This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4DE7B3EF94311F0BB6C07A3DAE4EC9C.roa
File: C4DE7B3EF94311F0BB6C07A3DAE4EC9C.roa (raw, json)
Hash identifier: EZh2UAfa4I3g9HWV3E0NC2yM1DMNsesoO8Wz2b5qmfY=
Subject key identifier: FA:F8:7C:12:4B:94:B5:B1:60:78:43:E3:B1:A2:25:FB:B0:D9:6A:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B648
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4DE7B3EF94311F0BB6C07A3DAE4EC9C.roa
Signing time: Sat 24 Jan 2026 16:43:11 +0000
ROA not before: Sat 24 Jan 2026 16:43:07 +0000
ROA not after: Mon 02 Mar 2026 16:43:07 +0000
asID: 328608
IP address blocks: 154.91.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112200 (0x1b648)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 16:43:07 2026 GMT
Not After : Mar 2 16:43:07 2026 GMT
Subject: CN=6974f69f-a673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:79:12:62:ca:32:37:a8:c5:1d:00:e9:4d:21:
03:cb:4e:ba:b9:f4:3c:27:63:a1:70:d2:3d:5a:37:
ee:a4:81:53:4a:22:ee:14:7e:4b:32:6b:3b:90:0b:
36:cb:12:c8:a7:bd:b3:93:6f:60:06:ae:79:33:9c:
f1:66:dd:42:a7:b3:39:4b:b0:0c:4e:6e:ed:9d:41:
28:dd:94:b4:4e:81:c5:e3:bd:2b:6c:66:ff:ba:a5:
cb:9f:95:3a:85:1c:3a:5a:5c:b7:de:d4:b2:5e:dd:
7e:2d:aa:c0:ef:b0:23:b7:12:b6:45:f5:cc:f3:f8:
49:5a:26:b1:4d:f6:b5:5e:b9:b7:17:4c:28:54:2c:
a1:4d:b0:f1:61:8b:4f:08:fd:be:84:db:96:57:72:
f3:eb:e5:07:8d:e8:58:89:58:92:37:fb:b7:10:aa:
40:8e:a0:1e:fb:57:ce:60:a4:89:61:93:47:01:19:
03:b4:d5:36:e9:07:8a:c0:b3:1f:4b:f5:de:6d:13:
aa:a2:fa:25:ba:ec:c5:42:55:d6:38:e6:f2:b1:a9:
cf:27:be:80:bd:a9:e2:5e:1c:53:48:6b:59:14:af:
c4:ca:48:16:05:c0:68:43:62:11:df:73:4d:f1:c9:
df:31:81:6c:47:fe:fe:f2:9e:d9:44:5c:77:d1:35:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:7C:12:4B:94:B5:B1:60:78:43:E3:B1:A2:25:FB:B0:D9:6A:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C4DE7B3EF94311F0BB6C07A3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.37.0/24
Signature Algorithm: sha256WithRSAEncryption
28:00:88:0c:99:31:72:7a:44:03:b7:ae:22:c4:06:6b:0f:38:
d9:3b:2f:c6:25:4e:e6:5e:af:60:63:9e:b2:ce:c0:db:e9:d6:
56:60:bc:b8:98:4f:0b:cb:c4:dc:3a:06:62:c0:10:3c:04:ab:
32:e7:9d:4a:6f:8d:f8:6f:db:f7:6b:c8:68:8d:5f:e9:90:58:
37:af:ea:ea:1a:c6:62:fe:2d:5c:7e:54:e8:d4:bc:7c:5c:74:
48:1c:50:fb:a8:5c:81:b5:56:01:4a:1e:1a:a5:36:cf:f3:bd:
3a:df:8a:ef:6c:c7:e6:2d:61:8d:5f:16:85:c2:da:29:65:d6:
ee:de:b3:34:c4:78:2b:e4:8c:b8:04:a8:0b:55:35:12:e4:5c:
94:88:4f:57:dc:51:bb:68:33:b8:92:85:5d:e8:fe:a5:60:de:
15:af:95:6a:08:3c:0f:e9:55:80:8e:21:03:00:40:97:cf:dd:
ff:f2:c4:a5:c8:f1:b4:8d:bb:fd:69:85:e1:eb:e0:2c:46:40:
a0:b7:77:48:ec:0a:c0:d9:bd:e1:e7:80:bf:62:e2:5a:c1:b9:
cc:fa:c5:18:6a:1b:05:ed:d3:72:f3:30:39:c6:26:16:c8:05:
fa:2f:89:90:90:bb:59:79:86:68:2a:15:27:ed:f7:e8:75:b7:
d3:7e:39:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbZIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwMTI0MTY0MzA3WhcNMjYwMzAyMTY0MzA3WjAYMRYw
FAYDVQQDEw02OTc0ZjY5Zi1hNjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxHkSYsoyN6jFHQDpTSEDy066ufQ8J2OhcNI9WjfupIFTSiLuFH5LMms7
kAs2yxLIp72zk29gBq55M5zxZt1Cp7M5S7AMTm7tnUEo3ZS0ToHF470rbGb/uqXL
n5U6hRw6Wly33tSyXt1+LarA77AjtxK2RfXM8/hJWiaxTfa1Xrm3F0woVCyhTbDx
YYtPCP2+hNuWV3Lz6+UHjehYiViSN/u3EKpAjqAe+1fOYKSJYZNHARkDtNU26QeK
wLMfS/XebROqovoluuzFQlXWOObysanPJ76AvaniXhxTSGtZFK/EykgWBcBoQ2IR
33NN8cnfMYFsR/7+8p7ZRFx30TWyxwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPr4
fBJLlLWxYHhD47GiJfuw2WrgMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DNERFN0IzRUY5NDMxMUYwQkI2QzA3QTNEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlslMA0GCSqGSIb3DQEB
CwUAA4IBAQAoAIgMmTFyekQDt64ixAZrDzjZOy/GJU7mXq9gY56yzsDb6dZWYLy4
mE8Ly8TcOgZiwBA8BKsy551Kb434b9v3a8hojV/pkFg3r+rqGsZi/i1cflTo1Lx8
XHRIHFD7qFyBtVYBSh4apTbP870634rvbMfmLWGNXxaFwtopZdbu3rM0xHgr5Iy4
BKgLVTUS5FyUiE9X3FG7aDO4koVd6P6lYN4Vr5VqCDwP6VWAjiEDAECXz93/8sSl
yPG0jbv9aYXh6+AsRkCgt3dI7ArA2b3h54C/YuJawbnM+sUYahsF7dNy8zA5xiYW
yAX6L4mQkLtZeYZoKhUn7ffodbfTfjn5
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:11:59 2026 by rpki-client