This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10AB5F16C3C311F095594B8DDAE4EC9C.roa
File: 10AB5F16C3C311F095594B8DDAE4EC9C.roa (raw, json)
Hash identifier: +7Gv+cIx5HwCD+cIhUaGeCJJO4FQXeciog2wUfvH5Ac=
Subject key identifier: 77:EE:11:59:BF:38:D4:38:07:39:64:C9:E1:32:3A:55:AD:9A:85:4D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A96F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10AB5F16C3C311F095594B8DDAE4EC9C.roa
Signing time: Mon 17 Nov 2025 14:38:22 +0000
ROA not before: Mon 17 Nov 2025 14:38:17 +0000
ROA not after: Wed 24 Dec 2025 14:38:17 +0000
asID: 58931
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108911 (0x1a96f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 14:38:17 2025 GMT
Not After : Dec 24 14:38:17 2025 GMT
Subject: CN=691b335e-64ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:92:7e:5a:10:8b:7e:59:64:ab:84:d4:49:
33:10:10:62:e6:1f:72:c9:6f:de:73:b4:7f:b1:40:
99:69:68:e0:f9:3e:04:41:86:35:70:75:6e:1f:f0:
f0:68:16:90:da:c7:83:99:6d:9d:44:93:1d:c3:c1:
c3:d2:df:2c:24:91:3d:b5:64:31:61:20:cb:bb:67:
d7:31:20:a1:f7:2a:b3:13:03:31:61:99:c8:ef:63:
e6:3a:83:4c:a4:5b:10:b3:f6:2f:34:5a:91:fc:1e:
ee:7a:89:1f:46:5b:6b:d0:3c:12:11:47:c8:27:ce:
76:b6:bf:03:c4:59:e7:49:06:ed:7f:eb:c8:a0:30:
c2:95:a5:4d:f7:ea:96:34:21:91:40:13:63:1d:78:
85:e8:b9:fb:71:fc:4e:00:b0:b4:6b:4e:f1:69:98:
c3:9b:56:f7:f4:74:28:28:6d:72:84:a7:29:7b:e6:
23:85:79:01:24:0d:62:c6:f8:8a:8e:3a:4e:00:19:
96:14:31:54:21:94:42:23:eb:3f:70:e8:31:c6:c3:
59:09:c4:d4:e5:89:b2:a7:eb:2f:2f:f6:32:7d:f5:
39:fa:1a:c8:5d:c5:a4:ec:f5:cc:a1:3a:95:4b:0a:
86:44:b9:bc:32:ff:b0:23:01:69:dc:23:c9:e6:7a:
39:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EE:11:59:BF:38:D4:38:07:39:64:C9:E1:32:3A:55:AD:9A:85:4D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10AB5F16C3C311F095594B8DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:2c:88:65:e3:b1:8e:ec:b0:88:08:cc:d7:ba:dd:27:5f:21:
a3:84:e6:fe:28:ca:fd:37:56:43:85:24:8f:a0:85:98:76:42:
ce:0d:f7:0d:a7:d7:7a:86:5c:d0:ab:dc:5e:d7:5b:4c:99:7e:
4c:7a:39:04:a7:2c:31:06:0a:74:1b:42:a6:66:8b:6a:8e:65:
a7:fa:e7:19:bb:b7:0d:38:c2:19:fe:84:64:7d:f8:79:a3:11:
92:be:ef:44:be:c5:6a:94:35:df:62:8e:28:3d:7a:ab:72:30:
74:6c:8b:1e:02:8e:f3:a2:8a:3f:1d:f2:6c:67:84:07:16:b1:
7e:91:56:19:28:dd:07:72:d1:64:cd:d8:ed:13:17:6f:5f:4b:
7a:c3:66:8c:85:52:fb:ee:f6:26:1d:d2:ff:f3:28:2e:36:a5:
05:3e:75:78:93:8a:e4:9a:9a:c3:d1:c0:4a:b0:3c:5d:dd:cd:
f7:b9:66:50:ad:f1:1d:5f:10:7a:47:eb:95:fc:d1:9c:19:74:
9b:02:4b:2e:5f:23:b5:cf:ce:ca:9d:9a:7a:e5:25:76:b2:d3:
5a:59:2f:bb:52:4e:e1:bf:27:b4:94:19:96:f2:f4:99:ea:70:
57:82:f5:3a:e2:29:c0:fc:ab:ee:a3:07:46:43:a2:95:d3:f6:
7a:dc:38:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAalvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTE3MTQzODE3WhcNMjUxMjI0MTQzODE3WjAYMRYw
FAYDVQQDEw02OTFiMzM1ZS02NGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwIqSfloQi35ZZKuE1EkzEBBi5h9yyW/ec7R/sUCZaWjg+T4EQYY1cHVu
H/DwaBaQ2seDmW2dRJMdw8HD0t8sJJE9tWQxYSDLu2fXMSCh9yqzEwMxYZnI72Pm
OoNMpFsQs/YvNFqR/B7ueokfRltr0DwSEUfIJ852tr8DxFnnSQbtf+vIoDDClaVN
9+qWNCGRQBNjHXiF6Ln7cfxOALC0a07xaZjDm1b39HQoKG1yhKcpe+YjhXkBJA1i
xviKjjpOABmWFDFUIZRCI+s/cOgxxsNZCcTU5Ymyp+svL/YyffU5+hrIXcWk7PXM
oTqVSwqGRLm8Mv+wIwFp3CPJ5no5EwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFHfu
EVm/ONQ4BzlkyeEyOlWtmoVNMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xMEFCNUYxNkMzQzMxMUYwOTU1OTRCOEREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAml8YMA0GCSqGSIb3DQEB
CwUAA4IBAQALLIhl47GO7LCICMzXut0nXyGjhOb+KMr9N1ZDhSSPoIWYdkLODfcN
p9d6hlzQq9xe11tMmX5MejkEpywxBgp0G0KmZotqjmWn+ucZu7cNOMIZ/oRkffh5
oxGSvu9EvsVqlDXfYo4oPXqrcjB0bIseAo7zooo/HfJsZ4QHFrF+kVYZKN0HctFk
zdjtExdvX0t6w2aMhVL77vYmHdL/8yguNqUFPnV4k4rkmprD0cBKsDxd3c33uWZQ
rfEdXxB6R+uV/NGcGXSbAksuXyO1z87KnZp65SV2stNaWS+7Uk7hvye0lBmW8vSZ
6nBXgvU64inA/KvuowdGQ6KV0/Z63Did
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:08 2025 by rpki-client