This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE5FA956F69811F0B3B9CAC4DAE4EC9C.roa
File: CE5FA956F69811F0B3B9CAC4DAE4EC9C.roa (raw, json)
Hash identifier: o9XJa4S//XWF9uteBCYTlMcXYyLnRqJMFZe9DgY+P70=
Subject key identifier: 1F:EB:2E:C1:FF:6C:90:C6:67:33:9F:80:8F:4E:CD:98:F7:C7:4C:4E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B5E4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE5FA956F69811F0B3B9CAC4DAE4EC9C.roa
Signing time: Wed 21 Jan 2026 07:14:21 +0000
ROA not before: Wed 21 Jan 2026 07:14:15 +0000
ROA not after: Fri 27 Feb 2026 07:14:15 +0000
asID: 17561
IP address blocks: 154.82.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112100 (0x1b5e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 21 07:14:15 2026 GMT
Not After : Feb 27 07:14:15 2026 GMT
Subject: CN=69707ccd-0035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:63:f4:62:2c:40:92:e3:db:39:4b:16:b9:18:
36:df:06:eb:77:e8:f5:86:96:32:ba:ae:18:a3:31:
7a:ea:29:ba:ff:c0:23:51:5f:2b:4e:82:63:e5:9f:
3d:1a:17:a3:9c:06:ab:f6:82:bc:ac:54:ba:f6:79:
18:ad:2e:8b:6f:ee:18:af:cd:b0:4d:4e:74:09:16:
62:32:2f:7b:6e:66:a6:0c:cd:83:d5:58:80:f2:2d:
9c:5a:e4:8d:40:63:0e:64:e9:1a:a8:9f:d7:f1:a6:
3a:b3:19:ab:c1:8b:27:67:73:6d:9d:df:79:27:99:
81:da:bb:3c:8a:cf:e4:6f:15:16:12:b5:a5:91:cc:
e7:66:86:36:4c:04:c7:21:ab:02:51:66:b2:79:f3:
af:5b:34:3c:c4:63:98:87:f3:7b:cb:78:86:46:bf:
b3:7d:35:e3:f3:b0:6d:11:11:4a:6b:91:78:22:f6:
33:e3:e4:04:64:b2:cf:16:df:00:52:6c:1d:0b:05:
67:e6:39:d0:22:71:a7:2b:f3:a7:be:dd:60:b1:d6:
03:05:48:6d:80:35:1d:14:a1:bf:f9:c4:4d:c7:3f:
40:e1:74:6b:38:e4:76:7e:5d:e6:73:13:93:3a:5f:
58:b5:38:45:2d:f3:43:1d:fe:ad:ec:c8:83:a4:48:
49:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EB:2E:C1:FF:6C:90:C6:67:33:9F:80:8F:4E:CD:98:F7:C7:4C:4E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE5FA956F69811F0B3B9CAC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.154.0/23
Signature Algorithm: sha256WithRSAEncryption
98:49:c0:b1:14:e1:3f:7a:4e:12:d7:8a:c7:6a:0d:f0:47:68:
14:8e:99:29:d9:a4:0f:e5:20:ca:5c:f8:4b:ee:38:0d:19:fb:
94:e2:f3:76:e0:4e:37:99:19:db:ec:04:fd:cd:d5:aa:1e:7a:
29:6e:98:26:90:1b:18:06:e9:20:d2:ba:b3:6b:66:ae:2c:7b:
92:19:5b:9f:07:a2:21:9a:51:c6:08:44:7a:a1:40:36:88:3a:
ab:33:e5:be:e9:ec:b0:de:17:99:0e:35:6f:73:45:03:f9:09:
c0:d3:ea:a6:a5:4d:fe:51:4b:10:82:b3:ba:71:0c:41:81:08:
b4:dd:89:a3:bf:f1:44:9a:38:7b:83:2a:66:92:1e:aa:69:d9:
8d:5a:26:b6:de:7f:68:eb:8d:d6:3f:58:dc:eb:87:38:b4:78:
74:87:9b:4c:f1:13:04:a1:44:e4:18:1e:8e:a8:c8:d9:26:3a:
08:2d:98:dc:50:f6:5f:c4:da:be:7c:f1:22:dd:83:1d:26:71:
f6:4c:08:d3:f7:bc:36:e2:2b:bf:a8:8b:12:a1:9b:3a:fe:5b:
cf:9b:e0:e8:b7:de:d2:27:d3:f9:19:c8:41:97:d1:e7:76:b2:
b2:dd:bc:cc:b4:b1:38:8b:ed:78:fe:eb:da:e3:5d:6f:b6:36:
ae:67:c4:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:49 2026 by rpki-client