This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BB70FCAE17111F0A66DB6E7DAE4EC9C.roa
File: 0BB70FCAE17111F0A66DB6E7DAE4EC9C.roa (raw, json)
Hash identifier: YRwpdP91+KLwU+lfhvhCcSkaYg3pzPZtZaJQPkNxhtI=
Subject key identifier: 45:2A:32:BB:9D:9D:CD:46:61:54:A0:E1:EE:31:AD:E3:30:02:AE:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B142
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BB70FCAE17111F0A66DB6E7DAE4EC9C.roa
Signing time: Thu 25 Dec 2025 09:06:50 +0000
ROA not before: Thu 25 Dec 2025 09:06:45 +0000
ROA not after: Sun 01 Feb 2026 09:06:45 +0000
asID: 44559
IP address blocks: 154.198.36.0/24 maxlen: 24
154.203.251.0/24 maxlen: 24
154.205.226.0/24 maxlen: 24
154.205.227.0/24 maxlen: 24
154.205.228.0/24 maxlen: 24
154.205.229.0/24 maxlen: 24
154.205.230.0/24 maxlen: 24
154.205.231.0/24 maxlen: 24
154.205.232.0/24 maxlen: 24
154.205.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 21 Jan 2026 13:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110914 (0x1b142)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 25 09:06:45 2025 GMT
Not After : Feb 1 09:06:45 2026 GMT
Subject: CN=694cfea9-9637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:2a:36:93:c0:3f:ff:f7:af:85:74:ae:ca:
96:8f:68:18:76:4e:5b:bc:d9:f3:5d:47:51:b6:78:
89:93:1d:d4:e5:7d:7c:7d:14:c3:23:85:da:98:a5:
84:84:ec:43:13:cf:0c:cb:d8:90:0f:4f:c7:44:34:
69:9d:d9:a4:36:17:35:a9:ce:ca:d3:06:ae:1b:a2:
4d:e2:c0:79:07:29:d6:d8:d4:7a:d8:74:db:5e:1e:
83:9a:36:c0:78:c3:40:93:7c:87:6e:ef:83:b6:04:
2e:48:c6:83:a9:13:11:3e:f7:ff:8a:51:2a:ff:38:
50:f7:31:2c:59:f7:9c:b9:24:d4:5b:97:b7:a4:d5:
d3:fa:2c:f4:03:2f:37:29:8a:db:fd:20:52:ee:44:
4e:a0:42:51:4e:83:12:c7:4b:6f:d9:2e:9b:bb:d5:
c0:fa:63:6b:94:87:ea:5e:8b:98:5e:84:0f:ae:6a:
bd:ef:87:4f:be:82:95:ea:ec:bd:88:d0:db:fb:cd:
c4:4a:6b:9b:33:77:3d:cb:86:d3:e9:5b:64:b3:8d:
dd:7a:7a:a4:08:c4:c5:f3:06:fb:df:36:73:23:09:
c0:8a:a2:ed:77:5a:d0:80:38:64:0f:ce:12:40:69:
c0:85:cd:51:e2:03:af:3d:21:56:8d:ee:34:37:49:
c4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2A:32:BB:9D:9D:CD:46:61:54:A0:E1:EE:31:AD:E3:30:02:AE:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0BB70FCAE17111F0A66DB6E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.36.0/24
154.203.251.0/24
154.205.226.0-154.205.233.255
Signature Algorithm: sha256WithRSAEncryption
d0:bb:5f:cf:2e:62:88:a9:23:d5:47:b0:73:e9:ee:e8:5a:5a:
32:21:24:1c:18:12:fe:35:68:1e:1d:a5:b5:75:6b:4d:a3:bb:
b1:eb:5a:66:de:3e:94:3d:a4:84:08:fd:59:64:0a:5f:e8:6f:
d5:7b:5a:5e:e0:17:90:3d:e5:54:f1:34:59:c6:71:6c:03:0f:
aa:32:86:41:f3:be:a4:bb:ba:6d:22:59:a5:7b:c5:7b:bf:ab:
4d:e5:a1:09:0e:b1:e4:79:3c:1d:de:27:e1:89:cb:fc:52:fb:
df:64:ae:a4:0c:dc:52:09:25:7a:ca:2d:21:2e:94:06:b2:39:
71:a3:33:2e:c3:ba:dd:44:11:62:a8:3c:be:84:25:e3:7a:c0:
fc:82:12:b5:b0:7f:45:c4:3b:15:c7:a3:f9:57:10:7e:bd:b4:
8c:d0:56:3b:0e:98:07:e4:55:d8:88:12:6b:18:a7:38:2b:4e:
05:04:ef:7a:3a:7c:2c:61:8b:03:03:ef:e6:e8:af:b4:61:39:
a2:8c:db:a7:41:05:12:0b:60:81:63:94:17:74:f2:75:c8:5d:
b7:80:69:b9:93:49:8c:21:e7:3b:5c:96:fa:f7:0a:0a:f1:39:
1d:90:cf:0f:b4:53:7c:fe:8c:9f:33:1c:e6:20:4e:bf:1c:ba:
41:e2:21:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:22:18 2026 by rpki-client