This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E882C646F05911F08EB51382DAE4EC9C.roa
File: E882C646F05911F08EB51382DAE4EC9C.roa (raw, json)
Hash identifier: PrhyuJxaCH9Ta5lM+zANsvmFAbFSe9Yk5EuFR4T55Mw=
Subject key identifier: 1C:7B:12:83:6A:F7:48:18:9A:DF:85:76:39:A8:43:9B:3C:EC:B4:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B467
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E882C646F05911F08EB51382DAE4EC9C.roa
Signing time: Tue 13 Jan 2026 08:28:59 +0000
ROA not before: Tue 13 Jan 2026 08:28:55 +0000
ROA not after: Mon 09 Feb 2026 08:28:55 +0000
asID: 401696
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 20 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111719 (0x1b467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 13 08:28:55 2026 GMT
Not After : Feb 9 08:28:55 2026 GMT
Subject: CN=6966024b-6c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d2:65:73:2e:8a:da:5e:08:35:e2:e9:76:1c:
64:91:d0:ff:90:45:ef:6d:55:4e:44:44:ea:8d:c2:
84:11:74:db:1e:5b:92:31:e7:3a:8b:36:82:6e:4c:
6e:7d:51:44:4f:1d:05:e1:d1:ad:a4:87:43:04:5a:
c9:2f:bd:9c:fe:30:fe:d8:f2:a2:9c:ed:e9:11:66:
0e:44:41:4f:f4:ce:36:68:fe:c4:5d:65:3e:a4:52:
14:e6:e6:11:6d:88:b8:f3:33:eb:13:34:a8:00:8e:
f1:8d:12:e4:69:30:66:d5:af:33:c6:cb:92:0a:1c:
0e:0d:4f:d3:c5:6b:0e:4e:1c:b4:14:3b:08:cb:78:
c9:5e:93:78:5e:fa:b7:44:81:77:b3:f3:21:d0:f3:
0b:37:f8:b5:ab:91:77:57:b2:09:35:fd:da:e8:a5:
a6:95:27:b8:b7:64:05:76:ef:80:49:bb:cb:ff:9a:
f8:c5:62:3d:da:dd:46:2d:2e:a4:60:f6:ab:f3:a1:
4f:68:cf:81:ca:a1:55:c3:82:42:bb:d0:dd:a5:aa:
cd:ac:2f:d3:0c:04:8c:1d:ce:5a:b5:ef:3d:a1:08:
0e:84:8f:2c:b0:3d:9a:8d:04:b9:57:2c:5c:94:c8:
0d:e0:6d:3d:d6:d5:a9:3c:21:c9:9c:f6:de:66:a2:
54:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7B:12:83:6A:F7:48:18:9A:DF:85:76:39:A8:43:9B:3C:EC:B4:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E882C646F05911F08EB51382DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b7:f5:8e:90:a7:9b:1d:b1:c4:48:bf:53:a1:3b:c4:8c:3a:dd:
fe:74:4c:32:34:e3:41:b4:83:2e:1c:83:47:25:7f:95:de:ed:
2b:f6:73:65:ff:5f:06:42:f2:58:89:33:9e:86:48:87:f8:69:
00:58:94:d7:44:96:e8:a4:82:2d:6b:2b:0c:5f:9f:a2:db:85:
30:91:82:d4:c2:a1:3e:91:e2:8f:93:59:78:46:66:d1:cf:e8:
07:c6:d2:c0:e7:8f:e5:3c:86:74:5c:0a:b3:69:60:76:c3:70:
ab:71:6b:3a:ec:ea:43:9e:a2:8a:61:ee:34:9f:a8:f7:9c:ba:
dd:0a:bb:db:fd:67:f3:d0:a0:90:67:31:b5:5e:55:21:9c:23:
24:f6:f1:52:19:82:dd:65:83:18:50:6f:c5:8f:29:08:60:86:
19:8b:d2:0e:93:a6:e9:6d:00:4d:e4:43:1a:84:71:6a:e5:9d:
92:c1:aa:a1:77:01:9e:ac:3b:98:c5:35:07:17:e7:68:a8:33:
85:f4:8e:68:b7:e2:c3:91:69:93:a4:4a:df:db:da:cc:12:14:
f3:1c:87:62:9b:dd:13:cc:76:2d:8a:bf:63:4a:18:00:f7:06:
20:f6:c3:ba:04:01:2e:aa:9e:e2:0f:71:07:b9:76:7d:20:6d:
fe:0e:d7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:54:55 2026 by rpki-client