This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2899416CDF0A11F0A9096FD0DAE4EC9C.roa
File: 2899416CDF0A11F0A9096FD0DAE4EC9C.roa (raw, json)
Hash identifier: NJKPERIMIr+Lp3ODpbaV13qZizp0fwkm7Q8UopS37lo=
Subject key identifier: 08:4A:36:16:3F:77:77:6C:DF:E9:C4:DC:5F:89:08:F8:F3:95:9A:01
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AFC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2899416CDF0A11F0A9096FD0DAE4EC9C.roa
Signing time: Mon 22 Dec 2025 07:45:17 +0000
ROA not before: Mon 22 Dec 2025 07:45:13 +0000
ROA not after: Mon 26 Jan 2026 07:45:13 +0000
asID: 6079
IP address blocks: 154.199.49.0/24 maxlen: 24
154.199.50.0/24 maxlen: 24
154.199.51.0/24 maxlen: 24
154.199.52.0/24 maxlen: 24
154.199.53.0/24 maxlen: 24
154.199.54.0/24 maxlen: 24
154.199.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Dec 2025 08:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110532 (0x1afc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 22 07:45:13 2025 GMT
Not After : Jan 26 07:45:13 2026 GMT
Subject: CN=6948f70d-7583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3e:79:30:5f:e7:5a:c2:42:45:a8:3a:a3:b2:
e7:66:93:10:30:3f:8b:68:55:d5:8f:76:e6:14:84:
01:dd:44:2f:da:23:90:6d:58:89:9d:f1:32:a5:ef:
e5:8a:c6:a4:8d:01:c6:6b:f6:d9:ad:60:65:ed:00:
46:e6:1d:dc:3f:23:03:84:5e:87:13:9c:6e:61:5f:
4b:f2:2b:7f:27:e2:6e:61:6a:e2:de:a1:8e:fc:88:
bc:87:d9:c6:5a:70:aa:2a:97:01:c2:6b:14:ff:00:
44:f2:5c:94:56:e9:09:92:ad:f8:10:3d:0d:9a:26:
69:6f:57:5a:5a:19:1d:b3:1b:ad:e8:41:e2:3c:e0:
92:b2:a7:b5:f3:2c:e9:20:3b:07:a3:d7:26:68:2b:
93:bd:a4:00:94:74:5f:55:95:f4:96:6d:f5:74:f1:
68:b3:78:35:da:d8:90:15:43:e3:31:c0:49:3e:eb:
62:eb:f2:0c:b4:14:33:e4:62:2f:c7:37:bd:c5:4a:
67:06:7e:bb:c4:78:f3:9d:eb:05:57:79:34:15:47:
9d:cb:b7:03:62:68:3b:83:3e:b6:66:43:95:7b:f1:
73:49:e6:62:4e:d8:16:b1:9b:a8:40:be:8f:15:34:
14:c9:a7:bc:4f:ec:e9:92:fd:1e:8f:6e:d1:e0:b8:
95:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4A:36:16:3F:77:77:6C:DF:E9:C4:DC:5F:89:08:F8:F3:95:9A:01
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2899416CDF0A11F0A9096FD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.49.0-154.199.55.255
Signature Algorithm: sha256WithRSAEncryption
c7:54:2b:38:fb:73:67:fd:dc:6e:b2:0c:dc:65:72:9d:a8:75:
2d:35:0c:7e:40:dd:4c:43:2b:79:99:d6:80:19:ac:88:5a:cc:
a3:d6:ea:f5:05:3b:59:c3:06:c6:6f:b6:8a:fb:33:bf:86:80:
ad:3d:4b:a3:d1:0a:93:4b:0d:4c:14:e3:22:f8:bb:c7:0b:9b:
22:ba:88:9e:1a:bc:e7:74:7d:3e:d2:75:78:f0:2f:56:9c:7e:
88:56:b1:26:08:dd:51:fc:82:3f:17:9f:dd:f7:ca:96:67:a8:
a0:8c:dd:6d:10:06:fb:9b:99:54:a0:2e:8b:e3:68:08:11:52:
aa:49:6a:a1:fd:99:20:ed:e3:76:b5:e0:ef:33:97:5b:e8:69:
5c:55:56:71:b9:fd:67:1a:0f:78:24:51:a4:b6:a2:5e:e1:ae:
8a:55:af:0e:89:b5:c7:75:ad:bf:d3:5b:46:a0:2f:94:e5:3e:
7c:c2:ed:ea:4d:c8:6f:4d:25:6e:0d:0f:58:24:89:f3:bb:a4:
6a:68:23:80:f8:58:61:ec:b0:f1:11:41:fa:4c:d0:15:04:40:
87:d8:2c:36:b7:96:cc:c8:37:3a:d2:87:30:dc:e5:94:4c:eb:
a1:53:48:6b:41:dc:62:70:32:c4:99:33:02:dd:3f:ae:8e:73:
6d:4b:1f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:17:37 2025 by rpki-client