This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18BFDEB4CFCD11F08A15FBB1DAE4EC9C.roa
File: 18BFDEB4CFCD11F08A15FBB1DAE4EC9C.roa (raw, json)
Hash identifier: UdJ+uxE9f8unmEm0i0zb+Rsf9h1blc0EkHRbf0MZsp0=
Subject key identifier: 2F:EC:2C:6A:74:DF:3A:26:72:DF:E1:F9:D4:2D:4A:66:7D:39:18:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01ABDF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18BFDEB4CFCD11F08A15FBB1DAE4EC9C.roa
Signing time: Tue 02 Dec 2025 22:20:24 +0000
ROA not before: Tue 02 Dec 2025 22:20:17 +0000
ROA not after: Sat 18 Nov 2028 22:20:17 +0000
asID: 17561
IP address blocks: 154.203.2.0/24 maxlen: 24
154.203.4.0/24 maxlen: 24
154.203.6.0/24 maxlen: 24
154.203.192.0/24 maxlen: 24
154.203.193.0/24 maxlen: 24
154.203.195.0/24 maxlen: 24
154.203.202.0/24 maxlen: 24
154.203.203.0/24 maxlen: 24
154.203.204.0/24 maxlen: 24
154.203.246.0/24 maxlen: 24
154.203.249.0/24 maxlen: 24
154.205.176.0/24 maxlen: 24
154.205.177.0/24 maxlen: 24
154.205.178.0/24 maxlen: 24
154.205.179.0/24 maxlen: 24
154.205.180.0/24 maxlen: 24
154.205.181.0/24 maxlen: 24
154.205.182.0/24 maxlen: 24
154.205.183.0/24 maxlen: 24
154.205.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109535 (0x1abdf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 2 22:20:17 2025 GMT
Not After : Nov 18 22:20:17 2028 GMT
Subject: CN=692f6628-9f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:84:62:a6:cc:93:2f:94:fa:49:6c:35:ec:
50:bb:3d:c6:a0:fb:75:b2:21:a7:38:13:a8:72:3c:
2c:f2:af:32:cd:bf:39:d2:d1:ea:95:25:5b:94:89:
50:57:41:b8:cd:9f:ed:71:23:8e:7a:24:e9:6c:9e:
db:17:e1:99:2b:79:78:b0:33:2c:e3:1d:c3:10:1f:
ae:16:f9:52:ab:d1:f3:79:ba:5e:71:e9:45:e8:72:
1c:24:e1:bb:91:12:c2:b4:eb:8c:49:55:87:2a:78:
13:03:69:f9:57:ff:06:81:7c:4b:3f:69:33:66:7a:
5b:fd:2c:b3:33:ee:c0:2f:c2:3e:ed:78:d1:6f:39:
34:6a:92:3a:ab:08:36:24:be:0b:20:e3:3a:3a:f6:
bb:0f:a7:0c:e6:87:57:d2:c5:46:f2:18:18:e8:72:
b1:3a:ac:6b:c2:90:4f:50:32:56:5c:3b:75:b2:6d:
22:a3:8b:ce:32:59:57:fb:10:ff:cf:89:52:8d:5c:
18:f0:e4:cc:e6:d2:f7:2e:df:b3:92:61:6d:66:f7:
71:b4:cb:c1:d8:b5:c5:88:96:7d:c1:76:55:e1:d9:
8a:e5:83:2a:43:8e:7c:58:88:74:bd:f7:f0:5d:9d:
e9:dd:e3:53:f1:ad:a5:88:d6:01:97:ae:e5:67:52:
ad:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:EC:2C:6A:74:DF:3A:26:72:DF:E1:F9:D4:2D:4A:66:7D:39:18:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/18BFDEB4CFCD11F08A15FBB1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.2.0/24
154.203.4.0/24
154.203.6.0/24
154.203.192.0/23
154.203.195.0/24
154.203.202.0-154.203.204.255
154.203.246.0/24
154.203.249.0/24
154.205.176.0/21
154.205.186.0/24
Signature Algorithm: sha256WithRSAEncryption
69:95:a2:eb:04:de:2a:dc:d7:5c:cc:68:2d:b9:2f:f9:ff:f5:
72:8e:94:2b:30:0a:90:ae:08:e9:a4:b1:c9:24:dc:c2:8a:e5:
8b:55:44:3b:9f:99:c5:14:ca:f3:e6:a8:35:b5:57:df:48:42:
99:2b:31:ed:18:de:56:97:8d:4c:2d:6f:c2:31:38:75:00:2f:
9b:fb:ad:ca:76:28:b1:8e:a5:75:a1:04:a1:47:1e:6d:57:5a:
02:8e:aa:fe:b7:3c:fc:14:c8:a7:ca:cb:5f:6f:b4:ba:9e:ad:
a6:65:29:e0:df:a7:c3:fc:f3:d9:e9:97:5a:3a:57:6e:f8:a3:
62:68:2f:fb:d4:43:bd:ee:c0:4b:d1:92:2e:e6:2a:89:8a:96:
1b:42:08:7f:53:a6:f7:ac:e2:a2:4a:ee:4c:ca:b1:de:a3:14:
64:23:0f:30:cf:6b:fe:be:08:b8:87:8b:7c:31:c9:b6:16:80:
43:eb:8b:17:a6:29:fb:a8:63:0a:54:d6:ad:b6:81:44:a1:ac:
44:86:45:1b:4d:69:84:a6:6f:a2:e9:a8:b3:73:27:29:11:bc:
22:42:39:12:2f:89:aa:77:38:08:34:bf:b5:f5:b1:bd:68:5a:
f8:3d:76:55:dc:12:0f:1b:e8:4c:97:33:e7:9c:08:56:47:52:
dd:fa:80:b6
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIDAavfMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjAyMjIyMDE3WhcNMjgxMTE4MjIyMDE3WjAYMRYw
FAYDVQQDEw02OTJmNjYyOC05Zjg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyuiEYqbMky+U+klsNexQuz3GoPt1siGnOBOocjws8q8yzb850tHqlSVb
lIlQV0G4zZ/tcSOOeiTpbJ7bF+GZK3l4sDMs4x3DEB+uFvlSq9HzebpecelF6HIc
JOG7kRLCtOuMSVWHKngTA2n5V/8GgXxLP2kzZnpb/SyzM+7AL8I+7XjRbzk0apI6
qwg2JL4LIOM6Ova7D6cM5odX0sVG8hgY6HKxOqxrwpBPUDJWXDt1sm0io4vOMllX
+xD/z4lSjVwY8OTM5tL3Lt+zkmFtZvdxtMvB2LXFiJZ9wXZV4dmK5YMqQ458WIh0
vffwXZ3p3eNT8a2liNYBl67lZ1KtEQIDAQABo4IC4zCCAt8wHQYDVR0OBBYEFC/s
LGp03zomct/h+dQtSmZ9ORiQMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8xOEJGREVCNENGQ0QxMUYwOEExNUZCQjFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQAmssCAwQAmssEAwQAmssG
AwQBmsvAAwQAmsvDMAwDBAGay8oDBACay8wDBACay/YDBACay/kDBAOazbADBACa
zbowDQYJKoZIhvcNAQELBQADggEBAGmVousE3irc11zMaC25L/n/9XKOlCswCpCu
COmksckk3MKK5YtVRDufmcUUyvPmqDW1V99IQpkrMe0Y3laXjUwtb8IxOHUAL5v7
rcp2KLGOpXWhBKFHHm1XWgKOqv63PPwUyKfKy19vtLqeraZlKeDfp8P889npl1o6
V274o2JoL/vUQ73uwEvRki7mKomKlhtCCH9Tpves4qJK7kzKsd6jFGQjDzDPa/6+
CLiHi3wxybYWgEPrixemKfuoYwpU1q22gUShrESGRRtNaYSmb6LpqLNzJykRvCJC
ORIviap3OAg0v7X1sb1oWvg9dlXcEg8b6EyXM+ecCFZHUt36gLY=
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:26:07 2025 by rpki-client