This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21D8760CD02A11F085A99F89DAE4EC9C.roa
File: 21D8760CD02A11F085A99F89DAE4EC9C.roa (raw, json)
Hash identifier: tVMZlI7tZWSbhIaeWzElchdOZwC+3QSJ9MLo3vKgrkA=
Subject key identifier: E8:37:ED:3E:82:85:DE:30:1B:33:F2:E6:15:15:B8:AE:A6:1F:42:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AC27
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21D8760CD02A11F085A99F89DAE4EC9C.roa
Signing time: Wed 03 Dec 2025 09:26:23 +0000
ROA not before: Wed 03 Dec 2025 09:26:18 +0000
ROA not after: Sat 07 Mar 2026 09:26:18 +0000
asID: 18229
IP address blocks: 154.210.145.0/24 maxlen: 24
154.210.146.0/24 maxlen: 24
154.210.147.0/24 maxlen: 24
154.210.148.0/24 maxlen: 24
154.210.149.0/24 maxlen: 24
154.210.150.0/24 maxlen: 24
154.210.151.0/24 maxlen: 24
154.210.152.0/24 maxlen: 24
154.210.153.0/24 maxlen: 24
154.210.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109607 (0x1ac27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 3 09:26:18 2025 GMT
Not After : Mar 7 09:26:18 2026 GMT
Subject: CN=6930023f-4669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d6:d7:54:b8:8f:53:44:5d:51:1f:32:0c:75:
71:80:43:05:8e:f0:80:ca:3e:2f:7f:ee:f9:90:2c:
9e:93:a7:a3:1c:9d:aa:c8:fd:7b:0f:e2:4d:35:5e:
73:60:9f:c5:39:04:a4:0a:f4:cb:79:1d:45:b7:0c:
d3:fc:ee:c7:50:68:34:f3:a3:52:f7:dc:ad:22:81:
1b:22:4d:b8:27:01:7d:87:93:c8:86:be:e5:68:bc:
62:27:92:dd:ed:00:0a:18:44:7d:53:bd:56:67:0f:
b0:bf:26:a4:b6:ce:fc:78:22:43:15:78:43:47:66:
cc:64:2f:db:72:ea:a7:62:e9:40:f4:6e:0d:92:95:
c6:ba:f3:18:3e:f8:d7:29:f8:f1:5f:5a:a4:27:02:
fc:81:8e:1f:52:96:c7:6f:1c:f6:0d:fe:71:72:5e:
73:21:50:6d:ca:bc:fc:1f:44:17:c0:91:f6:e1:71:
61:09:32:7e:f0:9b:85:c2:79:df:da:e9:ba:d7:df:
3d:fb:da:2d:f8:d6:7f:b1:6b:67:df:46:62:cf:19:
ef:c4:12:33:1a:25:3a:7e:84:34:40:90:ee:75:79:
e7:67:a1:8d:ee:f0:ad:cb:ac:44:18:51:18:c7:c9:
84:b5:bc:2a:67:b3:71:88:9c:c7:5b:75:94:0f:f7:
2e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:37:ED:3E:82:85:DE:30:1B:33:F2:E6:15:15:B8:AE:A6:1F:42:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21D8760CD02A11F085A99F89DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.145.0-154.210.154.255
Signature Algorithm: sha256WithRSAEncryption
37:26:ce:07:f9:24:12:ce:54:db:b3:2b:1e:34:ac:23:b3:16:
af:d3:8e:6c:5c:c5:7d:ff:8d:c3:b2:b3:09:17:18:7f:67:92:
64:64:fd:15:a9:55:c6:67:24:e1:74:0b:be:21:55:91:92:36:
26:5a:28:01:49:0c:b0:82:12:ac:f2:47:3e:c2:a7:1f:8f:ba:
f4:d1:64:4e:08:5a:fe:84:be:0e:27:08:66:71:e7:dd:4d:fa:
50:6d:80:85:c5:b3:6d:ed:42:fa:ab:3c:aa:74:75:d6:9a:24:
e8:1d:08:93:6b:37:67:30:01:54:8b:98:9a:33:7b:69:3d:15:
ec:ca:b9:f9:49:ae:1a:8a:2a:eb:0c:a2:d3:68:34:4d:8c:2b:
4a:84:e4:14:84:42:ed:63:6d:24:e2:55:02:ff:f0:f3:15:2c:
2a:6a:99:e2:1c:a1:15:fd:05:a8:0b:36:ea:ac:2b:a7:2f:11:
f8:b7:c3:80:a9:21:a6:d8:af:8c:32:c7:3a:48:2a:d2:9e:4d:
af:45:ff:58:3f:74:8a:8d:c8:7e:04:ce:a8:00:9e:f9:1a:7a:
f4:e9:91:60:64:34:fe:11:dc:fb:5a:aa:f8:a3:2f:7c:68:a6:
27:d7:a4:7f:35:bf:49:2d:15:6e:b6:bb:a8:bb:d7:58:53:57:
33:d8:e7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:10:52 2025 by rpki-client