This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28EF172CE7D911F08B9363AEDAE4EC9C.roa
File: 28EF172CE7D911F08B9363AEDAE4EC9C.roa (raw, json)
Hash identifier: 0si44klGwdtsqKskZ74pmIdYRg/zKfqTUnwsqNylTb8=
Subject key identifier: AD:CB:95:E8:9C:3E:1F:4F:10:CA:8C:40:0E:4F:06:12:AC:31:F4:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B2F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28EF172CE7D911F08B9363AEDAE4EC9C.roa
Signing time: Fri 02 Jan 2026 12:47:13 +0000
ROA not before: Fri 02 Jan 2026 12:47:08 +0000
ROA not after: Wed 08 Jul 2026 12:47:08 +0000
asID: 40065
IP address blocks: 154.208.8.0/22 maxlen: 24
154.208.8.0/24 maxlen: 24
154.212.1.0/24 maxlen: 24
154.212.2.0/23 maxlen: 24
154.212.4.0/24 maxlen: 24
154.214.4.0/22 maxlen: 24
154.214.8.0/21 maxlen: 24
154.214.9.0/24 maxlen: 24
154.214.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 22 Jan 2026 00:06:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111348 (0x1b2f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 2 12:47:08 2026 GMT
Not After : Jul 8 12:47:08 2026 GMT
Subject: CN=6957be51-4346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:69:ff:a5:e1:b0:bd:d5:1d:9d:6c:f9:1a:64:
20:b3:0f:e9:f9:28:65:65:e2:71:2e:23:25:75:27:
1c:b5:1b:0a:44:c4:08:ca:97:07:ec:3e:4a:b1:84:
f9:f9:42:0b:d9:11:a1:35:fd:1a:a3:64:09:d6:ab:
08:7d:a3:68:96:30:c2:55:a3:03:27:2c:bc:8c:4d:
78:b7:30:3c:fe:fe:f0:e7:c0:4b:85:7d:36:d5:5a:
76:1e:9a:d9:e0:ee:ce:68:15:62:0d:a9:c5:e9:e2:
22:6f:1f:01:f1:5a:3d:33:bf:06:2a:ab:b8:a2:36:
f4:4c:1e:c4:cc:48:11:71:31:e9:3c:2c:f7:5e:b2:
2c:58:83:8c:08:46:5c:65:c5:d5:97:2a:d9:46:be:
98:fc:21:9b:4c:42:ce:15:f6:ed:24:f2:30:a7:6d:
4a:58:5e:10:0a:be:6a:4c:4a:03:f2:e0:73:a8:cd:
a7:cd:be:d5:29:46:e3:7b:85:c3:c7:45:ce:a5:5d:
08:78:c8:26:ba:b1:5a:b9:37:4f:da:33:b1:9c:1b:
07:5e:b2:e9:54:27:ca:c3:38:9e:27:e5:3e:09:72:
b5:79:b3:89:b2:82:23:de:5a:cb:fd:19:d6:9c:5f:
2f:a5:b2:ab:ff:e2:0d:48:d2:9c:b3:ac:fb:be:88:
ed:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CB:95:E8:9C:3E:1F:4F:10:CA:8C:40:0E:4F:06:12:AC:31:F4:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/28EF172CE7D911F08B9363AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.8.0/22
154.212.1.0-154.212.4.255
154.214.4.0-154.214.15.255
Signature Algorithm: sha256WithRSAEncryption
4b:02:ff:22:ae:88:9d:8f:4e:a1:b1:b9:e7:4d:85:c3:4d:1e:
76:2f:ee:05:6f:d9:dd:48:3b:e8:7f:89:ed:e0:ee:e4:ea:06:
93:fd:ac:33:6a:64:b6:96:b8:ad:de:d4:4d:71:b6:f2:87:b3:
e1:ff:f4:4f:c1:7b:b5:60:de:59:f9:60:f2:a5:42:22:f7:1b:
74:21:46:fe:c4:a7:26:7a:cc:50:ef:8c:4c:da:76:59:67:32:
29:7e:3f:3f:70:d4:66:bb:aa:de:a4:bb:c6:53:2b:0d:ed:55:
7e:d8:7b:3c:d1:d3:48:de:ea:00:42:1b:ad:85:da:4c:fc:0b:
5a:2d:92:ac:21:19:f2:81:e7:dd:8f:0b:0e:7f:f7:49:14:97:
95:46:ca:ec:a6:fd:22:4b:0f:45:b4:ca:08:00:7d:4e:6e:45:
d7:65:64:56:0f:45:0a:51:af:8b:5a:71:0b:65:2c:8e:08:40:
55:34:6f:d9:5a:6a:7a:3a:9c:32:34:07:f6:9d:1e:83:c1:f0:
c8:8f:55:84:3d:80:8c:8a:1a:be:f6:aa:a6:35:00:1a:0f:32:
8b:25:8f:14:c3:e8:ff:25:38:65:15:c6:88:31:5a:f9:cf:1f:
b9:72:42:f7:16:1b:fe:ae:5d:6b:7b:01:01:b3:dd:4b:07:03:
bd:08:f1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 06:05:06 2026 by rpki-client