This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21EB5BF4D1C011F09B605D7DDAE4EC9C.roa
File: 21EB5BF4D1C011F09B605D7DDAE4EC9C.roa (raw, json)
Hash identifier: q4WyKOsVRc5JWv1I2wfI22Wl64XZ+VgjwVRQDyq43DI=
Subject key identifier: 07:00:60:11:FA:E9:44:90:38:7A:E2:06:27:D7:C0:B1:71:2C:11:E0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AD11
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21EB5BF4D1C011F09B605D7DDAE4EC9C.roa
Signing time: Fri 05 Dec 2025 09:52:39 +0000
ROA not before: Fri 05 Dec 2025 09:52:34 +0000
ROA not after: Wed 17 Dec 2025 09:52:34 +0000
asID: 138915
IP address blocks: 154.95.72.0/22 maxlen: 24
154.95.96.0/22 maxlen: 24
154.95.100.0/22 maxlen: 24
154.95.104.0/22 maxlen: 24
154.95.108.0/22 maxlen: 24
154.95.112.0/22 maxlen: 24
154.95.116.0/22 maxlen: 24
154.95.120.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109841 (0x1ad11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 5 09:52:34 2025 GMT
Not After : Dec 17 09:52:34 2025 GMT
Subject: CN=6932ab66-96f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a9:9c:11:d6:02:b7:a9:27:ca:ea:59:f2:81:
19:76:d9:b1:9f:8a:d0:42:c8:ec:bd:92:7e:bd:00:
f4:0d:dc:20:2b:85:c7:5c:26:3c:8a:75:df:39:ac:
77:5a:5a:04:f2:aa:01:e0:5f:df:30:8a:1b:cd:c6:
ae:d2:97:cf:45:7c:46:60:45:fd:c3:25:c4:90:f6:
c8:c8:a5:9a:cc:3a:cf:b4:5e:3c:cd:06:5b:ea:b3:
e1:0d:e1:5f:35:43:3f:b9:30:e6:a2:1c:7d:3c:99:
c1:15:bf:93:0d:f8:87:f8:ea:30:14:cd:82:07:ae:
4f:e4:f9:3c:5f:50:77:77:79:ef:62:33:77:7f:85:
6d:64:b6:c3:59:47:2b:d2:01:69:ce:ae:9e:6f:84:
bb:cf:52:d7:25:38:84:d4:54:7a:4b:77:3d:23:e0:
3d:d4:41:60:cf:62:fc:ac:1b:21:94:8c:24:b4:d1:
d0:f7:71:0e:e5:39:fd:5a:d7:fa:a0:af:e1:94:8d:
49:ff:39:7c:e0:37:eb:f2:aa:5f:38:87:34:fd:05:
e6:c5:bd:d3:e3:eb:71:9e:0d:b0:b9:48:0b:df:c5:
f0:49:12:1c:79:48:74:0a:bc:20:3d:16:46:21:8e:
c1:0a:4e:b0:76:ab:9e:90:fe:38:94:ae:0b:60:f5:
fe:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:00:60:11:FA:E9:44:90:38:7A:E2:06:27:D7:C0:B1:71:2C:11:E0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/21EB5BF4D1C011F09B605D7DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.72.0/22
154.95.96.0-154.95.121.255
Signature Algorithm: sha256WithRSAEncryption
7d:34:8d:5b:f9:16:d8:ec:b1:62:6f:99:21:07:6f:70:53:0b:
6f:dd:66:1c:40:87:5a:6a:c2:6f:9c:b2:da:03:de:96:5d:f9:
2f:68:77:c4:1e:64:94:72:08:1c:30:91:4e:3b:f5:8c:16:63:
81:22:eb:1b:7d:a0:2f:1f:87:d8:5e:77:a6:17:af:1b:0e:77:
84:72:a2:51:55:7c:f1:e4:79:f6:bc:56:9e:6b:16:04:90:72:
de:ac:67:60:30:e8:73:81:30:a6:ef:b9:ec:2a:e2:5f:ab:fc:
1a:d0:06:e8:73:15:44:a5:be:6e:18:00:51:45:d9:14:89:b1:
a7:16:31:c4:0a:42:27:36:5d:34:5f:49:a3:0f:5d:02:95:c0:
6c:47:38:4c:9d:90:14:63:74:7b:47:e4:cc:1d:3f:75:ff:17:
23:8b:74:c0:fd:55:18:0b:66:02:88:58:a1:04:01:9f:e3:c1:
7e:fa:a0:0d:58:48:ee:4f:89:db:79:03:d7:ab:4c:78:c2:4e:
57:0e:81:ea:8e:fb:b7:59:13:70:bb:a0:82:1b:21:7d:7a:6e:
e5:e8:65:80:59:1f:f9:9e:bf:7d:3f:75:61:5b:6d:69:03:68:
b9:98:de:6f:c2:c4:92:30:1b:be:da:d9:7b:2e:d5:0c:71:c8:
e6:05:57:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 14:16:22 2025 by rpki-client