This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ACE18FF6F08A11F0B201FDA5DAE4EC9C.roa
File: ACE18FF6F08A11F0B201FDA5DAE4EC9C.roa (raw, json)
Hash identifier: fez3VFbI5DWKwISQt2buuQKu/T+6AQw86T7mj8Hw4Y8=
Subject key identifier: 1E:E2:15:56:5B:57:BC:8F:79:B7:CE:03:14:5B:3E:16:9C:2E:51:06
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1D93
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ACE18FF6F08A11F0B201FDA5DAE4EC9C.roa
Signing time: Tue 13 Jan 2026 14:18:05 +0000
ROA not before: Tue 13 Jan 2026 14:18:00 +0000
ROA not after: Thu 13 Jan 2028 14:18:00 +0000
asID: 212238
IP address blocks: 154.16.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7571 (0x1d93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Jan 13 14:18:00 2026 GMT
Not After : Jan 13 14:18:00 2028 GMT
Subject: CN=6966541d-5e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:87:6d:d4:3c:96:9b:94:43:ed:01:40:03:57:
8a:4d:81:46:56:2d:69:fe:ed:e4:95:57:84:03:12:
5a:08:60:41:17:da:bb:ed:18:6c:55:b4:69:e0:71:
89:60:3e:5a:d7:30:2e:f3:21:a0:93:79:12:ef:78:
26:5b:31:e3:2f:1b:61:19:59:7d:a7:de:b7:a1:35:
d8:82:1f:ab:3a:2d:f3:b5:a3:7e:13:0a:f5:79:af:
0c:b8:af:53:1f:07:ac:f1:4c:2d:03:e1:87:2f:8c:
d3:82:86:e5:54:d2:b7:b3:ea:43:63:1a:90:8b:47:
c6:ad:d8:0d:4f:ce:2f:7b:fd:98:70:3c:fd:dc:3b:
e7:1b:b7:4e:5f:6f:1d:4d:d3:04:1d:a3:bf:c2:3d:
47:75:74:73:2b:b5:0a:10:15:d0:21:a7:ec:11:79:
be:24:aa:ca:20:40:aa:ba:8e:d7:99:4b:8a:e9:22:
45:a8:d3:3d:c4:06:01:52:90:5d:d5:98:e8:43:ea:
65:44:4f:ba:34:48:7d:ec:2f:65:d4:d0:82:e9:4b:
9e:bf:fd:e4:e0:3e:e0:c9:88:30:4b:e7:46:30:5f:
52:db:0c:aa:b3:42:a7:3c:09:c2:e0:c4:36:f8:31:
48:20:1c:a1:9d:95:e4:00:32:73:23:45:3e:cc:6e:
19:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E2:15:56:5B:57:BC:8F:79:B7:CE:03:14:5B:3E:16:9C:2E:51:06
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/ACE18FF6F08A11F0B201FDA5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.142.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9e:e8:8d:eb:ef:6b:4e:af:cc:0f:0f:0e:00:27:bd:49:d2:
2e:0b:18:54:86:e2:db:91:bf:f9:3d:65:bc:e0:01:63:ff:e1:
72:1c:4a:8e:8d:e3:d1:be:7d:07:c8:ea:a2:ef:03:ac:06:3c:
6d:22:96:ba:1d:ab:5a:48:13:28:a1:85:52:26:2c:93:f8:23:
49:15:65:a2:63:f5:76:0d:08:35:3b:53:88:f3:20:5e:d8:dd:
28:65:b4:f7:de:0e:e2:b7:ee:f3:ec:af:bd:9f:7f:1a:87:07:
61:5b:3d:ea:8b:36:2e:ea:86:c6:77:5f:b5:11:13:49:42:40:
12:e7:e3:eb:5e:8d:2d:d9:2e:bf:a7:93:ca:68:64:27:31:88:
56:fe:6d:3e:47:ba:1f:b2:08:c0:47:35:43:79:d3:08:5f:86:
d9:a6:e6:0e:02:c6:7d:57:eb:de:be:44:26:4f:c0:ea:09:bf:
64:d3:bb:6b:6a:b5:ef:e4:6a:5d:63:13:13:4e:76:92:6d:15:
33:c5:1a:f8:6e:70:3e:af:ee:a5:01:91:7c:a8:b9:16:a2:1e:
57:bc:f1:d9:1d:1b:c8:00:b9:34:e9:11:e9:56:67:d3:2f:72:
ed:d8:63:71:6c:58:33:56:81:07:df:5a:52:21:80:90:16:5e:
c4:62:00:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 04:15:17 2026 by rpki-client