This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AFC1DB2D1E111F0883AACC8DAE4EC9C.roa
File: 1AFC1DB2D1E111F0883AACC8DAE4EC9C.roa (raw, json)
Hash identifier: PdRXsfc+g9WcFKnmkwz53eTh71hM2EM/g6KtDX/swLY=
Subject key identifier: 65:E5:86:3E:1D:1B:9B:9E:A4:9D:99:31:6A:28:F5:C6:3C:45:8A:CA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AD25
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AFC1DB2D1E111F0883AACC8DAE4EC9C.roa
Signing time: Fri 05 Dec 2025 13:48:40 +0000
ROA not before: Fri 05 Dec 2025 13:48:35 +0000
ROA not after: Tue 27 Jan 2026 13:48:35 +0000
asID: 401696
IP address blocks: 154.219.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109861 (0x1ad25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 5 13:48:35 2025 GMT
Not After : Jan 27 13:48:35 2026 GMT
Subject: CN=6932e2b8-76b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:05:fd:e3:92:59:06:6d:50:28:9a:63:f7:
82:56:15:10:71:d3:29:29:45:28:c7:55:e2:cd:b0:
7a:ee:a7:23:4d:45:42:bd:3c:15:7d:c3:2b:a0:97:
5e:4d:a4:9e:06:03:0f:22:48:79:d2:3c:d9:59:f9:
9e:ec:fe:61:e4:8b:64:50:83:6b:13:12:76:c4:b7:
25:08:d1:81:6a:23:a5:a9:fa:ed:78:b7:7a:0b:85:
f4:2c:58:53:da:83:98:c8:14:23:31:ab:42:0b:fc:
d6:21:3d:75:13:57:86:7d:98:3e:3d:c2:fc:0c:e2:
30:cd:73:75:45:87:b6:4b:f7:dd:81:d2:d6:fa:40:
b0:ee:8b:aa:cc:33:55:b8:6c:6d:a4:76:c4:33:c6:
c9:ac:76:9a:92:a7:5c:c6:c8:85:e7:b1:db:65:8e:
89:a4:d1:ea:14:9d:62:9d:74:59:87:b4:6b:4d:e7:
b9:c8:0b:64:a8:75:d3:6b:c5:f4:db:b4:44:73:8b:
93:9f:9d:57:b6:e1:59:44:79:0b:3c:fc:d1:c0:cc:
82:e7:95:d9:69:56:75:a8:bc:87:6e:13:cf:52:28:
f2:f4:5b:80:88:65:a9:aa:02:1a:b5:66:69:4e:94:
17:7e:62:df:1d:42:6e:51:28:a4:f8:83:20:0c:e3:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E5:86:3E:1D:1B:9B:9E:A4:9D:99:31:6A:28:F5:C6:3C:45:8A:CA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AFC1DB2D1E111F0883AACC8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.96.0/19
Signature Algorithm: sha256WithRSAEncryption
9f:a3:86:53:65:55:b7:97:08:52:f3:fe:d6:9c:a4:39:64:b2:
b1:2b:e3:09:40:2a:fe:94:aa:44:7a:d8:7b:36:48:dc:28:fc:
29:16:08:05:ea:08:38:90:59:7d:01:0b:86:db:cb:fe:9b:6a:
0d:19:fc:c5:52:b5:96:d5:db:c4:8d:68:2c:bf:36:61:eb:08:
d5:05:fb:25:4f:f6:94:94:4b:aa:75:5f:40:a8:d3:29:82:e3:
0c:6a:92:9c:77:37:57:27:8d:4d:9a:32:c4:de:a2:55:cd:4f:
0f:b2:1e:99:e8:73:b2:bf:ad:53:0f:61:2e:46:f4:a9:7f:f3:
1f:6a:ef:a7:3e:8e:db:d3:d7:24:87:c5:e3:72:21:3d:ff:2d:
7b:80:3f:06:6f:18:86:35:3e:bc:72:0a:90:a9:11:56:1f:65:
7c:6c:32:67:99:29:96:2e:68:08:40:a7:fc:24:be:7e:80:0f:
fe:61:7f:bc:1c:f0:d8:3d:35:79:42:b2:11:bb:ef:84:8a:b1:
c2:cd:73:8d:5f:a9:9f:15:60:00:8f:c2:23:d5:5c:00:a6:5e:
72:c3:ff:c7:4a:2f:58:7e:cd:4c:e8:2a:61:7e:62:e0:38:41:
aa:a6:bf:87:f4:d0:b6:9d:0b:65:d1:e1:e7:28:f5:30:b8:05:
e4:61:22:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAa0lMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjA1MTM0ODM1WhcNMjYwMTI3MTM0ODM1WjAYMRYw
FAYDVQQDEw02OTMyZTJiOC03NmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuAoF/eOSWQZtUCiaY/eCVhUQcdMpKUUox1XizbB67qcjTUVCvTwVfcMr
oJdeTaSeBgMPIkh50jzZWfme7P5h5ItkUINrExJ2xLclCNGBaiOlqfrteLd6C4X0
LFhT2oOYyBQjMatCC/zWIT11E1eGfZg+PcL8DOIwzXN1RYe2S/fdgdLW+kCw7ouq
zDNVuGxtpHbEM8bJrHaakqdcxsiF57HbZY6JpNHqFJ1inXRZh7RrTee5yAtkqHXT
a8X027REc4uTn51XtuFZRHkLPPzRwMyC55XZaVZ1qLyHbhPPUijy9FuAiGWpqgIa
tWZpTpQXfmLfHUJuUSik+IMgDOMylwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGXl
hj4dG5uepJ2ZMWoo9cY8RYrKMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xQUZDMURCMkQxRTExMUYwODgzQUFDQzhEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmttgMA0GCSqGSIb3DQEB
CwUAA4IBAQCfo4ZTZVW3lwhS8/7WnKQ5ZLKxK+MJQCr+lKpEeth7NkjcKPwpFggF
6gg4kFl9AQuG28v+m2oNGfzFUrWW1dvEjWgsvzZh6wjVBfslT/aUlEuqdV9AqNMp
guMMapKcdzdXJ41NmjLE3qJVzU8Psh6Z6HOyv61TD2EuRvSpf/Mfau+nPo7b09ck
h8XjciE9/y17gD8GbxiGNT68cgqQqRFWH2V8bDJnmSmWLmgIQKf8JL5+gA/+YX+8
HPDYPTV5QrIRu++EirHCzXONX6mfFWAAj8Ij1VwApl5yw//HSi9Yfs1M6CphfmLg
OEGqpr+H9NC2nQtl0eHnKPUwuAXkYSLL
-----END CERTIFICATE-----
Generated at Sat Dec 6 20:30:39 2025 by rpki-client