This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFF75DB8F12B11F09A22088BDAE4EC9C.roa
File: BFF75DB8F12B11F09A22088BDAE4EC9C.roa (raw, json)
Hash identifier: WMMPLm4P7h0fK4Pj9vPJn0FCAUFXhCutuADCeJzr1ys=
Subject key identifier: D0:7B:9B:D5:33:15:7C:AE:18:BD:D5:62:3B:7B:21:35:2E:7A:8E:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B49D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFF75DB8F12B11F09A22088BDAE4EC9C.roa
Signing time: Wed 14 Jan 2026 09:31:06 +0000
ROA not before: Wed 14 Jan 2026 09:31:01 +0000
ROA not after: Fri 27 Feb 2026 09:31:01 +0000
asID: 142032
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111773 (0x1b49d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 14 09:31:01 2026 GMT
Not After : Feb 27 09:31:01 2026 GMT
Subject: CN=6967625a-91a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b8:51:d6:61:47:9b:dc:c6:75:ee:31:47:fb:
6b:99:eb:ac:48:5c:f6:07:08:44:18:1c:9a:45:9b:
69:1b:c3:b4:56:e4:73:c2:07:8f:f1:98:46:f7:65:
7a:5d:6f:2c:97:88:13:68:de:bf:3c:d4:d1:7c:e8:
9d:b0:78:5e:87:a2:c3:5f:00:e0:ee:8c:34:02:73:
24:56:eb:52:28:58:c2:d7:08:7b:23:a0:42:4d:c5:
03:49:5a:2d:94:d9:a2:a3:6f:2b:61:ca:88:20:f7:
de:da:87:13:eb:80:87:ee:e6:e7:dd:78:f3:c8:e4:
b5:12:3d:36:65:eb:4a:7d:4c:e6:f8:4e:7d:0f:8d:
e4:8d:10:db:6b:30:d4:f1:53:84:87:87:94:f7:e2:
14:e1:b0:1c:d2:19:e9:54:4d:6d:40:40:34:0c:ac:
9c:09:41:e0:0e:17:d5:02:e4:23:b0:13:3e:5e:08:
80:66:39:82:11:11:1b:bb:0c:e2:b9:ab:b6:ca:cc:
fd:56:10:08:9c:f5:f4:04:5f:d1:40:99:6f:3f:60:
c3:2f:28:76:69:88:11:6a:75:71:34:13:f2:d3:84:
47:82:f8:35:6b:e2:f6:5e:88:04:17:da:16:c3:13:
ee:d7:d6:ad:2d:b6:37:b7:64:09:fd:91:c8:9c:cd:
0c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7B:9B:D5:33:15:7C:AE:18:BD:D5:62:3B:7B:21:35:2E:7A:8E:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BFF75DB8F12B11F09A22088BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
6f:46:ef:14:3d:1d:e4:14:8a:0f:d9:1c:47:fb:80:b7:0f:f9:
a7:53:cc:4e:e9:3d:c2:d5:95:e1:3c:fc:f3:13:0f:84:53:ab:
9b:27:ac:5b:0e:58:1e:a8:9a:bc:b0:68:96:76:55:47:df:be:
f4:31:ed:81:43:dd:cd:49:eb:90:71:78:03:c7:8f:09:ed:18:
36:f2:1b:64:b1:fd:c8:5e:50:60:14:75:ce:ca:a3:60:54:ff:
ad:1a:86:a6:e3:07:b6:48:62:39:b1:dd:ea:6a:5b:47:c9:27:
b1:49:5d:fe:5f:fe:b8:9f:f5:b0:1c:53:00:10:68:11:36:01:
98:64:c6:6f:31:c9:fe:5b:de:1e:57:b3:a9:f3:31:e8:0b:73:
cc:d7:cc:52:ce:cf:3e:1c:1d:31:99:53:ae:99:cb:7c:23:5e:
87:3a:61:c5:5e:ea:50:18:8b:fb:d9:d9:61:5b:2f:72:5e:d6:
f4:9f:5c:b6:db:62:36:d4:2b:c3:81:37:ff:5c:5e:27:8b:8f:
ce:3c:aa:f7:5e:4d:62:b0:2f:65:a2:86:04:06:3c:e2:04:ca:
6d:57:51:89:35:66:c3:be:a9:2f:84:05:03:b0:af:5b:d0:c4:
8c:c5:a5:29:cd:16:ac:ae:46:b8:37:9c:e9:de:ba:71:57:48:
59:51:ee:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbSdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTE0MDkzMTAxWhcNMjYwMjI3MDkzMTAxWjAYMRYw
FAYDVQQDEw02OTY3NjI1YS05MWE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwbhR1mFHm9zGde4xR/trmeusSFz2BwhEGByaRZtpG8O0VuRzwgeP8ZhG
92V6XW8sl4gTaN6/PNTRfOidsHheh6LDXwDg7ow0AnMkVutSKFjC1wh7I6BCTcUD
SVotlNmio28rYcqIIPfe2ocT64CH7ubn3XjzyOS1Ej02ZetKfUzm+E59D43kjRDb
azDU8VOEh4eU9+IU4bAc0hnpVE1tQEA0DKycCUHgDhfVAuQjsBM+XgiAZjmCEREb
uwziuau2ysz9VhAInPX0BF/RQJlvP2DDLyh2aYgRanVxNBPy04RHgvg1a+L2XogE
F9oWwxPu19atLbY3t2QJ/ZHInM0MZQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFNB7
m9UzFXyuGL3VYjt7ITUueo4fMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CRkY3NURCOEYxMkIxMUYwOUEyMjA4OEJEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmttgMA0GCSqGSIb3DQEB
CwUAA4IBAQBvRu8UPR3kFIoP2RxH+4C3D/mnU8xO6T3C1ZXhPPzzEw+EU6ubJ6xb
DlgeqJq8sGiWdlVH3770Me2BQ93NSeuQcXgDx48J7Rg28htksf3IXlBgFHXOyqNg
VP+tGoam4we2SGI5sd3qaltHySexSV3+X/64n/WwHFMAEGgRNgGYZMZvMcn+W94e
V7Op8zHoC3PM18xSzs8+HB0xmVOumct8I16HOmHFXupQGIv72dlhWy9yXtb0n1y2
22I21CvDgTf/XF4ni4/OPKr3Xk1isC9looYEBjziBMptV1GJNWbDvqkvhAUDsK9b
0MSMxaUpzRasrka4N5zp3rpxV0hZUe4P
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:47:37 2026 by rpki-client