This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4020A62F2C511F0985FACC0DAE4EC9C.roa
File: B4020A62F2C511F0985FACC0DAE4EC9C.roa (raw, json)
Hash identifier: 1ErPo4P6LFCqBGHZLrlJzMAEzgNR1Lxnu7ENAgv4oEg=
Subject key identifier: A5:D3:79:BF:27:1A:2B:90:CA:FF:C3:88:6D:12:CA:35:2D:65:D2:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B4F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4020A62F2C511F0985FACC0DAE4EC9C.roa
Signing time: Fri 16 Jan 2026 10:25:39 +0000
ROA not before: Fri 16 Jan 2026 10:25:34 +0000
ROA not after: Fri 20 Feb 2026 10:25:34 +0000
asID: 20326
IP address blocks: 154.198.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 20 Jan 2026 07:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111858 (0x1b4f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 16 10:25:34 2026 GMT
Not After : Feb 20 10:25:34 2026 GMT
Subject: CN=696a1223-2f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:43:f1:23:ed:c6:b0:29:99:2d:84:b3:aa:10:
32:6b:9e:62:f2:02:a6:50:05:31:8d:46:be:5b:6b:
32:2d:8a:d9:b6:3d:bf:d1:27:0d:2a:41:d8:6a:7b:
bb:ca:4d:5e:38:25:bf:07:7f:c6:57:c9:5d:1c:ec:
da:c7:9a:71:3d:f5:a8:e4:c2:01:92:3c:cc:35:95:
88:3b:5e:ee:eb:4b:e0:62:87:45:bc:1c:9f:ca:5d:
89:13:ab:03:db:c1:23:98:98:cb:f5:51:61:43:0c:
06:4f:60:ac:3b:a0:51:ce:c7:b0:19:25:7d:d9:6b:
2f:fc:96:3b:f0:d0:12:b1:cb:ca:20:ad:1e:69:86:
78:40:49:20:84:f8:52:0d:79:1e:b2:c1:df:b9:4e:
cd:ee:55:72:09:3e:e8:5f:03:b9:ab:99:86:6e:5a:
9e:20:a9:a8:b6:9e:6f:92:d3:af:f6:a4:bc:cf:0e:
7e:67:55:d7:32:9a:b3:ec:f2:b5:48:60:c3:85:b1:
25:60:20:d9:37:5f:7c:69:a3:25:9a:a5:bf:62:22:
5d:5a:0a:eb:f8:16:56:82:02:c1:ea:56:46:a8:f5:
ef:a2:e9:74:ff:6f:cb:65:d3:2b:74:93:4c:0b:9d:
eb:14:5b:3d:09:f1:11:35:f3:5d:0e:32:39:16:4a:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D3:79:BF:27:1A:2B:90:CA:FF:C3:88:6D:12:CA:35:2D:65:D2:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4020A62F2C511F0985FACC0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.176.0/21
Signature Algorithm: sha256WithRSAEncryption
8a:c2:96:19:25:f7:13:e4:73:69:d7:fa:1f:fe:ff:74:d6:c1:
32:08:40:95:a3:a0:71:d4:c6:2b:73:89:77:80:eb:cc:2b:52:
61:27:03:13:a8:12:a5:55:62:de:0c:62:54:8a:02:76:02:e3:
83:7b:08:90:41:70:e6:84:80:e3:10:36:8a:e4:65:c8:9b:c7:
84:33:8e:f2:c0:59:23:ca:7c:17:21:65:9a:51:e2:b5:19:3a:
60:e1:0d:ef:68:d7:5a:f1:b7:fa:36:83:0f:2e:82:6e:93:62:
72:30:b6:ff:48:78:dd:3a:22:44:0e:11:c2:30:4a:42:79:e2:
59:ff:0f:62:b2:7c:55:ae:00:e1:2b:d5:91:ec:1d:2d:d4:36:
5d:d3:5c:dd:f5:e6:be:52:1b:de:a0:a5:c8:dd:ab:c4:83:49:
aa:c7:fd:30:a8:73:dc:3e:c3:c1:01:80:47:17:a7:a3:dd:f8:
4d:b3:11:9f:72:7c:f9:13:ee:7a:ab:29:9c:5d:7a:5b:2a:c0:
13:46:1d:7e:7f:bd:46:ce:e7:9c:e9:12:2e:4f:fb:ac:38:71:
7a:25:a2:b2:fb:6e:dd:8c:c6:6f:a3:d6:04:ae:7b:1a:5a:68:
08:3c:57:08:f9:6b:a0:84:46:98:a9:99:09:77:7c:e0:b0:a0:
eb:6f:e8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 11:04:00 2026 by rpki-client