This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BF1EAB2D03611F09CE2BFD4DAE4EC9C.roa
File: 8BF1EAB2D03611F09CE2BFD4DAE4EC9C.roa (raw, json)
Hash identifier: +/Wo7sAOL4DTRXZCyV3lCEoF4RQb9rhQQYPKj7qqI4M=
Subject key identifier: 93:85:97:8A:89:EB:77:EA:23:4A:16:CC:3E:AE:6A:56:7B:B8:92:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AC48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BF1EAB2D03611F09CE2BFD4DAE4EC9C.roa
Signing time: Wed 03 Dec 2025 10:55:15 +0000
ROA not before: Wed 03 Dec 2025 10:55:00 +0000
ROA not after: Sat 18 Nov 2028 10:55:00 +0000
asID: 17561
IP address blocks: 154.89.222.0/24 maxlen: 24
154.89.223.0/24 maxlen: 24
154.92.1.0/24 maxlen: 24
154.92.112.0/24 maxlen: 24
154.92.113.0/24 maxlen: 24
154.92.114.0/24 maxlen: 24
154.92.115.0/24 maxlen: 24
154.92.116.0/24 maxlen: 24
154.92.117.0/24 maxlen: 24
154.92.118.0/24 maxlen: 24
154.92.119.0/24 maxlen: 24
154.92.120.0/24 maxlen: 24
154.92.121.0/24 maxlen: 24
154.92.122.0/24 maxlen: 24
154.92.123.0/24 maxlen: 24
154.92.124.0/24 maxlen: 24
154.92.125.0/24 maxlen: 24
154.92.126.0/24 maxlen: 24
154.92.127.0/24 maxlen: 24
154.92.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109640 (0x1ac48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 3 10:55:00 2025 GMT
Not After : Nov 18 10:55:00 2028 GMT
Subject: CN=69301713-2c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:09:f6:16:a1:02:79:bf:fb:b9:48:68:39:89:
83:df:0a:95:9c:f1:7a:71:37:53:51:c1:3f:75:5b:
aa:18:d2:aa:a7:b1:91:18:5d:22:c1:a5:d5:b1:a2:
89:57:18:c6:8d:0d:e0:36:0f:c0:c5:21:d9:56:62:
a8:4a:a1:7f:7f:c7:80:d9:3c:23:0e:01:e2:76:05:
17:d7:71:83:40:bd:05:cd:5f:70:c3:84:4d:ed:bd:
3a:b6:17:8b:df:7b:a4:08:f7:cf:6c:8c:89:82:45:
ed:b6:2f:47:6e:b3:98:c3:fa:8c:7c:65:b6:03:71:
f4:7b:bc:44:89:e5:9d:09:b7:72:c1:dc:7f:91:b4:
a0:c6:1d:1e:bc:4c:9b:ac:76:04:8e:89:c4:64:6a:
69:da:be:9a:2a:12:63:e1:80:fe:e2:43:c2:a2:d4:
b4:d6:18:ee:42:e8:80:cf:93:e5:77:e7:40:75:79:
fe:3a:c7:b1:4b:95:ba:67:51:73:a0:45:71:b7:cf:
9f:18:8a:4e:20:a8:d3:a3:23:b6:00:21:e1:a3:d6:
f9:c8:b6:f0:83:fc:8a:cf:e8:cb:cc:4c:ca:cb:80:
6c:67:50:14:cf:53:17:44:b0:21:30:0f:65:73:08:
7c:89:88:85:45:e5:65:d8:fa:7e:5e:0b:12:b6:1a:
29:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:85:97:8A:89:EB:77:EA:23:4A:16:CC:3E:AE:6A:56:7B:B8:92:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BF1EAB2D03611F09CE2BFD4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.222.0/23
154.92.1.0/24
154.92.112.0/20
154.92.136.0/24
Signature Algorithm: sha256WithRSAEncryption
00:db:31:ed:5d:74:7a:5a:76:6c:8a:5f:f6:c9:8e:cb:65:f3:
61:4a:55:97:67:55:38:65:dc:1f:61:c8:5c:98:aa:90:6d:5d:
30:c4:15:a6:38:cc:75:1d:0e:39:6e:86:7c:26:86:a5:d6:83:
bb:2d:11:46:b8:c9:fc:cf:72:be:98:b1:bb:b3:11:81:a6:ca:
76:35:97:b3:d8:73:ea:a2:3a:dd:72:d2:10:94:3d:80:cb:71:
7e:2b:0e:3d:e4:62:84:de:b8:1f:f7:f3:61:76:24:02:45:2b:
cf:04:dc:f8:cd:80:37:d4:94:53:19:2c:be:44:f8:e7:9d:3a:
4a:49:2e:00:12:10:3f:5b:a8:4a:e4:5b:a7:a9:4e:3c:ea:52:
c5:ef:b5:c7:3a:8f:af:18:22:92:8b:74:3b:62:b1:75:ef:96:
97:7c:a8:19:70:46:3c:7b:27:9f:d4:61:56:29:b9:f8:19:90:
ec:b3:63:ba:9a:07:31:d5:74:60:3b:aa:82:42:16:50:93:c1:
f7:ff:38:f8:10:1f:2f:72:39:20:4c:bd:ba:f4:58:7b:56:42:
e7:c5:15:59:a5:2f:d3:26:05:7c:c8:c8:11:03:df:34:20:d2:
e9:d9:31:88:19:6a:32:22:ed:62:ca:17:d1:cd:5a:bb:ea:ce:
ec:31:07:1d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgIDAaxIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjAzMTA1NTAwWhcNMjgxMTE4MTA1NTAwWjAYMRYw
FAYDVQQDEw02OTMwMTcxMy0yYzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7An2FqECeb/7uUhoOYmD3wqVnPF6cTdTUcE/dVuqGNKqp7GRGF0iwaXV
saKJVxjGjQ3gNg/AxSHZVmKoSqF/f8eA2TwjDgHidgUX13GDQL0FzV9ww4RN7b06
theL33ukCPfPbIyJgkXtti9HbrOYw/qMfGW2A3H0e7xEieWdCbdywdx/kbSgxh0e
vEybrHYEjonEZGpp2r6aKhJj4YD+4kPCotS01hjuQuiAz5Pld+dAdXn+OsexS5W6
Z1FzoEVxt8+fGIpOIKjToyO2ACHho9b5yLbwg/yKz+jLzEzKy4BsZ1AUz1MXRLAh
MA9lcwh8iYiFReVl2Pp+XgsSthopVwIDAQABo4ICtzCCArMwHQYDVR0OBBYEFJOF
l4qJ63fqI0oWzD6ualZ7uJKbMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84QkYxRUFCMkQwMzYxMUYwOUNFMkJGRDREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBmlneAwQAmlwBAwQEmlxw
AwQAmlyIMA0GCSqGSIb3DQEBCwUAA4IBAQAA2zHtXXR6WnZsil/2yY7LZfNhSlWX
Z1U4ZdwfYchcmKqQbV0wxBWmOMx1HQ45boZ8Joal1oO7LRFGuMn8z3K+mLG7sxGB
psp2NZez2HPqojrdctIQlD2Ay3F+Kw495GKE3rgf9/NhdiQCRSvPBNz4zYA31JRT
GSy+RPjnnTpKSS4AEhA/W6hK5FunqU486lLF77XHOo+vGCKSi3Q7YrF175aXfKgZ
cEY8eyef1GFWKbn4GZDss2O6mgcx1XRgO6qCQhZQk8H3/zj4EB8vcjkgTL269Fh7
VkLnxRVZpS/TJgV8yMgRA980INLp2TGIGWoyIu1iyhfRzVq76s7sMQcd
-----END CERTIFICATE-----
Generated at Sat Dec 6 22:12:33 2025 by rpki-client