This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF9D52EAF94E11F0A723FFE4DAE4EC9C.roa
File: EF9D52EAF94E11F0A723FFE4DAE4EC9C.roa (raw, json)
Hash identifier: kBrQfXebGfbZbmqDjVPhjr5gJVW5HZ4X9Wc2TDRaC4g=
Subject key identifier: 5E:CA:CE:CA:91:08:59:01:79:B1:1D:53:6C:C0:47:DC:B4:2B:30:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B65C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF9D52EAF94E11F0A723FFE4DAE4EC9C.roa
Signing time: Sat 24 Jan 2026 18:03:08 +0000
ROA not before: Sat 24 Jan 2026 18:03:03 +0000
ROA not after: Tue 03 Mar 2026 18:03:03 +0000
asID: 62240
IP address blocks: 154.194.127.0/24 maxlen: 24
154.196.29.0/24 maxlen: 24
154.196.32.0/24 maxlen: 24
154.196.34.0/24 maxlen: 24
154.196.35.0/24 maxlen: 24
154.196.37.0/24 maxlen: 24
154.196.38.0/24 maxlen: 24
154.196.39.0/24 maxlen: 24
154.196.89.0/24 maxlen: 24
154.196.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112220 (0x1b65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 24 18:03:03 2026 GMT
Not After : Mar 3 18:03:03 2026 GMT
Subject: CN=6975095c-c09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b9:08:09:0a:3f:77:82:92:a0:48:9a:29:d6:
cc:3e:b8:8d:52:47:29:1e:49:de:9b:a4:e0:c5:7b:
5e:b8:38:0b:31:cc:cb:c3:86:4f:10:5e:03:4c:51:
be:e8:64:50:f6:43:12:6c:82:67:ec:3a:b7:93:5b:
27:da:f3:5f:f2:84:1a:b6:cd:96:7a:58:85:7b:6f:
19:2d:96:a8:fe:03:3f:34:79:2f:f2:db:9a:f5:4c:
cd:0c:91:7b:2b:b5:e6:8a:d0:66:56:b6:98:ba:d9:
16:d7:da:c9:80:e7:b5:ab:cc:71:71:73:c6:6c:f5:
61:bb:7b:f4:ed:02:c6:71:af:c7:49:35:b9:ee:6b:
ce:79:b8:bf:a9:73:6b:23:1e:05:21:64:66:ab:cf:
25:83:9f:d3:b9:ea:1a:94:fe:8b:0a:9c:46:d4:7f:
73:33:23:c6:2a:e1:c3:82:d6:ee:ea:d2:dc:65:a0:
8a:5b:d4:5e:5c:f5:3a:f7:4a:b2:6b:d6:ba:9f:f3:
3f:4c:8b:ef:e1:c3:7a:a0:55:86:c5:4b:23:0d:59:
9b:e8:33:21:44:22:f3:6c:87:a1:62:16:4e:c1:8c:
92:70:b4:f8:94:22:58:8a:34:da:81:b6:3c:40:47:
73:53:f1:b6:83:2f:0b:16:d9:f8:5d:05:65:17:33:
80:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CA:CE:CA:91:08:59:01:79:B1:1D:53:6C:C0:47:DC:B4:2B:30:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EF9D52EAF94E11F0A723FFE4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.127.0/24
154.196.29.0/24
154.196.32.0/24
154.196.34.0/23
154.196.37.0-154.196.39.255
154.196.89.0-154.196.90.255
Signature Algorithm: sha256WithRSAEncryption
c5:64:c3:46:21:61:42:52:72:86:e5:96:26:37:69:aa:df:8a:
08:d1:08:b3:18:88:51:58:e8:e7:1b:4b:ab:4d:be:29:c8:70:
17:89:56:41:6a:89:be:ce:88:21:ab:72:0d:5b:08:59:88:97:
6a:08:82:59:22:ab:b2:d3:82:c9:f0:c3:f9:04:de:81:26:b9:
db:15:36:4e:d5:52:9a:01:bf:64:33:2e:03:0f:82:85:7e:66:
ab:54:81:d5:94:1f:53:af:22:9d:9c:fc:d9:34:d1:6d:a0:56:
5d:ae:0d:5a:f2:b5:6e:7b:0a:25:cb:98:5c:25:91:16:90:23:
57:8f:85:f4:bc:6d:f8:5e:bf:97:85:1a:3b:af:fe:03:82:eb:
23:de:68:04:8c:02:f5:36:ad:33:47:6e:52:38:5a:3c:e8:07:
f6:35:27:a8:12:92:24:96:e5:bc:57:33:08:89:9f:6d:c5:c2:
f3:93:a2:04:ac:7d:49:f6:7e:33:19:55:52:00:47:09:1c:a1:
b4:f1:5c:04:37:e5:e8:2a:a6:1e:ec:5c:66:31:ff:5d:ca:5d:
03:c8:85:fa:5a:96:09:8c:59:62:7c:27:d8:f1:4f:19:7c:4d:
8e:bd:5c:9a:f9:fc:eb:7f:6e:f5:7c:df:42:d4:b3:c6:ac:5e:
59:fe:70:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:21:46 2026 by rpki-client