This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BDF7C08EBE611F0BB5DBA95DAE4EC9C.roa
File: 8BDF7C08EBE611F0BB5DBA95DAE4EC9C.roa (raw, json)
Hash identifier: I+cjgzf/0lvvFJghvDIGiDBgAZVswsMuZxyOCYQuUI0=
Subject key identifier: 58:22:00:D7:65:D3:B4:62:95:D3:0D:AA:F3:F9:FF:83:8D:D2:56:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B3B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BDF7C08EBE611F0BB5DBA95DAE4EC9C.roa
Signing time: Wed 07 Jan 2026 16:33:07 +0000
ROA not before: Wed 07 Jan 2026 16:33:02 +0000
ROA not after: Tue 27 Jan 2026 16:33:02 +0000
asID: 138915
IP address blocks: 154.93.84.0/23 maxlen: 24
154.93.86.0/24 maxlen: 24
154.93.92.0/24 maxlen: 24
154.93.93.0/24 maxlen: 24
154.93.100.0/23 maxlen: 24
154.93.104.0/23 maxlen: 24
154.93.109.0/24 maxlen: 24
154.93.110.0/24 maxlen: 24
154.93.111.0/24 maxlen: 24
154.93.114.0/24 maxlen: 24
154.93.115.0/24 maxlen: 24
154.93.116.0/22 maxlen: 24
154.93.120.0/24 maxlen: 24
154.93.121.0/24 maxlen: 24
154.93.122.0/24 maxlen: 24
154.93.124.0/23 maxlen: 24
154.93.124.0/24 maxlen: 24
154.93.125.0/24 maxlen: 24
154.93.126.0/24 maxlen: 24
154.93.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 21 Jan 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111537 (0x1b3b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 7 16:33:02 2026 GMT
Not After : Jan 27 16:33:02 2026 GMT
Subject: CN=695e8ac3-4eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:9f:99:d8:b4:0b:fa:12:5a:e5:cc:0f:22:
29:1b:db:49:8b:72:a8:d7:78:98:87:c7:e9:bb:60:
dd:8a:a9:67:a9:33:07:e9:e7:d7:f0:f7:74:f7:4f:
ca:d7:48:eb:8c:22:79:f2:55:46:6e:c9:1a:0f:11:
04:8c:2c:2b:99:43:77:54:54:43:a5:7c:43:3b:f1:
d3:86:2a:f8:4a:80:54:e4:47:9b:8b:88:37:60:b4:
d1:ff:81:58:0c:03:e4:87:0a:22:2c:35:8a:e7:e3:
2e:93:e2:d1:91:0d:f4:44:6a:18:b7:bb:37:c3:d9:
36:e0:07:71:23:74:0f:19:e1:b5:4e:41:ba:de:f8:
b9:1a:36:e5:a2:e9:90:8a:a8:27:65:fc:e4:e2:a0:
77:d3:27:e8:8b:32:ce:73:05:5d:27:63:6a:54:41:
67:a0:d4:32:d0:d3:26:d9:e1:5e:84:da:7c:23:17:
8c:e2:01:e4:12:72:b7:92:d6:93:f6:22:e9:7f:8c:
50:f1:9c:c3:ac:38:23:4f:10:f1:e5:a9:f5:89:b1:
f9:ae:7a:52:aa:01:66:18:45:c0:ad:cb:03:af:5f:
50:23:d9:31:b3:a7:d7:a7:3f:01:60:d0:d7:5e:39:
37:f3:bc:90:8d:ad:40:d3:f9:15:34:d9:bf:c1:9b:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:22:00:D7:65:D3:B4:62:95:D3:0D:AA:F3:F9:FF:83:8D:D2:56:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BDF7C08EBE611F0BB5DBA95DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.84.0-154.93.86.255
154.93.92.0/23
154.93.100.0/23
154.93.104.0/23
154.93.109.0-154.93.111.255
154.93.114.0-154.93.122.255
154.93.124.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:8c:dd:4b:38:f0:9a:af:5d:d8:29:12:27:b5:db:4b:e2:df:
d0:7e:3e:9c:f9:fd:d9:98:59:19:0c:bc:62:53:eb:91:e9:f2:
cf:8a:fa:a8:6d:70:6d:d1:8e:97:17:fc:9a:9c:66:67:9e:f3:
3c:f8:47:62:a5:e9:47:99:dd:cd:83:a9:0f:93:dc:5a:41:2c:
91:2d:4d:88:47:10:51:04:6c:29:08:bc:6f:4b:68:29:1d:dd:
20:95:6f:7b:d8:b2:62:19:47:6c:a9:9d:e7:42:7f:43:99:38:
fc:9f:dc:f7:3f:5e:1a:57:e5:13:1c:e0:28:77:a3:2b:12:00:
44:0b:01:8e:5a:11:0e:9d:67:3c:91:d2:6b:28:4f:08:cb:00:
36:ec:f2:eb:0b:46:bc:0a:6d:5a:83:e4:f5:13:fc:31:4a:a4:
17:f7:92:cf:20:18:7d:5b:13:72:ea:97:dc:77:22:b2:10:a5:
07:77:8e:c0:e1:bc:43:a0:14:5c:4d:06:98:a5:07:72:09:9d:
15:e0:95:56:56:e8:4c:9b:1b:25:89:4c:cb:17:96:0c:16:30:
75:db:cd:78:d4:70:4a:2a:0e:06:32:59:ca:6d:c4:85:11:4e:
c8:20:6b:e5:84:9a:41:5d:0c:42:b6:64:1d:e2:44:05:24:db:
4b:b0:95:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 09:00:03 2026 by rpki-client