This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9E9EF794F09E11F0BABF1E9EDAE4EC9C.roa
File: 9E9EF794F09E11F0BABF1E9EDAE4EC9C.roa (raw, json)
Hash identifier: RK9dAGK/gtZoUJAFvQqH97/rvZt9P+Ne+uS2kFVa808=
Subject key identifier: B2:70:79:8B:BB:00:C6:18:F1:8C:38:A7:75:AE:32:A8:57:87:50:67
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1D96
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9E9EF794F09E11F0BABF1E9EDAE4EC9C.roa
Signing time: Tue 13 Jan 2026 16:40:51 +0000
ROA not before: Tue 13 Jan 2026 16:40:46 +0000
ROA not after: Thu 13 Jan 2028 16:40:46 +0000
asID: 8220
IP address blocks: 154.16.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 23 Jan 2026 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7574 (0x1d96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 13 16:40:46 2026 GMT
Not After : Jan 13 16:40:46 2028 GMT
Subject: CN=69667593-62f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:30:19:a1:ab:f2:55:08:3a:66:39:d6:ae:9e:
e8:9f:f8:fb:4d:50:49:94:9f:fd:52:f7:6e:6e:72:
c4:29:6f:9d:20:6f:d0:9e:a3:58:fc:13:8a:e9:50:
28:73:37:88:3a:7b:ec:fb:77:dd:fa:1e:ee:68:4a:
9a:f4:b7:53:5b:28:5f:cf:49:d2:38:f9:cd:9f:65:
75:e9:1b:55:16:0e:95:ea:ac:63:19:04:00:8e:88:
9c:64:2a:d3:c4:24:cc:9f:fb:36:b9:1e:02:0f:90:
49:68:30:b6:b3:66:b2:bf:36:08:88:c9:ae:9d:7e:
3e:98:f3:9a:9a:4a:b6:e4:69:7a:76:f7:f4:6d:ce:
2f:1e:fa:21:6b:d4:3c:41:cd:09:2d:66:c7:af:ec:
8c:52:ad:f6:64:06:89:14:54:57:2c:ca:b8:df:ac:
3e:4b:24:9d:4f:cc:49:d6:31:71:49:85:47:7f:d6:
a8:fc:db:33:a2:76:62:8b:24:7b:50:23:62:bb:6b:
c1:13:8f:fe:0e:26:c6:51:7e:c1:6b:11:ae:bf:57:
2a:52:a5:9c:8c:93:9a:a1:21:5c:07:9a:ca:27:e9:
98:98:35:c4:9c:be:5f:09:57:31:e2:23:7b:d3:5c:
14:a6:ef:b7:fe:69:c3:e5:8c:bd:3a:3e:49:fc:a2:
6b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:70:79:8B:BB:00:C6:18:F1:8C:38:A7:75:AE:32:A8:57:87:50:67
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/9E9EF794F09E11F0BABF1E9EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.166.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:93:fa:d0:81:e5:44:7e:d6:7c:2d:1e:61:65:91:f6:43:1f:
aa:21:90:88:0d:48:d6:1d:1f:a1:59:bd:4f:1e:ac:ec:a1:8f:
8b:96:5a:cc:b3:a4:f9:fb:a2:19:8e:a2:a0:6a:86:8d:23:40:
46:e9:c5:72:05:24:27:b1:97:04:49:ee:c6:f1:b5:f5:7b:9b:
ac:14:53:ba:0c:4b:c5:68:8a:32:3b:32:f3:0f:1c:e3:c7:ed:
68:76:b8:95:79:46:05:12:5b:12:1d:95:93:31:fb:f5:97:0f:
50:45:74:6f:ee:99:c4:bb:1a:8c:a4:1f:9e:86:6d:79:4f:84:
a5:d4:cf:08:af:c5:2a:32:2c:f1:03:fa:b9:db:58:68:91:df:
5e:fd:f5:27:d3:31:34:2c:b4:f6:29:e1:d8:cb:0b:42:12:d1:
7e:ab:cd:a4:95:b2:2c:ea:87:28:c8:d6:24:30:a5:60:e9:a1:
df:33:d1:f5:45:cb:3b:67:8e:8e:2c:df:6f:6a:f3:5e:36:33:
f9:8d:1e:c2:a0:49:10:7a:d5:8b:0e:d8:39:f8:3d:3d:ad:48:
d3:53:4c:e8:d8:98:75:fa:cf:9d:55:46:10:b4:a2:40:08:16:
f5:ea:34:e8:cb:62:9d:2d:d0:00:ca:6e:1c:1e:15:92:89:6c:
0f:a7:7e:93
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICHZYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODJCNjVBRjExMC8GA1UEBRMoMDk0MEU2MzgyODMzMzZERTVDOEM1QTQwQTRDMjNC
MzRGM0Y5Q0E1MzAeFw0yNjAxMTMxNjQwNDZaFw0yODAxMTMxNjQwNDZaMBgxFjAU
BgNVBAMTDTY5NjY3NTkzLTYyZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDaMBmhq/JVCDpmOdaunuif+PtNUEmUn/1S925ucsQpb50gb9Ceo1j8E4rp
UChzN4g6e+z7d936Hu5oSpr0t1NbKF/PSdI4+c2fZXXpG1UWDpXqrGMZBACOiJxk
KtPEJMyf+za5HgIPkEloMLazZrK/NgiIya6dfj6Y85qaSrbkaXp29/Rtzi8e+iFr
1DxBzQktZsev7IxSrfZkBokUVFcsyrjfrD5LJJ1PzEnWMXFJhUd/1qj82zOidmKL
JHtQI2K7a8ETj/4OJsZRfsFrEa6/VypSpZyMk5qhIVwHmson6ZiYNcScvl8JVzHi
I3vTXBSm77f+acPljL06Pkn8omsnAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUsnB5
i7sAxhjxjDinda4yqFeHUGcwHwYDVR0jBBgwFoAUCUDmOCgzNt5cjFpApMI7NPP5
ylMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4QUVBMjI4L0NVRG1P
Q2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NVRG1PQ2d6TnQ1Y2pGcEFwTUk3TlBQNXlsTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjgyQjY1LzRFODUxRTM0REI1NTExRTg4NUIyOTk1MUY4
QUVBMjI4LzlFOUVGNzk0RjA5RTExRjBCQUJGMUU5RURBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACaEKYwDQYJKoZIhvcNAQEL
BQADggEBAMST+tCB5UR+1nwtHmFlkfZDH6ohkIgNSNYdH6FZvU8erOyhj4uWWsyz
pPn7ohmOoqBqho0jQEbpxXIFJCexlwRJ7sbxtfV7m6wUU7oMS8VoijI7MvMPHOPH
7Wh2uJV5RgUSWxIdlZMx+/WXD1BFdG/umcS7GoykH56GbXlPhKXUzwivxSoyLPED
+rnbWGiR31799SfTMTQstPYp4djLC0IS0X6rzaSVsizqhyjI1iQwpWDpod8z0fVF
yztnjo4s329q8142M/mNHsKgSRB61YsO2Dn4PT2tSNNTTOjYmHX6z51VRhC0okAI
FvXqNOjLYp0t0ADKbhweFZKJbA+nfpM=
-----END CERTIFICATE-----
Generated at Wed Jan 21 12:21:07 2026 by rpki-client