This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68B1B702D02811F0B6F49280DAE4EC9C.roa
File: 68B1B702D02811F0B6F49280DAE4EC9C.roa (raw, json)
Hash identifier: YS/xvo/tMvNt/ncdB17+Cg9XNO5qFHrPbWMlTJ/OzAk=
Subject key identifier: A4:6C:9E:ED:F3:5A:CE:01:3E:DA:E7:E4:CD:BA:8A:18:2B:91:D4:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AC23
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68B1B702D02811F0B6F49280DAE4EC9C.roa
Signing time: Wed 03 Dec 2025 09:14:03 +0000
ROA not before: Wed 03 Dec 2025 09:13:58 +0000
ROA not after: Sat 07 Mar 2026 09:13:58 +0000
asID: 18229
IP address blocks: 154.206.22.0/24 maxlen: 24
154.206.23.0/24 maxlen: 24
154.206.29.0/24 maxlen: 24
154.210.128.0/24 maxlen: 24
154.210.129.0/24 maxlen: 24
154.210.130.0/24 maxlen: 24
154.210.131.0/24 maxlen: 24
154.210.132.0/24 maxlen: 24
154.210.133.0/24 maxlen: 24
154.210.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109603 (0x1ac23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 3 09:13:58 2025 GMT
Not After : Mar 7 09:13:58 2026 GMT
Subject: CN=692fff5a-8e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:c6:0d:44:c2:25:23:e3:ea:27:b0:4e:f0:
da:59:c4:26:ef:4f:1c:10:b9:c7:d4:1c:b8:a1:bf:
b2:e7:bc:97:38:ba:41:98:32:4e:15:7d:ec:30:31:
3c:48:8c:f3:3c:d7:79:33:34:fc:b2:94:47:b2:0f:
97:66:6c:58:35:fe:7a:f4:53:0b:98:86:3f:e8:20:
50:3e:bd:fe:2e:bc:8e:7d:58:80:2e:12:2a:dd:a3:
d3:23:ad:21:74:9d:1a:a1:d3:ee:e7:ca:77:33:16:
d8:e3:c5:7d:3f:71:41:77:0f:91:f7:f0:26:37:95:
10:ff:3f:74:b8:33:85:ec:d9:98:08:05:87:32:93:
58:20:e6:87:6a:62:23:0a:ba:24:bf:4b:58:26:33:
d9:4e:c8:90:8c:93:bc:0c:64:c5:44:12:cf:3f:c7:
43:fb:f7:8f:12:1a:8e:6e:2f:7e:35:b2:c6:0f:0e:
98:88:24:c9:0b:f1:bc:30:35:5a:71:e8:04:4f:f2:
bd:82:9a:c9:02:4c:39:bd:8a:2d:89:a9:d0:8e:3e:
28:dd:16:e2:14:1b:b0:04:77:75:f9:bc:96:c4:da:
84:1b:6e:35:93:5b:51:78:7c:f7:7a:7a:4a:c0:6b:
39:05:25:10:1e:76:8d:dd:7b:83:d2:07:7a:14:49:
a8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6C:9E:ED:F3:5A:CE:01:3E:DA:E7:E4:CD:BA:8A:18:2B:91:D4:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/68B1B702D02811F0B6F49280DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.22.0/23
154.206.29.0/24
154.210.128.0-154.210.134.255
Signature Algorithm: sha256WithRSAEncryption
b8:69:ed:1b:75:a6:b9:44:3a:29:10:fa:77:68:27:c0:db:9e:
e2:05:4c:07:a3:53:f8:72:e3:1a:54:16:e3:02:45:48:31:12:
57:9f:04:03:34:77:0e:b3:3f:ab:d7:f7:28:12:4e:b8:d0:12:
72:3c:c6:b5:38:91:ce:9f:5a:88:9d:79:6f:02:5a:9e:0a:67:
5a:8b:77:02:3f:5c:b6:71:2a:68:0c:cf:db:d1:72:b7:e8:68:
6e:1e:6e:50:08:0c:cf:00:bd:da:b6:5e:f3:89:16:9f:ee:9a:
d8:98:24:f8:2c:3e:f9:8e:b7:2c:a5:f3:2c:f4:59:25:11:a5:
9f:27:06:c8:83:1f:8c:13:df:40:4c:88:a5:7e:33:ab:4d:fd:
4d:0a:05:36:5a:7c:4e:d0:f4:3e:5c:1a:62:92:5c:73:ba:47:
7c:1b:61:02:8c:79:f8:76:b8:02:ca:cc:be:67:6b:cc:db:f5:
0e:63:0c:5e:12:84:67:56:b7:b3:d9:a8:40:16:8a:e0:2e:47:
74:54:a1:20:15:52:a1:b1:da:89:b3:de:bd:4b:fe:9e:4a:16:
65:0d:a4:49:93:f5:20:9c:76:ad:42:bd:c0:02:4c:84:51:91:
d8:6f:12:ad:cb:6b:02:21:30:17:03:3d:94:f6:27:a2:e9:45:
49:10:d7:31
-----BEGIN CERTIFICATE-----
MIIFmDCCBICgAwIBAgIDAawjMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjAzMDkxMzU4WhcNMjYwMzA3MDkxMzU4WjAYMRYw
FAYDVQQDEw02OTJmZmY1YS04ZTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw3vGDUTCJSPj6iewTvDaWcQm708cELnH1By4ob+y57yXOLpBmDJOFX3s
MDE8SIzzPNd5MzT8spRHsg+XZmxYNf569FMLmIY/6CBQPr3+LryOfViALhIq3aPT
I60hdJ0aodPu58p3MxbY48V9P3FBdw+R9/AmN5UQ/z90uDOF7NmYCAWHMpNYIOaH
amIjCrokv0tYJjPZTsiQjJO8DGTFRBLPP8dD+/ePEhqObi9+NbLGDw6YiCTJC/G8
MDVacegET/K9gprJAkw5vYotianQjj4o3RbiFBuwBHd1+byWxNqEG241k1tReHz3
enpKwGs5BSUQHnaN3XuD0gd6FEmo0QIDAQABo4ICuTCCArUwHQYDVR0OBBYEFKRs
nu3zWs4BPtrn5M26ihgrkdSNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC82OEIxQjcwMkQwMjgxMUYwQjZGNDkyODBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBms4WAwQAms4dMAwDBAea
0oADBACa0oYwDQYJKoZIhvcNAQELBQADggEBALhp7Rt1prlEOikQ+ndoJ8DbnuIF
TAejU/hy4xpUFuMCRUgxElefBAM0dw6zP6vX9ygSTrjQEnI8xrU4kc6fWoideW8C
Wp4KZ1qLdwI/XLZxKmgMz9vRcrfoaG4eblAIDM8Avdq2XvOJFp/umtiYJPgsPvmO
tyyl8yz0WSURpZ8nBsiDH4wT30BMiKV+M6tN/U0KBTZafE7Q9D5cGmKSXHO6R3wb
YQKMefh2uALKzL5na8zb9Q5jDF4ShGdWt7PZqEAWiuAuR3RUoSAVUqGx2omz3r1L
/p5KFmUNpEmT9SCcdq1CvcACTIRRkdhvEq3LawIhMBcDPZT2J6LpRUkQ1zE=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:26:20 2025 by rpki-client