This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDCADAA2E96711F098E482C0DAE4EC9C.roa
File: DDCADAA2E96711F098E482C0DAE4EC9C.roa (raw, json)
Hash identifier: cZOq+6R64g9vkIpejoF7CLFIM/rEx4dYLW7KnFCOHJE=
Subject key identifier: 4A:F8:03:96:8D:07:49:CB:76:12:12:EB:B1:6F:66:AA:33:55:2E:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B302
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDCADAA2E96711F098E482C0DAE4EC9C.roa
Signing time: Sun 04 Jan 2026 12:21:16 +0000
ROA not before: Sun 04 Jan 2026 12:21:11 +0000
ROA not after: Tue 10 Feb 2026 12:21:11 +0000
asID: 401701
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111362 (0x1b302)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 4 12:21:11 2026 GMT
Not After : Feb 10 12:21:11 2026 GMT
Subject: CN=695a5b3c-bce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:db:29:73:da:79:66:35:66:ff:52:e6:9f:
45:ae:99:57:37:dc:1a:cc:fa:28:70:1f:d4:41:83:
97:48:3e:b4:1b:ac:82:b3:d1:d8:d5:22:5d:51:bf:
a8:9c:80:1d:5c:d3:ab:ba:4e:9e:fd:ee:ea:34:d4:
a1:76:f1:a1:e7:ae:bd:e7:4a:ec:fe:c9:9b:6b:6e:
5f:28:cd:1f:20:2a:cf:56:1c:c9:dc:f7:dd:f3:d0:
d2:1a:fd:d5:0f:2e:8c:9f:dd:43:88:ee:6d:d8:09:
a6:d8:99:1a:4c:bf:be:0a:1f:c6:ee:b5:f4:62:0b:
c9:58:cd:9b:4f:15:eb:88:12:0f:ca:ca:4e:66:a1:
63:8c:4d:16:48:5b:73:86:28:2a:0d:c6:53:6b:83:
80:e7:81:44:fe:86:38:91:f1:f4:e3:de:70:44:f6:
20:9a:bd:a4:19:92:37:73:2a:f3:dc:11:3f:0d:ae:
32:cb:69:5c:5e:3d:e9:8b:a8:d1:6c:bc:53:cc:c6:
50:86:42:49:c5:c8:ce:80:da:1a:80:de:d5:da:1e:
15:5b:9d:40:4d:e7:40:d3:ad:cf:d5:89:e9:fd:b0:
33:02:ce:e1:76:d0:a0:24:43:8f:75:7c:2f:da:67:
f3:93:c6:62:4a:57:31:07:5a:c2:cd:7e:47:41:fb:
af:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F8:03:96:8D:07:49:CB:76:12:12:EB:B1:6F:66:AA:33:55:2E:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDCADAA2E96711F098E482C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:5b:df:11:c0:b8:2e:30:63:c0:b0:b1:64:73:2d:6a:7f:89:
40:d0:19:fa:59:69:3e:9b:40:a5:3f:0f:2e:1c:54:9a:c1:2d:
85:81:6f:13:d7:aa:af:58:6e:51:33:80:b5:95:17:cf:62:80:
6b:f7:2c:23:6e:c4:aa:33:a9:35:fd:c7:f6:12:bd:43:e0:68:
62:cf:25:31:d0:a1:be:53:db:1e:07:af:6b:63:44:ea:19:e6:
d7:67:47:29:d9:3f:17:7f:f0:4b:dd:88:24:ae:1f:07:b5:59:
de:e3:0e:a5:a4:19:82:b4:04:0c:83:24:80:34:3a:19:bd:be:
8a:c0:e2:70:13:a8:43:7c:51:c5:12:c8:23:0a:6b:db:4a:2d:
46:0e:07:00:db:37:d4:9b:15:11:d5:4f:bb:b4:cb:e3:85:80:
c9:26:2e:d3:de:f4:1f:71:e8:bc:cf:a5:5b:f1:4b:95:4e:b9:
92:8e:1f:b1:42:1a:6b:3c:dd:73:3a:18:88:9a:34:1c:41:50:
1f:1f:0c:08:f9:3e:e7:5c:3a:69:a4:92:4f:d5:37:dd:e7:c4:
5e:fe:74:02:23:ac:93:f1:79:79:11:64:93:3c:da:a6:9b:43:
1f:7a:ff:7b:fe:62:0c:90:bd:b1:7e:eb:c6:0c:e1:e9:c8:66:
85:3d:71:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:03:05 2026 by rpki-client