This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/898CF67EE7D111F0818DDA7FDAE4EC9C.roa
File: 898CF67EE7D111F0818DDA7FDAE4EC9C.roa (raw, json)
Hash identifier: yz+yj3VZbOOjxWLG1fBKYmynhoqx9Fke60A4sHNBTJ4=
Subject key identifier: 97:89:A8:38:21:91:CD:78:AC:8B:78:3F:0C:32:86:DA:16:82:88:D0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1D70
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/898CF67EE7D111F0818DDA7FDAE4EC9C.roa
Signing time: Fri 02 Jan 2026 11:52:39 +0000
ROA not before: Fri 02 Jan 2026 11:52:35 +0000
ROA not after: Sun 02 Jan 2028 11:52:35 +0000
asID: 198100
IP address blocks: 154.16.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 07 Jan 2026 01:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7536 (0x1d70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 2 11:52:35 2026 GMT
Not After : Jan 2 11:52:35 2028 GMT
Subject: CN=6957b187-19cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:ae:dc:2b:ec:04:84:82:43:b7:3b:f9:05:
bf:25:f0:b6:04:d0:98:5c:43:b6:17:8c:fb:12:68:
9a:f8:06:42:eb:ee:42:62:d8:67:61:0e:42:22:45:
1f:c4:0a:9b:8f:ae:03:5a:e3:c0:05:b9:8f:3d:87:
3c:d8:66:69:4f:f0:59:b8:ac:6a:ce:ef:cb:90:46:
7d:8b:81:8c:43:1f:bd:f5:d2:ca:68:14:83:1f:3d:
e5:e5:83:80:bc:7c:30:a8:0f:12:12:bf:0b:12:fa:
6e:08:f4:1e:b0:fe:15:9a:06:4e:d5:8d:50:81:32:
94:a5:28:33:8b:f5:b0:b4:df:56:89:21:af:61:50:
ed:98:88:1c:7b:c8:1b:48:b2:69:93:69:90:f2:13:
fc:9c:3d:d8:75:5e:05:5a:65:b8:b1:28:74:34:fe:
f9:8f:9e:f4:db:a4:fb:2f:c6:e9:bb:81:33:b8:c9:
e1:5b:3f:69:3b:31:2d:4c:99:01:e3:85:35:7a:76:
fc:76:b2:6c:31:78:91:7d:a1:ee:64:5b:b8:99:c7:
81:af:bf:2d:88:b6:18:95:03:4e:44:44:48:75:ca:
bd:26:29:31:94:88:86:82:5a:85:73:40:61:d2:fb:
ce:a1:4a:c5:1e:9a:70:28:a1:fe:6e:11:2b:67:55:
78:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:89:A8:38:21:91:CD:78:AC:8B:78:3F:0C:32:86:DA:16:82:88:D0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/898CF67EE7D111F0818DDA7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.183.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:59:56:bc:37:b8:23:3d:35:d4:22:0c:01:8a:c6:71:a8:13:
e8:ca:31:70:d9:9e:a4:66:d7:e5:c8:17:47:e9:82:bd:00:c0:
81:ac:23:7d:d0:7f:0c:ce:0e:fc:9f:b9:fd:bc:77:60:79:19:
59:13:0b:47:bc:70:43:4e:60:a1:6e:99:f8:38:f7:ac:07:2c:
2a:43:0a:3f:e9:4c:64:94:c3:af:86:3f:33:0d:36:1f:35:e6:
25:0e:8e:15:d9:60:13:de:b2:15:20:67:1a:75:d6:9e:4e:cd:
45:32:54:56:5d:20:86:2e:dd:f8:e0:3b:0d:70:da:1c:d5:76:
8b:7f:19:07:a1:2f:b1:34:f4:e7:40:66:98:19:51:da:79:50:
0d:2d:46:3b:e1:40:17:92:f5:71:b0:e4:70:10:44:ee:2d:03:
0d:55:56:0e:d6:02:b4:67:1a:e1:50:3b:b9:8b:cd:34:a0:9f:
70:ef:dd:1b:bc:2a:57:3d:32:7a:18:ac:28:99:47:99:cd:6a:
b5:f7:8c:ac:f3:ae:4c:48:f5:25:72:31:9a:35:2c:98:e9:77:
f9:e0:bc:44:57:cf:9e:19:db:06:81:24:6b:95:70:81:b0:cb:
df:a0:fb:45:dd:d0:3e:dc:92:22:37:fc:8f:0b:e8:28:b8:61:
f4:da:17:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 10:37:07 2026 by rpki-client