This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB1C76D0D04411F0A5EE96ADDAE4EC9C.roa
File: DB1C76D0D04411F0A5EE96ADDAE4EC9C.roa (raw, json)
Hash identifier: HwV8UEnvsmiq+fr8YWQ5tpaqYiyfZHdvKPRBh21flYY=
Subject key identifier: 73:83:F1:FB:F0:BE:C9:12:22:06:85:97:D2:3D:CC:FB:08:13:A2:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AC5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB1C76D0D04411F0A5EE96ADDAE4EC9C.roa
Signing time: Wed 03 Dec 2025 12:37:40 +0000
ROA not before: Wed 03 Dec 2025 12:37:31 +0000
ROA not after: Mon 05 Jan 2026 12:37:31 +0000
asID: 49505
IP address blocks: 154.209.208.0/24 maxlen: 24
154.209.209.0/24 maxlen: 24
154.209.210.0/24 maxlen: 24
154.209.211.0/24 maxlen: 24
154.209.212.0/24 maxlen: 24
154.209.213.0/24 maxlen: 24
154.209.214.0/24 maxlen: 24
154.209.215.0/24 maxlen: 24
154.209.216.0/24 maxlen: 24
154.209.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:06:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109658 (0x1ac5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 3 12:37:31 2025 GMT
Not After : Jan 5 12:37:31 2026 GMT
Subject: CN=69302f14-9a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:cf:89:b2:3c:89:a5:8d:55:b0:8d:53:5e:
44:66:31:d1:27:d1:ba:3a:cc:2c:d7:74:e6:18:ae:
48:96:1a:4c:9b:a1:d9:dd:fb:2c:43:41:57:0f:bd:
70:67:d5:d0:c3:12:74:51:3a:97:08:b9:5d:30:80:
91:74:bc:00:95:ba:36:e2:f7:16:cc:ed:61:1f:ba:
fa:1b:ad:69:00:59:72:52:84:8f:10:45:83:87:8b:
b8:72:05:df:05:2e:cb:e5:c6:e9:e0:bc:02:09:46:
68:a0:9a:80:89:4a:8b:a3:a2:1f:fc:62:02:62:bc:
aa:bf:71:1e:3c:fd:22:11:f6:a2:60:9c:62:12:39:
4e:77:35:8f:36:b2:7a:8c:6e:c5:6d:e3:3b:0e:f8:
7f:84:a3:ba:56:2f:c6:aa:02:c6:e8:92:7b:f6:57:
1a:b2:90:4e:22:0f:d4:3f:ef:6b:53:3d:d1:9f:09:
1b:ea:b3:41:66:3e:03:af:39:f3:df:24:81:db:bb:
9a:8e:1f:68:fa:88:e3:49:71:b7:49:35:36:b0:75:
46:e4:21:91:7f:45:bf:51:31:88:77:ad:d2:f7:c5:
88:90:b9:06:d4:61:4c:e0:db:81:79:01:86:55:98:
0c:6f:63:7e:55:05:77:cb:cc:c7:c3:c8:c7:84:b1:
46:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:83:F1:FB:F0:BE:C9:12:22:06:85:97:D2:3D:CC:FB:08:13:A2:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB1C76D0D04411F0A5EE96ADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.208.0-154.209.217.255
Signature Algorithm: sha256WithRSAEncryption
3a:73:60:c1:8f:b0:2b:f9:45:d6:ea:7c:cc:b8:b2:c0:ce:f9:
47:19:3b:83:98:4f:0a:e0:ec:3b:23:70:0e:27:b0:97:81:03:
7a:4d:94:06:aa:fc:a0:aa:db:e2:49:45:bb:21:c4:d5:62:2f:
8a:9d:c1:3a:aa:32:5a:c4:13:78:f2:e8:5a:83:de:d3:08:ad:
2d:f9:54:e8:2f:07:16:98:1a:b5:07:43:23:8d:86:b8:c1:3b:
26:ef:f5:a3:9b:c0:36:10:c7:24:e3:36:b6:8e:a9:15:08:72:
8a:44:43:f0:db:c8:86:53:b6:9b:cc:4a:56:9d:df:a0:c7:7a:
12:99:97:93:31:28:7a:7b:ff:4d:8c:93:9e:ae:e0:80:8d:e0:
56:b2:6b:35:8f:53:dd:af:81:a8:06:df:5a:5e:7b:bc:48:f7:
23:f6:53:b0:be:89:a7:72:ed:de:28:b8:e8:4e:be:3d:b1:fa:
3c:42:34:c9:46:c8:2f:e3:76:4c:bf:1c:58:56:bc:52:61:0b:
4a:5e:e8:d8:bc:0f:5d:b0:47:0c:03:70:f3:36:2d:78:11:22:
56:ad:07:31:9a:83:d2:c5:7b:90:c3:16:f6:ee:2b:4f:e2:6e:
44:3e:12:de:af:df:41:ca:ba:f3:ea:f1:ac:56:de:1c:d0:12:
e0:b1:5e:95
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAaxaMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjAzMTIzNzMxWhcNMjYwMTA1MTIzNzMxWjAYMRYw
FAYDVQQDEw02OTMwMmYxNC05YTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAqL7PibI8iaWNVbCNU15EZjHRJ9G6Osws13TmGK5IlhpMm6HZ3fssQ0FX
D71wZ9XQwxJ0UTqXCLldMICRdLwAlbo24vcWzO1hH7r6G61pAFlyUoSPEEWDh4u4
cgXfBS7L5cbp4LwCCUZooJqAiUqLo6If/GICYryqv3EePP0iEfaiYJxiEjlOdzWP
NrJ6jG7FbeM7Dvh/hKO6Vi/GqgLG6JJ79lcaspBOIg/UP+9rUz3Rnwkb6rNBZj4D
rznz3ySB27uajh9o+ojjSXG3STU2sHVG5CGRf0W/UTGId63S98WIkLkG1GFM4NuB
eQGGVZgMb2N+VQV3y8zHw8jHhLFGHQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHOD
8fvwvskSIgaFl9I9zPsIE6ItMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQjFDNzZEMEQwNDQxMUYwQTVFRTk2QUREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBASa0dADBAGa0dgwDQYJ
KoZIhvcNAQELBQADggEBADpzYMGPsCv5RdbqfMy4ssDO+UcZO4OYTwrg7DsjcA4n
sJeBA3pNlAaq/KCq2+JJRbshxNViL4qdwTqqMlrEE3jy6FqD3tMIrS35VOgvBxaY
GrUHQyONhrjBOybv9aObwDYQxyTjNraOqRUIcopEQ/DbyIZTtpvMSlad36DHehKZ
l5MxKHp7/02Mk56u4ICN4FayazWPU92vgagG31pee7xI9yP2U7C+iady7d4ouOhO
vj2x+jxCNMlGyC/jdky/HFhWvFJhC0pe6Ni8D12wRwwDcPM2LXgRIlatBzGag9LF
e5DDFvbuK0/ibkQ+Et6v30HKuvPq8axW3hzQEuCxXpU=
-----END CERTIFICATE-----
Generated at Sat Dec 6 21:30:19 2025 by rpki-client