This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1387E9E6D06311F0BA6543E7DAE4EC9C.roa
File: 1387E9E6D06311F0BA6543E7DAE4EC9C.roa (raw, json)
Hash identifier: kjUcwVNDNBsuyNY9PU8fzZEqDmU7aoxEwTff/u33N4Y=
Subject key identifier: 84:10:61:A6:D7:3F:BD:D3:21:C9:6E:DE:D0:2D:6B:8A:F1:4E:BB:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01ACAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1387E9E6D06311F0BA6543E7DAE4EC9C.roa
Signing time: Wed 03 Dec 2025 16:14:00 +0000
ROA not before: Wed 03 Dec 2025 16:13:55 +0000
ROA not after: Sun 19 Nov 2028 16:13:55 +0000
asID: 17561
IP address blocks: 154.193.63.0/24 maxlen: 24
154.193.64.0/24 maxlen: 24
154.193.65.0/24 maxlen: 24
154.193.66.0/24 maxlen: 24
154.193.67.0/24 maxlen: 24
154.193.68.0/24 maxlen: 24
154.193.69.0/24 maxlen: 24
154.193.70.0/24 maxlen: 24
154.193.71.0/24 maxlen: 24
154.193.72.0/24 maxlen: 24
154.193.73.0/24 maxlen: 24
154.193.74.0/24 maxlen: 24
154.193.75.0/24 maxlen: 24
154.193.76.0/24 maxlen: 24
154.193.77.0/24 maxlen: 24
154.193.78.0/24 maxlen: 24
154.193.79.0/24 maxlen: 24
154.193.80.0/24 maxlen: 24
154.193.81.0/24 maxlen: 24
154.193.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109740 (0x1acac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 3 16:13:55 2025 GMT
Not After : Nov 19 16:13:55 2028 GMT
Subject: CN=693061c8-3f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:c1:ca:bf:65:d3:ba:14:6f:20:21:2c:48:
3c:f2:7c:42:09:23:08:70:86:c5:7f:9b:90:9d:31:
52:d4:89:ee:a0:03:e4:52:ea:d4:1f:67:fa:41:f1:
2c:a4:28:19:1f:80:3a:58:70:94:dc:64:2e:24:76:
0a:b6:cc:2b:78:83:a2:60:11:b3:47:b7:58:07:cd:
e6:38:53:59:49:03:67:24:9b:ac:f5:0e:05:57:09:
17:bd:dd:bd:3e:60:65:99:46:3e:84:d4:0b:5a:36:
66:a2:22:ce:59:6f:7b:ae:5d:14:69:66:73:f2:af:
82:5e:3d:21:3f:6e:dc:2f:8d:e8:22:d7:6b:80:d2:
2a:16:b4:41:89:10:38:54:f5:f4:68:e5:08:22:ed:
6c:d0:29:9e:88:10:69:8b:2a:09:c7:c3:71:9c:8a:
90:c5:4d:02:ac:91:9e:c2:65:f7:15:58:2a:99:03:
bc:59:8b:92:18:7d:4c:2f:f8:ff:5a:3b:c6:83:fc:
e4:c2:ea:6b:2f:78:7a:f2:37:43:64:dc:c2:2a:db:
59:a6:a5:03:05:4a:e2:5c:d1:2a:b0:33:0b:07:f4:
8e:c9:7d:64:2a:84:2c:dc:fa:98:e1:07:cb:67:87:
bf:4e:00:56:a9:89:30:a2:42:ab:b9:cc:d6:fc:27:
a1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:10:61:A6:D7:3F:BD:D3:21:C9:6E:DE:D0:2D:6B:8A:F1:4E:BB:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1387E9E6D06311F0BA6543E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.63.0-154.193.82.255
Signature Algorithm: sha256WithRSAEncryption
ad:85:06:2b:d0:55:74:e2:38:6d:07:b8:14:96:4a:ff:44:cb:
ab:ca:55:63:95:90:6c:75:be:b4:32:d2:58:ca:79:25:4f:c5:
ba:f4:1b:86:47:fc:bc:05:a4:75:fc:8f:ff:14:a3:96:7a:e0:
40:a5:d9:e1:fa:a4:23:85:8b:71:81:c2:98:2c:46:4d:66:90:
5c:48:da:56:e6:eb:d2:79:cd:a4:55:66:69:00:83:3c:12:39:
80:01:27:6e:cc:03:ea:f3:3e:e1:58:d1:7e:06:75:31:c2:80:
e2:a6:bc:6e:cd:09:d7:42:55:18:ab:bf:87:0d:6a:2a:d5:0f:
62:48:8b:21:e5:c5:95:36:f6:9f:59:c0:46:cc:4a:f7:40:bb:
5b:16:43:ed:3e:9d:20:73:a8:0a:ec:4a:82:33:8f:c8:64:8a:
c6:ba:c0:c6:d7:98:71:c2:5c:74:7f:c9:48:e7:1d:d0:4f:de:
6c:91:90:bc:d0:8f:19:6b:aa:dd:88:3d:78:88:57:47:74:ba:
f1:5a:de:83:ca:44:84:f6:42:16:92:37:a6:08:aa:7e:36:d9:
0c:a7:4f:26:3a:d9:a0:6c:83:33:ca:4c:6e:8e:a1:20:f7:fc:
b7:b1:ed:7c:c5:4f:c1:ea:6e:41:aa:02:96:56:f4:2f:fe:6d:
bd:fe:9b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:10:58 2025 by rpki-client