This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ECCF532E0E611F0BCF9C178DAE4EC9C.roa
File: 2ECCF532E0E611F0BCF9C178DAE4EC9C.roa (raw, json)
Hash identifier: ZwnzJcG+0LHkoHSecWG6BnovJeP2zg+ElYOkSnsO0WI=
Subject key identifier: C7:80:93:84:A4:A2:0A:A5:27:07:40:9C:0A:2D:DE:BC:0E:87:99:17
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B105
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ECCF532E0E611F0BCF9C178DAE4EC9C.roa
Signing time: Wed 24 Dec 2025 16:32:48 +0000
ROA not before: Wed 24 Dec 2025 16:32:43 +0000
ROA not after: Sat 31 Jan 2026 16:32:43 +0000
asID: 14315
IP address blocks: 154.194.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 23 Jan 2026 00:06:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110853 (0x1b105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 24 16:32:43 2025 GMT
Not After : Jan 31 16:32:43 2026 GMT
Subject: CN=694c15b0-9c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:e2:53:42:50:da:26:c2:72:7b:25:5d:02:
e8:b1:47:08:94:5d:9a:b2:b2:c8:03:cd:d1:0f:a1:
84:5a:4d:13:fb:dc:b5:76:4c:12:c4:e9:34:08:d9:
c3:6c:2c:0d:ed:71:93:06:a9:f4:ef:36:7a:9d:cc:
4b:8c:fd:f4:c6:24:f7:b9:62:58:20:af:a0:e7:c3:
68:2b:8b:1b:eb:54:b9:59:18:5b:b0:b9:e4:a4:76:
f4:70:17:90:3c:72:7e:94:9f:b4:82:7b:5c:c9:a7:
44:7f:34:31:5e:ec:85:4e:47:08:eb:7b:87:c1:7f:
74:b7:4f:57:a0:33:51:db:ad:3f:b9:a3:c7:5f:bd:
84:dd:63:4a:35:b5:e6:fe:e7:52:ba:6b:9d:5f:82:
50:49:ee:dd:f4:ab:81:b2:bd:64:16:60:50:e1:48:
14:32:8d:51:29:96:1d:fc:6f:80:3e:4f:6d:e5:f7:
9d:87:33:1f:d7:75:56:01:56:c2:5b:16:b2:0e:89:
a0:69:b7:82:4a:bb:4f:d8:d4:e9:f3:f4:1a:e8:a1:
fc:dc:d7:87:c0:a0:27:00:68:43:aa:d7:cb:70:b0:
1e:90:a4:6c:a2:ce:df:53:e7:e9:4b:bd:43:61:2c:
93:1f:f7:f9:43:11:9d:c5:80:1d:e9:49:3d:c0:32:
4c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:80:93:84:A4:A2:0A:A5:27:07:40:9C:0A:2D:DE:BC:0E:87:99:17
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2ECCF532E0E611F0BCF9C178DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.50.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:f2:dd:c2:a5:cb:b5:09:98:da:f9:43:5d:c4:05:9f:20:13:
5d:1a:bb:17:aa:8c:be:10:f8:67:a4:1d:52:eb:39:06:16:77:
2d:91:91:64:f3:01:8a:3a:b7:11:79:ef:28:53:26:c5:9e:7a:
d9:26:4c:cf:9a:b0:6a:4f:fd:5e:ff:5a:22:2a:a3:b3:8e:30:
95:f5:6c:ad:18:5f:34:50:b8:9b:45:37:3b:06:aa:02:44:ca:
cd:42:bf:36:de:4b:3a:d0:7a:6c:2e:05:11:a3:9f:fd:ee:67:
d2:be:5f:f0:08:20:1d:bf:2d:67:b5:a9:de:7a:96:e5:4b:f2:
5a:36:f2:32:81:15:bd:d7:65:cb:cc:2c:8a:06:be:f5:82:42:
50:de:d1:8a:6f:ca:4b:c5:41:20:de:52:22:e7:96:e0:a2:51:
ac:be:4c:ec:2f:2a:71:f3:c2:19:da:e4:72:07:8a:ae:ae:f2:
9b:a0:97:0a:50:33:21:df:cd:a7:ca:44:e4:e6:c0:cd:ec:c1:
57:f2:19:0c:d3:8f:22:d4:60:76:a8:b6:b4:46:ae:23:f3:8f:
b5:37:3d:cd:ff:56:9d:f3:69:75:93:ea:7f:2a:74:a3:58:81:
b3:62:ad:59:6f:1f:ad:19:c0:e8:15:2e:82:ea:d2:8d:fc:11:
4a:7b:59:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAbEFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjI0MTYzMjQzWhcNMjYwMTMxMTYzMjQzWjAYMRYw
FAYDVQQDEw02OTRjMTViMC05YzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAoSTiU0JQ2ibCcnslXQLosUcIlF2asrLIA83RD6GEWk0T+9y1dkwSxOk0
CNnDbCwN7XGTBqn07zZ6ncxLjP30xiT3uWJYIK+g58NoK4sb61S5WRhbsLnkpHb0
cBeQPHJ+lJ+0gntcyadEfzQxXuyFTkcI63uHwX90t09XoDNR260/uaPHX72E3WNK
NbXm/udSumudX4JQSe7d9KuBsr1kFmBQ4UgUMo1RKZYd/G+APk9t5fedhzMf13VW
AVbCWxayDomgabeCSrtP2NTp8/Qa6KH83NeHwKAnAGhDqtfLcLAekKRsos7fU+fp
S71DYSyTH/f5QxGdxYAd6Uk9wDJMBQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFMeA
k4SkogqlJwdAnAot3rwOh5kXMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8yRUNDRjUzMkUwRTYxMUYwQkNGOUMxNzhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsIyMA0GCSqGSIb3DQEB
CwUAA4IBAQDV8t3Cpcu1CZja+UNdxAWfIBNdGrsXqoy+EPhnpB1S6zkGFnctkZFk
8wGKOrcRee8oUybFnnrZJkzPmrBqT/1e/1oiKqOzjjCV9WytGF80ULibRTc7BqoC
RMrNQr823ks60HpsLgURo5/97mfSvl/wCCAdvy1ntaneepblS/JaNvIygRW912XL
zCyKBr71gkJQ3tGKb8pLxUEg3lIi55bgolGsvkzsLypx88IZ2uRyB4qurvKboJcK
UDMh382nykTk5sDN7MFX8hkM048i1GB2qLa0Rq4j84+1Nz3N/1ad82l1k+p/KnSj
WIGzYq1Zbx+tGcDoFS6C6tKN/BFKe1mz
-----END CERTIFICATE-----
Generated at Wed Jan 21 13:24:52 2026 by rpki-client