This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/217F6828CB6611F098D2B7ACDAE4EC9C.roa
File: 217F6828CB6611F098D2B7ACDAE4EC9C.roa (raw, json)
Hash identifier: ujeqlHRMrTLS2KPuMhGPL/4wLMrtvnAude9WVEulBDU=
Subject key identifier: E9:6B:4F:92:2B:56:42:16:F3:67:DF:AA:12:0E:E5:54:1C:D4:1C:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AACC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/217F6828CB6611F098D2B7ACDAE4EC9C.roa
Signing time: Thu 27 Nov 2025 07:53:16 +0000
ROA not before: Thu 27 Nov 2025 07:53:11 +0000
ROA not after: Sun 07 Dec 2025 07:53:11 +0000
asID: 20326
IP address blocks: 154.84.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109260 (0x1aacc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 27 07:53:11 2025 GMT
Not After : Dec 7 07:53:11 2025 GMT
Subject: CN=6928036c-1499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:65:21:ec:52:59:a2:10:1c:19:b0:32:bf:33:
97:e9:a5:a6:99:94:db:ea:b3:12:79:8e:ec:df:a4:
e3:35:d0:1d:cb:e5:00:7f:3f:85:98:1d:4a:96:ad:
92:7d:01:28:7f:8a:9b:55:0e:0a:03:d7:8c:d2:74:
a5:af:a7:03:78:e7:f9:6c:94:69:45:b4:f5:28:f5:
0a:0c:02:e7:5b:1b:9e:66:9c:4c:3f:f2:47:cf:0d:
2a:8b:80:bb:c9:d3:3e:b1:5e:76:09:23:e6:1f:1c:
6d:20:88:a6:d1:2c:90:80:5e:c5:86:e2:18:cf:1d:
8e:e9:2a:ce:8e:07:5e:7d:35:3d:99:1f:ce:fb:68:
63:3e:1d:56:a7:44:37:e5:19:9c:17:48:d7:1e:06:
fc:51:07:83:ae:44:98:11:0e:97:2b:00:00:a3:a3:
24:2c:bc:46:39:ef:88:c9:47:30:73:c5:a2:9a:33:
4f:59:80:de:d0:a6:e3:73:9b:4e:90:90:09:bb:a1:
6a:42:c0:66:12:21:25:c9:ce:57:7c:b2:6f:52:20:
99:7d:3d:d5:39:58:de:28:1c:0f:97:be:ca:11:a0:
d5:fd:64:02:cc:16:0d:8d:bb:67:1c:9b:35:1a:e1:
ec:eb:03:f0:4d:92:8c:f7:58:0a:9c:d2:3c:84:e8:
f9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:6B:4F:92:2B:56:42:16:F3:67:DF:AA:12:0E:E5:54:1C:D4:1C:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/217F6828CB6611F098D2B7ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.188.0/23
Signature Algorithm: sha256WithRSAEncryption
03:d6:81:06:a0:a6:4c:8c:f3:1f:ab:e1:4e:6f:1d:47:31:99:
e3:58:18:3c:3c:27:6a:ba:bc:67:b8:1f:80:f5:49:6c:7c:e8:
f9:3e:35:24:3d:1f:3a:aa:c5:b6:9c:30:22:fa:9a:5c:4e:8d:
77:f8:e5:b9:ba:d9:d4:8d:31:a5:bf:91:14:4b:bf:71:e5:db:
34:fd:57:53:d4:49:97:5a:d6:6d:2e:84:ba:48:60:f9:e8:a6:
a6:a9:68:06:68:72:02:2c:b7:a8:05:62:c1:9b:98:d5:67:bb:
a6:7c:4e:8c:98:5c:60:61:5e:ff:ee:cc:9e:be:90:7e:01:4b:
ef:6e:ea:b7:f4:b7:7a:40:2a:95:5e:bd:d4:70:bd:78:89:b5:
67:ea:c2:2f:0a:75:d6:42:59:c8:75:43:e3:36:bf:13:32:b8:
8e:3c:bb:c8:30:fe:9d:21:9b:97:75:48:55:66:82:1a:b7:84:
f5:26:10:e7:8a:37:85:52:bd:c4:84:0c:e7:41:e0:e1:70:2f:
ea:9d:36:b1:db:13:b4:4f:6d:47:5e:b9:23:d8:d5:3d:a8:d0:
5e:a6:3a:93:aa:ce:fa:8a:89:36:fa:31:b5:b8:af:77:d2:b5:
04:a5:2e:31:bd:54:05:35:31:e5:0a:10:cd:32:76:7d:23:a2:
5e:b3:c6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:10 2025 by rpki-client