This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F7E8BCE6ED11F0A5813E7FDAE4EC9C.roa
File: 69F7E8BCE6ED11F0A5813E7FDAE4EC9C.roa (raw, json)
Hash identifier: 0HZdOyemRxrhVU5F0XuBvk2b0+D/kou+7DnEtJAjxi0=
Subject key identifier: B2:FD:9B:F1:61:16:48:A5:D6:2B:BD:1C:1F:5A:0D:90:B8:84:21:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B256
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F7E8BCE6ED11F0A5813E7FDAE4EC9C.roa
Signing time: Thu 01 Jan 2026 08:39:41 +0000
ROA not before: Thu 01 Jan 2026 08:39:36 +0000
ROA not after: Thu 05 Feb 2026 08:39:36 +0000
asID: 202656
IP address blocks: 154.219.1.0/24 maxlen: 24
154.219.4.0/24 maxlen: 24
154.219.17.0/24 maxlen: 24
154.219.18.0/24 maxlen: 24
154.219.19.0/24 maxlen: 24
154.219.20.0/24 maxlen: 24
154.219.21.0/24 maxlen: 24
154.219.22.0/24 maxlen: 24
154.219.26.0/24 maxlen: 24
154.219.27.0/24 maxlen: 24
154.219.29.0/24 maxlen: 24
154.222.40.0/24 maxlen: 24
154.222.41.0/24 maxlen: 24
154.222.42.0/24 maxlen: 24
154.222.193.0/24 maxlen: 24
154.222.194.0/24 maxlen: 24
154.222.195.0/24 maxlen: 24
154.222.196.0/24 maxlen: 24
154.222.198.0/24 maxlen: 24
154.222.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 21 Jan 2026 13:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111190 (0x1b256)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 1 08:39:36 2026 GMT
Not After : Feb 5 08:39:36 2026 GMT
Subject: CN=695632cd-1340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:b1:c3:1e:f8:fa:23:df:50:be:2b:6b:75:
14:4b:6d:0e:04:2d:64:ef:55:69:b0:72:de:45:69:
c5:df:4b:48:70:da:ec:fd:ae:9b:65:d9:9e:0f:bc:
c8:09:87:a8:6e:94:1f:55:4a:55:74:a9:cf:c9:66:
3b:4a:ee:bb:92:be:74:43:d5:55:2f:0f:8d:3c:7b:
0d:ba:d0:eb:f6:39:6d:0e:1e:f1:29:ad:19:06:ac:
cc:2f:d9:a9:40:4d:e8:53:b8:57:d6:86:47:e8:f7:
05:59:6b:e4:c6:ba:50:51:85:bb:08:5e:fb:c9:3d:
a4:df:f2:6d:d2:18:da:08:4f:f3:4f:bc:d1:b7:7f:
7a:db:a0:6b:34:6e:77:3f:aa:97:9e:46:8a:99:b2:
df:ec:75:d9:91:37:82:66:c1:5a:e9:0e:54:99:16:
f2:1c:66:46:00:80:c9:d9:db:2b:d6:89:81:a2:71:
c4:3d:8f:e3:83:a5:8e:f4:91:02:62:b2:1f:2b:fc:
aa:22:94:68:44:27:8d:a0:3a:0a:91:9b:ce:50:85:
2c:06:07:36:f4:81:25:03:a7:27:41:56:20:b6:8d:
2a:2e:bd:eb:d0:59:92:01:57:03:1f:36:d7:0e:a7:
e3:b8:15:11:ce:9f:0c:47:39:f6:f4:64:9a:96:9e:
5a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:FD:9B:F1:61:16:48:A5:D6:2B:BD:1C:1F:5A:0D:90:B8:84:21:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69F7E8BCE6ED11F0A5813E7FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.1.0/24
154.219.4.0/24
154.219.17.0-154.219.22.255
154.219.26.0/23
154.219.29.0/24
154.222.40.0-154.222.42.255
154.222.193.0-154.222.196.255
154.222.198.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:be:52:bf:a1:14:b2:92:74:9d:2a:5d:b7:04:15:eb:59:3f:
46:1b:28:f7:6e:44:f3:2b:7e:8a:23:f8:fb:0a:51:d7:e8:3e:
0c:bf:33:60:bc:fd:fa:2b:07:5d:7f:6d:d5:3d:1e:b8:fa:e6:
08:cb:cd:a7:c5:33:5c:09:54:67:2e:49:7c:ee:8d:61:44:f0:
3e:d9:b0:34:86:28:d8:f8:0f:5e:2d:40:aa:6d:f5:06:92:65:
68:47:b0:46:cf:81:4a:42:d6:7b:e9:47:74:c0:1f:ec:25:dd:
0f:89:e5:1f:ba:01:4d:43:1e:b1:b3:30:82:cf:8d:c3:87:3c:
78:bc:7f:d3:a3:8f:cc:a8:b4:04:66:a4:fd:0f:3e:56:c7:17:
49:4a:a4:35:ea:b1:f3:16:c6:c7:71:3c:b2:2b:79:ac:71:37:
83:be:11:0d:ea:12:20:86:62:65:e2:17:46:85:d4:65:00:17:
9d:6c:4f:b9:dc:86:ca:d1:95:69:41:0c:7e:46:a2:fd:27:94:
58:68:81:ed:96:e5:95:df:33:e0:25:c7:ef:41:0f:1d:2b:5a:
3f:aa:25:75:98:e9:f3:db:ca:10:35:4c:a5:49:c1:4c:8e:9e:
fe:b3:d6:78:c3:be:72:57:d3:1e:8d:85:d9:cf:13:24:ca:3a:
ba:90:9f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 23:23:29 2026 by rpki-client