This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0A0B184D04611F0A4E157B8DAE4EC9C.roa
File: C0A0B184D04611F0A4E157B8DAE4EC9C.roa (raw, json)
Hash identifier: vdubR2cskHRTzXfxh20aHQf2WIrh1xBPASDpnfy81n0=
Subject key identifier: 60:EC:E1:EC:57:59:3F:F9:60:AB:2D:E2:D3:7B:95:7A:8A:C7:10:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AC5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0A0B184D04611F0A4E157B8DAE4EC9C.roa
Signing time: Wed 03 Dec 2025 12:51:15 +0000
ROA not before: Wed 03 Dec 2025 12:51:10 +0000
ROA not after: Mon 05 Jan 2026 12:51:10 +0000
asID: 49505
IP address blocks: 154.211.17.0/24 maxlen: 24
154.211.18.0/24 maxlen: 24
154.211.19.0/24 maxlen: 24
154.212.28.0/24 maxlen: 24
154.212.29.0/24 maxlen: 24
154.212.30.0/24 maxlen: 24
154.212.31.0/24 maxlen: 24
154.213.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 01:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109662 (0x1ac5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 3 12:51:10 2025 GMT
Not After : Jan 5 12:51:10 2026 GMT
Subject: CN=69303243-ff61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:53:ed:47:33:c1:3b:fd:66:47:a1:47:32:80:
90:98:4d:c3:f5:64:5f:12:00:f2:65:96:1e:89:24:
10:d0:b9:3a:c2:dd:e0:ab:af:11:8b:66:0a:d4:0e:
e6:a0:35:53:87:bb:8b:4f:1b:3d:ab:fa:8e:02:ee:
fa:e8:ce:aa:57:da:6e:a7:50:a1:5d:8c:09:53:7d:
25:3e:0e:58:7b:61:fa:13:ba:df:2d:fd:b1:4d:45:
f3:d7:44:51:50:af:c7:0c:70:f0:a4:11:75:7e:44:
f2:93:72:89:26:2f:94:5e:d0:b8:a4:bd:76:c0:96:
d3:a9:9b:91:e0:f9:70:ce:02:72:4b:44:6b:df:43:
5a:81:60:d7:1a:03:71:77:89:e3:0d:81:2c:d6:ba:
e4:29:bd:d3:ea:a8:d4:ef:57:62:e4:79:0f:75:ba:
f0:f8:9d:05:67:0f:4f:fc:7f:0f:e4:6a:4e:b6:3b:
81:49:c1:8e:94:c9:8c:46:b6:dd:14:2a:a6:b1:00:
36:25:c9:57:40:de:51:38:7f:7f:f0:0c:0f:6d:08:
92:6b:ce:03:6b:f7:d0:65:3e:df:25:9f:c1:72:4e:
bc:06:5c:c2:6d:4d:48:f1:e8:ad:ac:fe:8d:07:84:
31:09:78:8d:75:6c:34:7f:0f:49:9a:16:52:85:aa:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EC:E1:EC:57:59:3F:F9:60:AB:2D:E2:D3:7B:95:7A:8A:C7:10:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0A0B184D04611F0A4E157B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.17.0-154.211.19.255
154.212.28.0/22
154.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:1c:1a:44:85:2d:ed:45:59:20:e9:1d:61:19:63:a2:16:e1:
f3:52:0b:d5:96:c3:2c:88:fd:46:7a:4b:93:64:3e:a1:66:05:
3b:fd:62:0e:aa:b6:6e:12:5f:c2:56:2a:2b:a5:97:3c:10:53:
0a:8a:2e:f2:43:2e:8a:a1:6b:1d:63:4a:48:8f:3d:58:6c:41:
e0:73:11:25:46:90:ae:f8:8b:e2:38:03:14:7e:dc:70:53:20:
11:7f:f8:b8:77:58:73:a0:c2:07:ca:55:bc:03:4c:a3:4e:f3:
8e:71:71:14:51:ce:69:73:dc:a8:98:fc:db:e8:bc:c1:39:cc:
d0:f2:3d:ef:18:ea:d0:80:a3:80:10:80:ee:55:cf:45:4c:b6:
c6:7c:c3:ee:0c:a6:6f:84:e4:05:00:ab:85:6f:74:1a:1d:72:
2b:17:56:b0:a9:09:be:95:38:a0:68:8d:64:cd:5d:a6:47:77:
f3:18:96:07:ed:78:67:8a:ba:96:73:be:af:80:1c:74:4b:f2:
b5:71:fb:01:1b:65:7d:a2:23:91:00:ec:98:48:84:35:5e:0a:
80:6a:e2:a8:5d:ac:76:4f:47:f4:5e:e3:f8:0b:e9:88:d7:56:
e8:1d:8e:f2:6f:fb:1f:16:5a:53:3e:c1:8f:71:39:01:6b:14:
22:3b:f6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 02:05:57 2025 by rpki-client