This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2E3DA68D12C11F0AED5A9D6DAE4EC9C.roa
File: A2E3DA68D12C11F0AED5A9D6DAE4EC9C.roa (raw, json)
Hash identifier: upeKxE/dGJAJ4P2uEyYX09FUNiBKtCmQzF0tRbbavOA=
Subject key identifier: FF:8F:84:4B:3C:B8:E5:1C:14:40:B5:91:AA:5D:0E:EB:E2:39:F3:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01ACE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2E3DA68D12C11F0AED5A9D6DAE4EC9C.roa
Signing time: Thu 04 Dec 2025 16:16:49 +0000
ROA not before: Thu 04 Dec 2025 16:16:44 +0000
ROA not after: Sat 13 Dec 2025 16:16:44 +0000
asID: 141883
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109800 (0x1ace8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 16:16:44 2025 GMT
Not After : Dec 13 16:16:44 2025 GMT
Subject: CN=6931b3f1-5cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2b:74:39:f7:0b:7d:a0:64:d7:0d:1e:64:3b:
f6:ad:73:d8:60:9a:93:b9:0e:1c:0b:59:01:52:d5:
c7:45:fc:3d:61:d9:d1:66:dd:e6:10:0c:02:03:84:
4a:7d:dc:4e:61:10:2f:0f:3a:c7:96:03:cd:89:e0:
a5:52:67:60:00:c6:20:83:5c:c0:32:ef:ff:a7:16:
ce:0a:4a:7e:45:d2:56:25:df:eb:97:e3:0e:11:27:
4f:26:8f:65:f2:50:19:bc:3d:1d:7d:2b:5f:39:ac:
af:ce:7c:43:4b:10:c2:16:92:b5:64:1f:71:a8:bc:
9b:f2:14:5b:f3:16:39:2b:29:9c:f9:a6:53:df:4b:
3e:67:b9:53:27:8f:69:6c:36:35:4d:c5:28:d7:99:
a4:11:a6:9a:9b:5d:d1:40:be:8e:15:b7:b7:fe:07:
d6:5b:24:14:1d:e8:51:d6:62:c6:94:52:c6:c6:83:
2c:82:db:6b:ea:ea:14:93:63:5f:ba:a0:b8:2f:c8:
67:90:50:f8:4d:39:66:99:b3:58:cd:f6:f3:78:5d:
a9:ac:e4:9d:57:4b:d1:e1:0d:24:4b:57:69:d3:36:
24:05:6b:9b:5b:d1:d7:ed:23:e2:b8:9a:2e:b0:27:
23:99:db:b0:c7:d0:14:94:71:e7:5c:2f:d3:4d:e8:
8b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8F:84:4B:3C:B8:E5:1C:14:40:B5:91:AA:5D:0E:EB:E2:39:F3:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2E3DA68D12C11F0AED5A9D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:98:0b:6b:22:23:f1:19:57:d9:d5:46:31:d4:3b:d9:2a:d7:
f9:04:ef:fd:59:af:0b:84:95:68:74:95:9f:81:a8:c1:a9:32:
a8:60:59:b5:72:9b:d9:51:0c:28:2e:8a:48:03:fb:2d:28:87:
11:61:45:a5:ba:39:c1:06:1f:b9:b9:d7:17:2f:ad:7b:1f:87:
b3:5c:20:c2:2b:c8:a1:57:ee:0d:32:03:50:31:95:58:58:f1:
db:0e:6c:c8:72:0b:2a:3b:07:c9:0b:37:19:97:62:f2:20:2a:
70:e8:07:6d:17:c3:ed:10:a4:3b:83:35:fb:29:32:e8:ae:44:
fd:ac:ab:c6:b4:9e:71:bb:e8:61:77:95:4a:b4:e2:ab:b4:ae:
48:36:37:2f:b1:20:53:d4:01:20:83:1c:6d:2e:d4:6a:b5:e5:
08:47:38:3a:cd:8d:c9:45:f7:1a:27:26:b1:8a:98:f6:6e:ca:
2d:82:92:c9:9c:ab:bb:0c:b9:63:9c:3f:e9:ff:d5:23:09:49:
25:ef:89:b3:72:ad:3c:05:4f:cd:53:5b:f3:a1:3d:38:bb:58:
10:8f:cc:fd:8d:70:fa:58:f8:71:34:29:44:71:60:8f:97:6d:
45:d9:02:ca:81:57:0c:9d:b2:0a:09:9d:27:70:03:d8:19:8e:
ab:5e:02:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 16:46:51 2025 by rpki-client