This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1A697BCF9A211F0939DF2F4DAE4EC9C.roa
File: C1A697BCF9A211F0939DF2F4DAE4EC9C.roa (raw, json)
Hash identifier: QUxV/pu5q5P2c4Tin0AnRMxDXWAJjqLdX0Gnt0toQJ0=
Subject key identifier: 7A:56:49:48:26:B6:32:A9:C6:E6:C6:2B:DA:5D:0F:6C:97:DB:A7:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B6BD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1A697BCF9A211F0939DF2F4DAE4EC9C.roa
Signing time: Sun 25 Jan 2026 04:03:08 +0000
ROA not before: Sun 25 Jan 2026 04:03:03 +0000
ROA not after: Wed 04 Mar 2026 04:03:03 +0000
asID: 44559
IP address blocks: 154.203.224.0/24 maxlen: 24
154.203.230.0/24 maxlen: 24
154.203.231.0/24 maxlen: 24
154.205.234.0/24 maxlen: 24
154.205.235.0/24 maxlen: 24
154.205.236.0/24 maxlen: 24
154.205.237.0/24 maxlen: 24
154.205.238.0/24 maxlen: 24
154.205.239.0/24 maxlen: 24
154.205.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112317 (0x1b6bd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 25 04:03:03 2026 GMT
Not After : Mar 4 04:03:03 2026 GMT
Subject: CN=697595fc-fe20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:99:eb:f4:17:73:1a:1b:b2:1d:b9:00:15:
81:47:a1:8f:30:79:aa:b6:c8:46:a2:d7:d2:06:52:
2b:e4:da:12:7f:d7:bf:14:22:30:9f:f8:9d:3e:2a:
77:87:a5:1f:33:e5:31:29:4f:72:13:c7:56:a9:c5:
c9:88:6d:ac:1c:e1:21:1e:47:86:c0:61:d2:37:c5:
2b:f7:d1:ab:0f:b1:31:28:f7:cd:a4:f8:2f:75:b3:
03:57:51:50:b0:88:5b:eb:34:78:73:55:e8:bc:1c:
61:7b:98:ab:e7:d5:08:84:6d:a1:87:09:54:c4:39:
10:30:54:df:3f:e3:1c:51:4d:5a:aa:66:17:a7:b5:
d4:51:cf:0a:26:bd:a8:44:2a:88:08:c1:f8:90:8d:
32:40:06:8f:5c:0f:de:56:a0:cc:a1:72:62:9f:11:
7a:e2:79:8c:21:dd:8b:33:5a:a6:66:ba:78:a9:47:
f5:f7:df:07:50:ab:f5:de:97:fd:ee:33:3e:f8:35:
0a:9f:0d:ab:82:a8:d0:8a:a0:c2:9c:4a:39:88:51:
71:0f:ed:66:48:2f:77:31:65:52:5b:c9:4c:d1:0a:
28:86:0c:49:56:a6:65:61:62:40:71:73:64:97:be:
5f:2d:61:50:af:6b:f7:e4:7b:1b:e7:ca:fc:c0:57:
fd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:56:49:48:26:B6:32:A9:C6:E6:C6:2B:DA:5D:0F:6C:97:DB:A7:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1A697BCF9A211F0939DF2F4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.224.0/24
154.203.230.0/23
154.205.234.0-154.205.240.255
Signature Algorithm: sha256WithRSAEncryption
ae:53:5d:d0:5f:01:2a:ce:3f:e7:d5:49:a6:4c:19:44:e6:62:
70:0d:76:fe:02:df:e9:c2:15:ff:46:01:cf:24:0e:07:c5:a7:
2e:2b:df:f4:b3:ce:1d:a9:d3:63:a6:5c:e6:3f:58:03:d5:a1:
27:3d:bb:3f:67:58:86:72:9c:dc:7f:1f:56:89:8c:e1:b6:ec:
c2:e5:36:13:09:30:04:67:e6:9b:d4:4a:f8:1d:69:37:b5:26:
84:ec:f1:a4:84:f0:6e:de:d6:11:29:04:97:90:5b:2d:81:da:
f2:d4:dd:5e:06:4c:98:f5:81:4d:32:29:18:21:c5:e8:49:71:
e8:f1:00:64:f9:a8:53:d0:af:6c:c0:aa:31:68:ad:10:0a:fd:
0e:70:37:31:14:e5:85:75:be:c5:9a:4d:cd:80:34:a1:8a:40:
70:41:e1:7f:f3:3d:8b:80:c2:7d:c5:2b:f1:c7:49:04:c7:88:
fd:9e:51:4b:b5:6f:44:b2:27:f0:15:59:ed:da:23:f6:ea:09:
97:1c:28:41:ff:36:7f:b3:5e:ec:ce:f7:f1:cb:71:64:dc:82:
57:75:86:aa:c2:04:e5:fc:09:e1:13:4d:c2:e6:17:86:10:a7:
bd:70:94:8c:55:80:8b:69:b5:33:59:77:d3:5d:a9:6b:bf:63:
bf:f4:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:19:42 2026 by rpki-client