This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D18AEECE38E11F0A347E5A2DAE4EC9C.roa
File: 8D18AEECE38E11F0A347E5A2DAE4EC9C.roa (raw, json)
Hash identifier: WIyAs8VzJeNK2Ur4BAjj78BPh+0Pby/MkO0hTbNIwiI=
Subject key identifier: 60:8E:7B:88:82:CB:48:E9:5D:F9:66:F3:54:74:53:CA:6C:89:29:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B17F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D18AEECE38E11F0A347E5A2DAE4EC9C.roa
Signing time: Sun 28 Dec 2025 01:43:04 +0000
ROA not before: Sun 28 Dec 2025 01:42:59 +0000
ROA not after: Thu 05 Feb 2026 01:42:59 +0000
asID: 15221
IP address blocks: 154.198.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 13 Jan 2026 00:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110975 (0x1b17f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 28 01:42:59 2025 GMT
Not After : Feb 5 01:42:59 2026 GMT
Subject: CN=69508b28-28a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0b:54:04:5b:29:6c:22:49:64:12:89:9f:7b:
b6:3f:13:2f:18:07:fc:67:0d:66:bb:d0:9a:6f:1d:
bf:5f:fd:1b:ca:b0:fd:4b:d8:66:84:89:03:6e:16:
e5:94:d5:3b:cd:e9:5e:a3:96:16:1b:44:3c:bd:e7:
61:8a:08:85:10:1e:b0:10:14:be:8d:0e:bd:0e:bf:
a7:a1:d6:83:4a:4e:da:b3:e2:89:4b:74:c4:0c:54:
17:25:9e:9f:15:5a:41:56:8e:b7:0b:f2:cf:18:aa:
d3:ce:e0:59:d5:22:37:66:d4:ac:44:b4:f0:46:d8:
8f:10:4b:b7:58:d0:ca:4f:7b:a4:8b:f3:a7:a7:6f:
2d:dd:f2:54:db:ce:ff:6d:2f:b6:b7:01:06:40:01:
17:55:55:ab:9a:48:b7:f1:60:1c:94:86:e6:bd:02:
cf:02:f4:b8:ab:c5:ac:02:80:55:cc:c4:69:8a:4f:
4b:f2:17:cf:f9:62:81:60:d9:6a:55:fc:cb:e0:20:
10:16:c6:ca:c0:9b:81:d4:07:bf:c5:a6:bb:aa:27:
5a:b6:58:87:3b:29:61:2d:e2:24:6b:6f:15:89:3e:
d6:0a:ab:38:ff:da:69:1a:7e:9a:f3:19:83:b4:1d:
3f:26:3c:a7:fa:05:81:f1:ff:ee:84:c2:ef:70:0d:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8E:7B:88:82:CB:48:E9:5D:F9:66:F3:54:74:53:CA:6C:89:29:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D18AEECE38E11F0A347E5A2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.32.0/22
Signature Algorithm: sha256WithRSAEncryption
04:56:45:e1:51:81:e6:15:d1:da:9b:2d:a4:1b:0c:e9:4b:01:
e2:01:38:26:fd:85:9a:c3:3e:ca:54:da:03:e7:22:9d:2a:be:
48:a2:3e:22:d7:e7:7d:6e:20:10:45:de:9a:4c:f2:7e:78:e8:
37:ee:2b:48:06:71:2f:38:8f:d7:6a:b7:3a:bc:10:c6:e8:63:
96:a5:b3:44:ec:41:f4:f2:06:6a:ea:86:1f:ee:88:31:b9:e7:
c2:3b:4b:00:4b:14:c2:b1:11:90:45:6a:be:67:7e:8c:19:31:
18:80:67:0c:14:85:d3:94:4d:78:22:c6:99:87:99:06:84:92:
e1:b3:7a:4e:32:34:5c:db:e9:01:03:57:54:82:e3:15:fe:d3:
33:39:1d:b9:ca:94:a2:33:cd:41:b9:26:0e:37:a4:2d:3d:bd:
cd:1b:27:33:7f:f5:5b:b5:f8:f2:8b:1c:b4:8e:35:e5:70:ac:
d6:fd:26:7e:56:71:a5:c5:34:b1:51:fd:45:4b:a5:5b:f2:f1:
6c:e4:6d:19:2b:22:d1:db:f2:e8:38:1c:99:b2:f5:d9:2a:65:
17:7a:92:cd:35:c6:b4:0e:cc:95:1d:3a:67:06:f4:ce:f4:b9:
a8:c4:c1:08:58:6e:65:d1:6d:4a:c8:f9:c1:5c:6d:51:69:a5:
52:62:33:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:15:07 2026 by rpki-client