This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19288F38DA7011F09498C4F1DAE4EC9C.roa
File: 19288F38DA7011F09498C4F1DAE4EC9C.roa (raw, json)
Hash identifier: IIkCAGjUXB6MMVt1CFjdS8Tq3UbQK1GWaFsmhJewxPY=
Subject key identifier: 1C:DD:72:B6:CA:72:3E:7B:2B:8F:9A:12:1F:04:68:42:2B:1D:7A:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AE8B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19288F38DA7011F09498C4F1DAE4EC9C.roa
Signing time: Tue 16 Dec 2025 11:12:24 +0000
ROA not before: Tue 16 Dec 2025 11:12:20 +0000
ROA not after: Tue 12 Dec 2028 11:12:20 +0000
asID: 17561
IP address blocks: 154.201.46.0/24 maxlen: 24
154.201.58.0/24 maxlen: 24
154.209.8.0/24 maxlen: 24
154.209.9.0/24 maxlen: 24
154.209.10.0/24 maxlen: 24
154.209.11.0/24 maxlen: 24
154.209.12.0/24 maxlen: 24
154.209.13.0/24 maxlen: 24
154.209.14.0/24 maxlen: 24
154.209.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110219 (0x1ae8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 11:12:20 2025 GMT
Not After : Dec 12 11:12:20 2028 GMT
Subject: CN=69413e98-2df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:4d:ed:35:d8:3c:f8:79:12:6f:99:47:d0:
cf:bb:0a:31:8f:c0:59:39:5f:e7:2b:07:ca:1d:96:
ff:0f:2c:39:c9:3a:e7:76:54:75:af:ec:18:54:e8:
4c:e1:75:78:3f:e7:c2:9a:5b:e4:31:8f:9c:ce:29:
51:70:eb:24:47:43:d7:d9:81:34:8d:d6:52:d6:1a:
59:03:69:69:e9:a7:66:04:26:da:3f:9c:7a:ac:50:
7b:84:41:8a:66:db:66:dd:86:05:5c:76:c1:16:f0:
1d:28:c1:cb:57:ed:f5:35:8e:80:23:3f:f5:71:ac:
5f:8d:1a:ac:54:c5:99:3a:a5:93:3e:48:f5:15:23:
80:77:32:50:ac:3c:95:89:c5:5f:69:47:10:18:c8:
4d:13:40:dd:43:91:df:0c:36:d3:18:6d:cd:b7:e8:
33:fb:19:b6:71:b3:e4:ba:e7:66:f0:98:a9:d8:f4:
9f:3a:7b:4a:41:ef:49:5e:bb:d2:61:5c:fb:69:dd:
a0:c6:ab:50:2f:d8:af:8f:bd:a0:c5:d1:37:fa:34:
a9:a1:cb:29:e2:65:7c:fc:c3:43:8b:77:a8:c3:d6:
81:0b:d2:43:21:9e:00:3d:b2:46:c5:b0:92:5d:d1:
2d:e4:1e:e3:41:dd:5f:b6:35:19:3b:15:bc:66:a1:
cd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DD:72:B6:CA:72:3E:7B:2B:8F:9A:12:1F:04:68:42:2B:1D:7A:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19288F38DA7011F09498C4F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.46.0/24
154.201.58.0/24
154.209.8.0/21
Signature Algorithm: sha256WithRSAEncryption
af:42:12:31:60:b3:9e:a9:b7:d7:12:9b:9a:98:6c:9b:8d:b7:
9e:98:d6:3d:27:05:ae:89:a3:19:99:64:00:00:c8:81:e6:5d:
76:93:07:d6:72:82:d6:3a:00:32:04:ba:9b:f9:d2:d2:1b:d4:
a6:69:35:8b:51:14:c0:77:dd:35:ad:f4:0b:31:d9:ae:50:aa:
dc:38:88:88:18:db:b3:76:33:3c:9b:a2:10:c3:4a:da:2b:f1:
72:24:25:7d:eb:88:fa:ce:a6:4a:fd:f8:91:ec:d3:36:fb:fc:
95:4c:90:53:a4:cd:03:d6:6c:93:b3:7d:11:d3:81:fe:f3:7b:
a1:a1:8c:11:3b:91:51:d1:cc:94:d0:27:fb:2b:49:27:20:66:
62:58:88:76:06:7f:12:fa:3a:1e:57:f0:9a:95:14:7d:b0:97:
59:da:c3:88:bc:ff:0b:d2:0d:72:3f:20:16:f1:fa:d2:a9:11:
5e:0b:b7:35:49:29:ed:09:f4:c0:b3:f1:0f:bb:7e:af:9b:eb:
93:ad:bf:d7:4b:2d:4e:59:8f:3f:df:58:88:f7:c3:ec:31:c1:
47:c6:e2:18:49:7f:73:bb:9f:6d:3a:a1:24:b9:97:01:10:0e:
ba:5c:21:98:46:70:90:ba:4d:17:99:97:8b:17:28:f7:6d:90:
47:c4:1c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:09:30 2025 by rpki-client