This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CEAD3B38068F11F1833B3EE2DAE4EC9C.roa
File: CEAD3B38068F11F1833B3EE2DAE4EC9C.roa (raw, json)
Hash identifier: vTfCzwHT8jEjIC9cjdgpi+BVeiv8TOdAoLxqWUETA24=
Subject key identifier: AA:5D:F3:27:33:FC:2E:DC:3F:42:EC:BF:11:74:71:C7:8A:28:48:F0
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1DE2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CEAD3B38068F11F1833B3EE2DAE4EC9C.roa
Signing time: Tue 10 Feb 2026 14:50:15 +0000
ROA not before: Tue 10 Feb 2026 14:50:10 +0000
ROA not after: Thu 10 Feb 2028 14:50:10 +0000
asID: 29802
IP address blocks: 154.16.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Feb 2026 00:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7650 (0x1de2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Feb 10 14:50:10 2026 GMT
Not After : Feb 10 14:50:10 2028 GMT
Subject: CN=698b45a7-285e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:ad:fa:23:90:05:37:30:bb:6a:53:d6:9d:
70:7f:38:65:05:81:f3:7c:3d:4f:66:0a:af:7b:ca:
30:79:9e:91:bc:26:be:ea:c9:7e:29:b7:50:4d:61:
40:18:99:0d:a5:6a:b6:2d:8a:5f:e9:a0:87:10:40:
a2:cf:c0:be:d4:97:5b:22:04:e8:1f:8e:47:b7:b3:
82:7f:21:7b:6f:84:00:b1:ec:14:6c:d2:0e:4e:91:
67:b5:94:f8:0c:6f:2a:80:2a:3c:ab:f0:8c:5f:70:
60:dc:00:8f:db:8a:39:80:20:1e:43:98:3a:d3:94:
82:ce:ca:f4:59:17:3c:8a:38:b6:4b:05:07:78:3f:
0e:c6:5d:95:b6:9c:57:57:aa:31:6e:32:24:be:85:
53:be:f2:7f:5a:cc:a8:84:98:5b:5e:f9:cd:c5:41:
94:d3:98:4a:86:50:a5:48:ce:d6:9a:48:fd:4e:25:
ea:e2:d7:23:b7:a5:76:d7:fe:c2:5a:bc:57:93:60:
af:43:6e:47:02:94:d4:dc:5e:a4:25:80:47:89:73:
26:87:f3:97:79:d2:b7:aa:1e:d5:2b:d8:4b:37:b7:
67:46:49:b8:e7:ad:46:1f:93:91:73:3f:23:3b:d5:
10:f2:28:d7:21:89:50:90:18:e6:f7:05:cf:7a:bc:
e7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5D:F3:27:33:FC:2E:DC:3F:42:EC:BF:11:74:71:C7:8A:28:48:F0
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CEAD3B38068F11F1833B3EE2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.68.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:96:df:c3:4d:4c:9c:0a:28:bb:2e:46:98:b9:6d:8a:e2:ab:
76:1b:6a:e8:42:46:c6:0f:4d:f5:10:18:f2:13:d3:1a:34:3b:
3d:17:51:0b:b6:77:e3:48:2c:23:ea:c2:3c:e1:56:b7:c4:08:
dd:88:6c:55:72:45:26:42:c8:4a:51:5a:ae:6c:ac:7e:12:f9:
fd:33:85:3a:6b:c4:13:60:6f:32:02:38:e0:55:f4:df:b6:6c:
04:10:12:bd:57:52:0d:5f:52:a2:40:bc:7b:ab:81:f4:cc:49:
f0:b3:89:e2:61:83:7b:7d:37:b9:ce:a5:e8:c7:8b:67:ae:46:
d3:0e:7c:33:29:43:c5:74:6e:96:39:43:55:e8:e8:2d:80:c9:
ce:47:fd:2d:f3:8c:24:c9:64:94:d5:ff:ad:45:ef:9c:0b:e7:
15:69:b7:cf:d7:66:e9:c8:4a:f3:bb:a4:79:57:d2:d4:f6:34:
06:cd:e4:36:c8:e7:14:7c:a0:bf:99:20:23:ac:e4:f7:e7:af:
2c:4a:bf:ef:6f:67:d3:3b:b0:f2:ab:bf:66:bc:1a:45:87:86:
ba:df:65:3a:cc:8e:25:12:ce:e2:bf:0b:0f:01:2d:3d:32:0f:
b6:00:ee:48:15:cd:29:ce:46:c7:59:83:be:c1:2d:42:f7:77:
f5:bc:e5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 13 08:23:44 2026 by rpki-client