This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/246D9AF8D1B711F0873324C5DAE4EC9C.roa
File: 246D9AF8D1B711F0873324C5DAE4EC9C.roa (raw, json)
Hash identifier: uFyL2hpQrG4MQxdsxUmO0zx8VZg57gmL5HH3fzqJgzI=
Subject key identifier: AA:85:6B:CD:0C:19:37:01:5D:20:D5:6A:0E:B4:85:42:50:F0:04:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AD07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/246D9AF8D1B711F0873324C5DAE4EC9C.roa
Signing time: Fri 05 Dec 2025 08:48:17 +0000
ROA not before: Fri 05 Dec 2025 08:48:12 +0000
ROA not after: Sun 04 Jan 2026 08:48:12 +0000
asID: 151419
IP address blocks: 154.88.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109831 (0x1ad07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 5 08:48:12 2025 GMT
Not After : Jan 4 08:48:12 2026 GMT
Subject: CN=69329c51-6249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:67:3b:91:47:22:20:96:d3:50:7a:d3:41:
f9:c2:c2:53:9e:8d:7d:bd:f7:f4:ed:01:af:7c:32:
39:c8:5c:00:9f:d4:34:d2:00:3d:82:a4:00:96:95:
c7:eb:a7:db:1f:42:a9:80:eb:65:4d:d3:80:50:9c:
bb:84:2b:9e:47:e7:0a:e4:b7:11:79:f9:9f:90:ec:
42:a9:69:50:62:b1:0f:06:cb:80:5d:44:91:6b:f2:
38:ea:7c:6d:ab:e0:d4:a8:09:4e:ce:a4:2c:f6:71:
94:18:4f:74:43:d2:e4:35:ad:20:6f:15:9d:2c:49:
ae:9e:e8:c2:ca:75:90:c8:f0:b8:c4:fe:34:28:6d:
03:b0:33:3a:52:e7:a7:d7:2c:1e:dd:01:5e:ae:4d:
a6:b9:cd:b6:2c:c3:7c:78:1a:34:47:db:79:cb:3b:
16:81:dd:65:6c:80:1c:bd:99:62:da:18:de:29:27:
9b:15:0a:f6:b0:2f:86:bd:9c:25:50:fb:8f:41:c7:
f6:e0:15:41:df:02:b9:c4:0f:10:0b:7e:88:a6:c2:
de:4f:b6:73:02:2e:22:3e:5c:85:91:c9:59:bf:57:
02:6a:17:f6:6b:ac:19:1c:a6:46:16:6a:01:8e:71:
93:ef:4c:3e:3b:9d:f7:8e:36:12:29:7f:e5:c1:f9:
25:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:85:6B:CD:0C:19:37:01:5D:20:D5:6A:0E:B4:85:42:50:F0:04:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/246D9AF8D1B711F0873324C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.66.0/23
Signature Algorithm: sha256WithRSAEncryption
66:4b:74:fd:fa:1b:19:ee:bb:fb:e9:fd:40:38:bd:33:dc:a0:
3e:2b:c0:e9:c6:04:92:6e:c3:93:0e:15:48:dc:ab:df:1c:ec:
56:6c:d2:0f:48:6e:e1:b3:bd:0c:38:f1:93:93:4d:25:7f:1b:
77:f0:da:84:e9:b3:2b:ac:c9:32:d0:a8:16:69:28:f2:ee:79:
87:4f:16:95:23:39:90:4a:ce:c7:ac:9e:c4:3d:50:96:b1:e1:
b8:b8:cd:a7:52:7a:f7:7b:82:62:b8:cf:a8:27:27:d7:9e:12:
1c:af:6d:f7:86:a6:ec:ad:dc:36:6c:13:dd:f7:b4:6e:e9:23:
c4:4d:0f:57:30:c7:43:4c:c1:39:4e:b1:cf:fb:cc:c6:19:5a:
74:d5:f4:dd:5f:83:60:9c:d0:fc:09:be:4b:19:88:6e:6f:2a:
6e:3b:db:c9:31:fe:73:48:cd:58:2f:22:e9:9e:40:06:3d:0b:
e0:c8:80:5c:1d:c7:86:51:f8:8c:21:82:08:eb:aa:58:34:b3:
20:a6:87:0f:2b:50:cf:b1:86:87:ae:bb:91:3c:57:90:2a:9b:
23:8e:81:2a:18:77:03:40:6e:27:41:32:70:a5:50:f1:d7:79:
bd:58:0d:c7:c2:48:19:fe:ad:30:d4:c9:ea:6f:c8:68:d5:d7:
a3:71:f6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 09:29:27 2025 by rpki-client