This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B8FA056D02E11F099FB4BA2DAE4EC9C.roa
File: 0B8FA056D02E11F099FB4BA2DAE4EC9C.roa (raw, json)
Hash identifier: KT3DEjKfdDHxYtDx+xDs7BF9hj0NyOU+hAjdBRHZTgc=
Subject key identifier: B0:B2:E2:2F:18:E6:26:6B:D5:17:8D:06:42:87:7F:52:06:09:EC:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AC2F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B8FA056D02E11F099FB4BA2DAE4EC9C.roa
Signing time: Wed 03 Dec 2025 09:54:23 +0000
ROA not before: Wed 03 Dec 2025 09:54:17 +0000
ROA not after: Sat 22 Jul 2028 09:54:17 +0000
asID: 17561
IP address blocks: 154.90.74.0/24 maxlen: 24
154.91.128.0/24 maxlen: 24
154.91.129.0/24 maxlen: 24
154.91.130.0/24 maxlen: 24
154.91.131.0/24 maxlen: 24
154.91.132.0/24 maxlen: 24
154.91.133.0/24 maxlen: 24
154.91.134.0/24 maxlen: 24
154.91.135.0/24 maxlen: 24
154.91.148.0/24 maxlen: 24
154.91.149.0/24 maxlen: 24
154.91.150.0/24 maxlen: 24
154.91.151.0/24 maxlen: 24
154.91.192.0/24 maxlen: 24
154.91.193.0/24 maxlen: 24
154.91.194.0/24 maxlen: 24
154.91.195.0/24 maxlen: 24
154.91.196.0/24 maxlen: 24
154.91.197.0/24 maxlen: 24
154.91.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109615 (0x1ac2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 3 09:54:17 2025 GMT
Not After : Jul 22 09:54:17 2028 GMT
Subject: CN=693008cf-2a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:1e:0d:ed:13:ba:f6:fe:7d:89:3d:b5:68:
e2:2a:6c:45:8f:77:fd:e8:72:89:1a:e4:f8:b4:4d:
7f:8b:c9:d2:aa:94:60:c8:f6:28:68:e4:e2:bb:90:
e0:11:a0:d2:43:ea:59:77:3b:ed:db:a4:2b:80:61:
7f:12:ad:cf:09:98:ef:78:4d:ae:6d:6b:74:eb:36:
9d:70:30:41:1a:6f:7a:ff:e5:be:ca:1b:f8:24:17:
a2:ed:4b:0a:65:99:13:c4:68:35:80:36:ee:58:f3:
76:e6:03:1f:b4:f7:e0:59:cf:67:25:40:41:f4:25:
f1:bf:97:17:af:3d:47:20:91:47:e5:f7:a3:68:69:
d5:c3:32:f3:4d:86:17:e4:a5:ff:4e:1b:b3:cf:b4:
eb:21:19:93:c2:4f:04:a9:c6:52:d8:33:99:6c:42:
32:1f:7e:22:69:15:ab:a7:84:fc:7b:bf:a0:61:63:
8d:5e:75:7d:b0:03:59:25:db:14:e0:f2:9f:0c:56:
e9:cf:35:7d:80:8a:f5:d3:f1:d2:53:a5:72:ff:58:
59:65:c8:d5:10:df:3d:fb:1a:28:86:fc:09:22:d7:
25:f4:2e:ae:6c:dc:a7:42:ce:4c:d9:1e:a1:ba:31:
93:19:62:fd:de:0b:d4:45:e8:90:b9:75:34:88:fb:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B2:E2:2F:18:E6:26:6B:D5:17:8D:06:42:87:7F:52:06:09:EC:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B8FA056D02E11F099FB4BA2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.74.0/24
154.91.128.0/21
154.91.148.0/22
154.91.192.0-154.91.198.255
Signature Algorithm: sha256WithRSAEncryption
21:3a:ef:73:72:91:b5:8e:84:db:2f:03:41:d5:6c:bc:a8:30:
9b:51:49:63:c9:ca:50:3b:b0:fe:c2:b6:e2:f3:5e:8d:57:c4:
53:d0:79:df:d6:6c:c8:7e:c5:1d:a2:38:01:9a:f7:c5:bc:e6:
d9:93:2a:46:db:0d:93:93:40:74:aa:bc:ca:18:e2:50:16:af:
f7:67:35:ac:e9:36:31:58:a4:58:53:63:33:8c:80:fd:a0:29:
25:3a:a0:50:6f:16:de:c5:5c:ef:53:28:dc:4f:d6:c7:26:03:
93:a0:1a:5d:57:28:cc:da:f1:92:96:63:45:10:2e:a8:37:ed:
bf:f2:36:61:cc:fa:fe:e9:7b:b3:cc:00:d3:5c:a9:bc:fb:c8:
fa:00:0f:cb:13:07:1c:3e:3c:c7:65:24:55:94:61:5b:da:3e:
f0:b5:01:bb:ef:40:3c:cd:b7:16:c4:1d:5d:71:f5:e3:79:c7:
ee:60:e0:53:14:0b:63:cc:8f:04:59:0b:b2:49:c1:86:12:bf:
9f:70:7c:5b:0a:59:12:bd:83:15:c8:52:79:c2:ec:2a:f8:8f:
6c:ea:9a:08:64:66:b9:27:2b:db:b6:17:53:6e:0d:50:7a:d1:
0c:5d:33:31:91:59:fe:d7:fe:9e:87:7b:f4:5b:60:c8:12:33:
91:1b:5b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:34:45 2025 by rpki-client