This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/040CA91CD06211F0ACE86FDFDAE4EC9C.roa
File: 040CA91CD06211F0ACE86FDFDAE4EC9C.roa (raw, json)
Hash identifier: brm+N9gYQhISy78YXDyI8rGBH9U+mV24ZUFOM/GvSYo=
Subject key identifier: FE:E9:3F:FD:CB:01:C0:D4:8A:E6:A0:E7:8F:7C:E6:B4:57:35:AC:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01ACA8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/040CA91CD06211F0ACE86FDFDAE4EC9C.roa
Signing time: Wed 03 Dec 2025 16:06:24 +0000
ROA not before: Wed 03 Dec 2025 16:06:17 +0000
ROA not after: Sun 19 Nov 2028 16:06:17 +0000
asID: 17561
IP address blocks: 154.193.34.0/24 maxlen: 24
154.193.36.0/24 maxlen: 24
154.193.37.0/24 maxlen: 24
154.193.41.0/24 maxlen: 24
154.193.42.0/24 maxlen: 24
154.193.43.0/24 maxlen: 24
154.193.44.0/24 maxlen: 24
154.193.45.0/24 maxlen: 24
154.193.46.0/24 maxlen: 24
154.193.47.0/24 maxlen: 24
154.193.48.0/24 maxlen: 24
154.193.49.0/24 maxlen: 24
154.193.50.0/24 maxlen: 24
154.193.55.0/24 maxlen: 24
154.193.56.0/24 maxlen: 24
154.193.57.0/24 maxlen: 24
154.193.58.0/24 maxlen: 24
154.193.59.0/24 maxlen: 24
154.193.60.0/24 maxlen: 24
154.193.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109736 (0x1aca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 3 16:06:17 2025 GMT
Not After : Nov 19 16:06:17 2028 GMT
Subject: CN=69306000-ddb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:05:b1:cf:4b:cf:c3:1b:bb:3b:42:03:f5:c6:
0f:8f:7b:e0:24:dc:e8:91:db:8e:ba:c2:b3:99:a7:
12:8f:be:dc:2a:1a:2d:c1:96:72:a7:18:67:9f:66:
66:ab:25:a0:73:72:f4:e1:cc:97:28:d6:62:6d:9c:
62:bd:d6:80:3c:bb:7c:82:f3:a3:87:a2:32:67:48:
b8:2c:84:18:3a:8a:a1:33:6b:bb:2f:64:08:67:2b:
d4:cd:c9:cc:e0:2c:0e:9c:5c:68:1f:50:2e:36:08:
a0:60:df:d8:ac:6b:8c:c6:f3:1b:9c:e7:a5:81:32:
60:0e:f8:bc:ac:3b:c6:89:a6:d9:b0:c9:d8:8f:1f:
84:04:14:14:9e:2d:51:9c:7b:bf:bc:57:b0:93:1a:
72:30:2f:75:93:38:db:17:ca:60:c3:00:dd:c4:c3:
c1:e1:33:7d:f9:91:46:43:92:38:55:8c:36:09:c0:
68:fc:b1:7e:9b:3e:ce:76:a9:c2:8d:b9:8b:4e:47:
b2:d2:4b:f0:46:87:ac:e6:ad:1e:f0:f5:ef:60:60:
e8:5c:4f:6f:b9:95:52:89:f7:5f:68:a8:40:1c:4c:
ce:a0:48:56:88:2a:fa:89:b2:c1:e8:5c:fa:eb:41:
ad:2f:39:07:f1:6d:46:27:2e:4c:50:a2:53:8d:e8:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E9:3F:FD:CB:01:C0:D4:8A:E6:A0:E7:8F:7C:E6:B4:57:35:AC:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/040CA91CD06211F0ACE86FDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.34.0/24
154.193.36.0/23
154.193.41.0-154.193.50.255
154.193.55.0-154.193.61.255
Signature Algorithm: sha256WithRSAEncryption
26:98:ac:3b:54:6b:dd:d1:b5:21:b1:60:06:68:ed:0a:7a:1e:
80:60:19:ff:d6:05:3e:1f:ff:47:04:ec:e3:13:72:3a:e7:6e:
a8:d0:f5:2e:1a:e9:b3:d9:03:5d:2f:0f:28:82:79:7e:41:37:
23:b8:87:88:7a:70:10:9c:af:c2:a2:8f:5f:cf:9e:2e:91:7f:
d3:82:cc:2e:e7:01:57:6f:c8:31:de:48:4d:22:1e:f3:b7:b5:
0b:1f:c1:00:f9:8e:96:f2:9d:b0:13:fb:63:22:76:4a:9a:69:
5c:e0:e8:66:e9:d4:14:a6:58:e1:8e:c0:bf:02:0b:b6:07:05:
02:10:b4:ae:a4:92:90:93:ed:1b:e1:74:12:6a:53:8f:b5:ab:
82:86:f5:d8:17:77:a9:c9:1a:25:0a:7f:0b:f2:c2:5b:a0:52:
2c:08:fa:6c:02:bb:30:e1:fa:62:c3:6d:ed:98:a0:a5:80:80:
b6:ef:df:74:71:a1:a8:e1:e2:75:21:6d:36:90:66:cf:d3:7b:
73:30:71:c8:ae:77:fb:85:ac:2a:9c:83:a3:42:22:56:93:b0:
e9:61:8a:3f:4e:62:c8:dc:c1:36:55:74:96:6c:8f:34:b9:ac:
c3:8f:9b:09:f6:15:95:d6:21:0f:70:17:9a:da:57:e3:e0:c5:
c2:70:94:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:11:11 2025 by rpki-client