This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/239AA8F0D40F11F0B8954CF0DAE4EC9C.roa
File: 239AA8F0D40F11F0B8954CF0DAE4EC9C.roa (raw, json)
Hash identifier: AVo9BWOfHBU/D424XnYwyQ1vth4+dkchXbk3UjYo/TU=
Subject key identifier: 5D:16:C5:56:17:F7:93:56:C9:98:8E:57:D0:85:2B:67:5A:91:EB:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AD47
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/239AA8F0D40F11F0B8954CF0DAE4EC9C.roa
Signing time: Mon 08 Dec 2025 08:23:14 +0000
ROA not before: Mon 08 Dec 2025 08:23:09 +0000
ROA not after: Wed 14 Jan 2026 08:23:09 +0000
asID: 139880
IP address blocks: 154.209.160.0/19 maxlen: 24
154.214.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Dec 2025 00:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109895 (0x1ad47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 08:23:09 2025 GMT
Not After : Jan 14 08:23:09 2026 GMT
Subject: CN=69368af2-bf47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:ad:62:dd:c9:8c:ba:e5:ce:7d:19:45:99:
db:80:a1:90:fe:ad:e3:d3:96:49:c6:99:bc:4c:a2:
a6:72:da:ba:02:52:ce:a9:04:57:37:84:05:af:f4:
c8:68:ae:db:41:bd:55:cc:7e:5c:c6:3d:1a:61:91:
18:36:7c:d8:b9:ca:37:14:79:66:dc:48:c2:50:43:
39:cd:36:ac:72:dd:d7:be:7a:5e:b3:fb:5a:3d:c4:
49:a9:7c:81:cb:ff:24:5a:14:95:33:37:28:ce:f0:
95:6a:28:ae:ae:36:20:26:cc:41:fa:0b:57:f3:af:
d9:7f:4f:97:f3:bc:e2:ea:ba:57:9e:a3:36:07:5f:
e1:d0:66:96:6e:0b:cf:fa:d4:dd:13:09:da:e7:f0:
92:86:22:db:92:81:e4:d5:3b:3e:d1:b3:77:06:07:
0b:b5:fb:c2:12:fa:8d:13:09:e3:ed:6a:20:9c:ff:
1c:b5:1b:94:8b:1c:a0:5a:a8:f6:4f:e0:7c:8b:6a:
2b:1c:11:9e:d3:76:8a:d9:eb:05:9c:76:8e:31:27:
5d:32:a7:c7:07:52:b4:0c:f3:ac:df:e2:ce:0d:8b:
01:21:8d:50:75:f6:08:ab:c7:49:b4:3e:08:05:03:
20:1d:08:ea:fa:6a:58:43:d4:19:f0:ab:a8:0a:92:
65:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:16:C5:56:17:F7:93:56:C9:98:8E:57:D0:85:2B:67:5A:91:EB:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/239AA8F0D40F11F0B8954CF0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.160.0/19
154.214.64.0/18
Signature Algorithm: sha256WithRSAEncryption
ba:b2:48:4c:ce:80:8e:78:62:3f:c1:84:48:fa:cc:f1:8b:86:
9f:9f:3e:ff:66:93:00:b6:43:3a:b8:f0:49:b7:79:10:70:53:
1a:29:3c:fb:bd:ed:1c:48:4b:79:7e:56:b2:30:25:12:66:a2:
e3:47:c3:86:42:e9:ca:dd:3e:07:3c:30:bb:72:02:ac:7f:73:
24:50:88:21:95:87:9d:3e:8e:a0:ef:d2:c5:6c:16:ed:33:8c:
c4:a3:22:e9:45:14:46:8b:ab:77:e4:1d:1d:d8:54:8c:f6:34:
3e:7c:27:47:11:7b:ef:de:97:80:42:54:25:89:0b:30:25:0d:
40:8a:93:f2:8c:b9:74:76:75:2c:ac:2b:df:10:c7:50:ed:50:
8a:15:7c:cb:37:b7:8d:f5:69:be:2d:95:a1:94:71:b0:57:db:
2f:a7:11:2c:e8:9a:d5:ac:a9:48:0d:35:ac:5b:3a:04:29:b1:
e0:42:a0:01:81:46:5c:d1:4e:e3:10:ff:12:d3:82:d4:ba:41:
48:6a:18:97:68:6b:ec:1f:5a:e1:be:1c:e8:91:4e:86:37:d3:
98:bb:eb:8b:16:97:2e:32:81:4b:1c:cb:9e:93:25:f0:17:7a:
9a:c2:40:c8:b2:a0:30:72:92:03:1a:7d:fe:6e:88:aa:b5:55:
9f:a3:ca:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:07:21 2025 by rpki-client