: 395886
IP address blocks: 154.201.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111064 (0x1b1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 30 09:19:49 2025 GMT
Not After : Jan 30 09:19:49 2026 GMT
Subject: CN=6953993a-ed0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:91:fc:f6:99:f8:8b:af:26:ae:1a:64:56:
44:62:32:96:be:c9:6f:a1:06:6f:9b:6a:18:6a:45:
84:00:be:98:1b:20:92:9e:2c:f6:3d:33:22:38:56:
6e:0a:63:d4:e5:5a:74:92:61:7b:34:01:ee:8f:86:
5f:96:64:d4:54:fa:60:6e:98:b8:dc:19:34:c8:f6:
11:c3:63:5d:1a:c2:9c:6a:df:dd:d4:23:b4:90:58:
8d:90:ef:ea:85:22:e5:5f:cd:6e:30:48:c8:9b:01:
5a:c3:bb:90:a5:f2:23:0b:05:73:db:be:14:62:cf:
68:2d:9f:c8:3f:4c:7d:47:ff:73:2c:3a:fa:03:c2:
d4:86:98:5a:12:30:0f:46:bb:fb:47:c7:fb:7b:75:
c2:b5:66:2f:52:83:9f:d9:71:85:b3:c7:45:71:64:
32:9a:89:a6:ad:cf:48:44:c4:02:37:16:2a:39:c5:
e0:4c:69:7e:8e:1c:e6:ad:12:a1:25:99:24:87:bf:
ef:95:3b:8f:05:51:b0:d8:79:99:cd:19:be:47:ef:
5b:f1:d4:aa:19:ed:7a:de:0e:ce:09:3b:52:8d:e0:
99:4e:ad:0f:ba:d0:31:0c:be:cc:e8:f1:2c:4a:3f:
94:78:0c:03:4e:9d:45:1d:e1:45:c7:f1:fa:c6:4f:
a4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:7E:E5:DF:DB:57:5A:4F:A1:B6:C4:6E:C1:F4:0E:53:E3:6A:34:D8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B355A258E56011F0B5B0FDF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:54:32:29:62:0a:ea:76:21:5e:dc:c1:1c:1b:b1:34:4a:2b:
08:81:06:e9:98:2c:0f:61:21:0a:91:ff:07:40:cc:ce:db:48:
d7:7e:31:a3:9a:19:1c:b6:1a:85:fb:aa:ef:e5:51:af:d1:00:
2b:bd:92:e9:98:61:62:03:77:9d:db:d5:f4:8d:30:11:e2:0d:
78:d3:e0:dc:59:51:5b:da:bf:7c:aa:1d:94:15:f6:66:84:47:
c1:f3:5f:75:5a:be:df:d0:e0:e7:28:95:81:25:5e:e1:bb:da:
4e:8e:e5:5d:55:7c:ff:21:e7:b5:40:3f:a4:09:8b:f8:9e:3a:
b1:f2:b5:9a:dc:5e:69:ab:82:5a:5a:0a:d9:0f:dc:07:77:bc:
9d:7b:8c:72:7e:65:9b:35:27:c0:e4:02:59:55:f9:39:c3:2e:
bc:3a:c2:b5:6a:0d:8d:17:d3:e6:af:9f:66:1d:10:e1:8e:34:
c9:67:6a:13:68:60:12:b2:4c:b4:a0:df:2d:a0:8e:38:ea:63:
9e:1a:3a:76:4b:94:9e:a0:15:3c:30:94:31:00:ba:56:d4:54:
89:fc:d1:0c:d0:93:62:eb:87:0e:96:2a:67:a1:4c:b8:f1:62:
76:9e:f9:2d:bc:0c:af:04:e0:40:ed:7f:9d:e2:a4:a3:48:b5:
30:09:58:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbHYMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjMwMDkxOTQ5WhcNMjYwMTMwMDkxOTQ5WjAYMRYw
FAYDVQQDEw02OTUzOTkzYS1lZDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAmU2R/PaZ+IuvJq4aZFZEYjKWvslvoQZvm2oYakWEAL6YGyCSniz2PTMi
OFZuCmPU5Vp0kmF7NAHuj4ZflmTUVPpgbpi43Bk0yPYRw2NdGsKcat/d1CO0kFiN
kO/qhSLlX81uMEjImwFaw7uQpfIjCwVz274UYs9oLZ/IP0x9R/9zLDr6A8LUhpha
EjAPRrv7R8f7e3XCtWYvUoOf2XGFs8dFcWQymommrc9IRMQCNxYqOcXgTGl+jhzm
rRKhJZkkh7/vlTuPBVGw2HmZzRm+R+9b8dSqGe163g7OCTtSjeCZTq0PutAxDL7M
6PEsSj+UeAwDTp1FHeFFx/H6xk+kewIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDd+
5d/bV1pPobbEbsH0DlPjajTYMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CMzU1QTI1OEU1NjAxMUYwQjVCMEZERjVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmslIMA0GCSqGSIb3DQEB
CwUAA4IBAQAfVDIpYgrqdiFe3MEcG7E0SisIgQbpmCwPYSEKkf8HQMzO20jXfjGj
mhkcthqF+6rv5VGv0QArvZLpmGFiA3ed29X0jTAR4g140+DcWVFb2r98qh2UFfZm
hEfB8191Wr7f0ODnKJWBJV7hu9pOjuVdVXz/Iee1QD+kCYv4njqx8rWa3F5pq4Ja
WgrZD9wHd7yde4xyfmWbNSfA5AJZVfk5wy68OsK1ag2NF9Pmr59mHRDhjjTJZ2oT
aGASsky0oN8toI446mOeGjp2S5SeoBU8MJQxALpW1FSJ/NEM0JNi64cOlipnoUy4
8WJ2nvktvAyvBOBA7X+d4qSjSLUwCVgv
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:03:20 2026 by rpki-client