This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/977BABECD40B11F0A9D324DBDAE4EC9C.roa
File: 977BABECD40B11F0A9D324DBDAE4EC9C.roa (raw, json)
Hash identifier: ZEsywGGCmIFy7fyx+p51Yg2o5GOsyZO0ch2cK3C1Z34=
Subject key identifier: ED:58:35:36:05:86:A5:07:BE:30:A2:6B:56:8B:A3:45:22:75:5B:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AD43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/977BABECD40B11F0A9D324DBDAE4EC9C.roa
Signing time: Mon 08 Dec 2025 07:57:50 +0000
ROA not before: Mon 08 Dec 2025 07:57:45 +0000
ROA not after: Mon 12 Jan 2026 07:57:45 +0000
asID: 328608
IP address blocks: 154.88.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Dec 2025 00:07:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109891 (0x1ad43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 8 07:57:45 2025 GMT
Not After : Jan 12 07:57:45 2026 GMT
Subject: CN=693684fe-9965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fc:74:f9:bd:42:5b:53:e5:5e:72:81:33:39:
12:6f:d0:7a:d1:bd:cc:6e:62:c5:f4:11:1e:52:ec:
86:b6:2e:38:ee:3a:cf:00:aa:63:b5:8f:44:d4:45:
e8:30:53:62:19:10:ab:23:9f:d8:b3:c3:b6:47:ab:
fe:87:46:94:09:b0:aa:4d:6b:09:87:2b:64:e7:c9:
44:67:9d:75:b6:de:74:0f:ee:44:b3:9e:9e:42:e6:
1e:f8:fc:0d:e7:8a:82:83:65:5e:90:b1:bb:d7:1f:
e2:be:00:08:b5:af:e2:41:89:b3:62:5d:23:79:e1:
eb:d9:d8:55:57:65:7d:fd:61:3b:5e:b7:ca:e9:11:
9a:6a:84:a6:ca:09:c9:02:0d:02:2d:d8:40:1a:5e:
1b:bc:70:02:55:a7:88:4c:fe:ff:05:2d:fa:9f:a8:
49:8d:64:59:af:c8:f3:21:5f:06:57:48:7d:df:1c:
93:bb:6f:cf:59:8b:0c:f4:28:6b:94:c3:35:4c:d3:
4e:42:f6:51:e5:24:85:f7:bc:16:45:ec:94:8b:1c:
79:37:79:0a:f9:20:d5:9a:cd:7b:31:10:7e:58:ff:
36:0b:11:54:47:6d:05:f6:0a:cd:05:d5:29:f1:76:
fb:b3:38:ea:78:60:a8:bb:02:f6:6e:5a:2a:28:07:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:58:35:36:05:86:A5:07:BE:30:A2:6B:56:8B:A3:45:22:75:5B:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/977BABECD40B11F0A9D324DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.0.0/23
Signature Algorithm: sha256WithRSAEncryption
75:c6:e5:16:22:90:69:bf:00:af:75:e3:68:96:8d:05:ec:f3:
ce:75:da:fb:4f:a8:56:1c:18:73:0e:42:4b:34:4e:b4:a2:ba:
88:0a:1b:16:99:ec:a9:97:77:86:e1:fc:12:6c:a4:0c:84:46:
07:41:0b:a6:f0:01:95:c1:7d:82:8e:c0:b9:b5:5f:b3:5c:72:
c3:55:e9:7e:a3:c4:0e:49:cf:53:45:6c:bf:1d:9d:cd:24:61:
fb:96:4a:ce:dc:2c:ed:24:bb:76:04:49:f0:bd:09:b1:a5:ee:
ed:cd:4f:cb:ea:9c:19:87:f9:9d:84:e5:97:12:28:c9:82:53:
8a:7b:a8:7d:a5:75:f2:1f:8e:a5:10:57:f2:81:41:23:0f:b7:
8f:b2:4b:b7:df:55:57:40:c0:4e:b3:5b:5d:ff:df:be:ed:dd:
f9:6f:44:bf:09:b7:b6:d4:23:f6:68:10:c0:44:47:b6:eb:07:
5f:64:7a:34:22:a4:c9:01:27:e5:20:33:1c:99:0d:dc:26:e4:
85:99:08:a3:9e:ab:8c:b6:82:ed:c5:43:2f:37:b9:c7:38:07:
5b:a8:bd:da:43:b1:5e:c2:c2:5d:4d:c4:5f:69:32:bf:46:70:
0e:68:17:2b:aa:39:53:da:35:7e:8d:78:94:2f:5c:9a:7e:f4:
3a:67:04:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 01:26:07 2025 by rpki-client