This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFB88052F12D11F086B48D97DAE4EC9C.roa
File: EFB88052F12D11F086B48D97DAE4EC9C.roa (raw, json)
Hash identifier: Ktass7FXjhAlhJ20qXGHRXGObAPghOTuhpQjvusQ5AE=
Subject key identifier: A3:F7:52:BC:F9:82:B0:AA:3F:4B:FC:FC:99:39:97:09:D6:F8:B1:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B4A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFB88052F12D11F086B48D97DAE4EC9C.roa
Signing time: Wed 14 Jan 2026 09:46:45 +0000
ROA not before: Wed 14 Jan 2026 09:46:40 +0000
ROA not after: Fri 27 Feb 2026 09:46:40 +0000
asID: 40779
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 20 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111779 (0x1b4a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jan 14 09:46:40 2026 GMT
Not After : Feb 27 09:46:40 2026 GMT
Subject: CN=69676605-92f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c2:1a:3b:0e:a6:57:e9:01:81:28:6b:1b:6d:
3b:92:0c:de:43:7c:6b:73:50:fb:aa:c6:f5:61:58:
79:bf:35:10:7f:83:6a:0a:c8:5e:5b:68:54:54:47:
ed:9c:ec:0d:8b:ce:6a:73:be:40:e9:2b:e6:e5:8b:
4d:12:4f:a0:0a:d5:5b:38:10:31:6e:38:1a:07:7f:
d4:dd:f6:51:af:92:aa:3d:dd:20:ae:45:4a:85:35:
5f:89:81:2b:0b:94:96:8c:54:8d:c5:b5:87:27:f0:
70:b6:81:bb:25:d3:df:4e:86:8f:e3:53:83:eb:22:
18:32:00:e7:f2:22:66:a5:4d:98:e0:17:a3:88:af:
8f:d8:d1:84:26:6b:c5:85:55:cf:8d:94:cb:0b:6d:
6f:d5:8e:7b:a0:0c:0e:18:b9:fd:2f:53:d8:73:11:
65:06:33:21:47:b6:eb:1e:c3:84:11:27:89:5d:97:
c1:83:c6:34:c9:04:f6:a1:68:75:c7:4b:c0:ac:42:
8d:e5:b0:f8:b1:43:a2:66:d4:e9:9b:79:f7:20:7e:
eb:08:0f:ce:1d:f2:52:65:1f:27:29:7c:00:7c:40:
54:c0:22:56:ab:9a:63:eb:63:bf:b8:05:7b:24:21:
b5:ae:dd:80:c5:10:f2:fe:5a:c7:89:00:c8:32:82:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F7:52:BC:F9:82:B0:AA:3F:4B:FC:FC:99:39:97:09:D6:F8:B1:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EFB88052F12D11F086B48D97DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
55:48:a4:49:9b:33:a2:1e:96:22:74:47:d9:74:75:df:73:76:
30:6e:f8:6d:1e:2c:ea:b2:31:e2:d7:ad:d8:1a:5e:4c:2e:eb:
d3:2d:84:29:8e:c9:ae:58:36:05:f2:f3:03:9f:6e:45:7a:35:
fa:78:08:9d:93:46:56:25:4d:22:69:b1:97:27:c2:39:55:68:
13:c7:bc:f9:fa:15:21:1b:fd:ec:0c:56:38:89:c7:e4:9e:f0:
b4:7b:1d:33:a5:1f:87:54:71:8e:fc:09:e9:3b:66:a8:04:20:
34:53:03:92:2f:41:51:0a:02:5c:5f:70:34:2a:35:6b:ce:aa:
10:31:e9:0f:36:a7:22:e1:fc:2a:4e:76:2b:ee:9f:1a:76:69:
d6:6c:a8:f6:3e:60:fa:e4:6f:70:1d:b9:ec:80:e1:98:3b:92:
16:52:ac:4c:75:a0:78:03:74:1c:3d:dd:38:c1:9a:41:1e:eb:
4e:28:65:11:7e:16:76:2c:a9:a6:88:80:7f:1c:f2:46:a3:3a:
a9:61:a8:a1:81:c9:f6:ce:88:9e:a1:7c:49:ee:01:b1:08:e9:
c8:d9:b3:94:c0:6a:61:df:49:7f:a2:e0:d5:3c:16:5a:97:b3:
c1:2c:ca:b8:dd:44:e9:a4:4b:2e:72:40:ff:0c:37:11:2d:93:
32:9b:85:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 08:54:51 2026 by rpki-client