This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A532886C3BE11F09FB327EDDAE4EC9C.roa
File: 2A532886C3BE11F09FB327EDDAE4EC9C.roa (raw, json)
Hash identifier: hEm87oseMwYbiP+fpn6k63DfzMIA8GTm+pUQngIbzH4=
Subject key identifier: 23:82:9E:2E:23:9E:24:14:EF:DF:6F:82:58:A0:4C:6C:42:CB:71:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A961
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A532886C3BE11F09FB327EDDAE4EC9C.roa
Signing time: Mon 17 Nov 2025 14:03:17 +0000
ROA not before: Mon 17 Nov 2025 14:03:12 +0000
ROA not after: Wed 24 Dec 2025 14:03:12 +0000
asID: 153706
IP address blocks: 154.89.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108897 (0x1a961)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 14:03:12 2025 GMT
Not After : Dec 24 14:03:12 2025 GMT
Subject: CN=691b2b25-5b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2e:64:0f:ef:45:1f:a4:70:c6:9c:6a:95:79:
78:73:a4:f0:7a:a7:37:d4:ae:5c:bc:83:16:1c:ae:
1c:ec:c5:37:34:5c:79:25:eb:e3:e7:61:f6:7e:b3:
61:6f:c1:68:36:02:db:08:cd:63:d6:a5:9c:89:e3:
83:35:30:96:20:1c:e5:31:0f:c6:76:50:ec:94:46:
06:37:06:1f:35:03:4a:b4:db:04:4c:41:21:f0:be:
77:2b:12:cf:8f:4d:6e:fe:09:aa:d6:c2:2a:28:72:
ea:10:3f:d9:86:99:14:36:ff:ef:6a:df:d0:f4:97:
07:ed:1f:ea:97:96:d3:cc:0d:4b:7f:bf:c5:11:08:
2f:ca:d4:ab:5e:8a:c4:fc:8f:33:b0:e3:cd:5b:1d:
90:e2:06:3f:12:fc:92:69:01:21:c5:42:2d:a0:ad:
eb:6b:9b:a6:e4:e8:79:36:d7:a2:0b:93:3a:a2:f2:
0d:c7:9e:80:48:44:69:d9:c6:e0:15:c0:16:c6:db:
da:53:15:84:42:b4:6c:e5:5e:ca:f3:1d:a4:c6:e3:
53:e5:6f:68:7c:df:e6:49:ab:d5:cb:a1:a2:d9:ec:
59:97:37:7e:ce:90:cd:fb:94:cd:b8:c0:13:b0:8d:
38:ba:a9:2f:e8:3c:2b:09:52:50:a1:0b:4e:04:ae:
ed:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:82:9E:2E:23:9E:24:14:EF:DF:6F:82:58:A0:4C:6C:42:CB:71:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A532886C3BE11F09FB327EDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.194.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:61:20:16:af:d0:93:ec:d7:0f:3c:1b:d4:2b:13:6d:b6:b3:
49:e8:b5:dc:e2:e6:88:63:73:c4:15:81:b8:22:24:e0:0e:80:
2f:0b:e1:38:2c:1e:38:5b:dd:43:e4:39:f5:bb:2d:56:a1:1d:
51:67:83:f1:15:80:c6:bf:a1:79:af:e0:4f:b1:f0:bc:fe:82:
c5:ad:fc:74:08:d4:bb:fe:0e:70:de:7c:d4:46:bb:c2:f3:19:
e2:1f:04:48:25:d9:e5:b1:cc:ea:9e:45:8a:53:cd:62:8f:b1:
4b:4c:21:8a:52:0d:08:8a:08:0e:89:e6:f3:c0:1b:d2:cd:27:
d7:f6:82:41:c3:ff:64:73:64:43:45:5a:b6:ae:74:f1:55:13:
1d:46:41:11:43:b3:a9:fa:10:46:c1:eb:b2:14:84:b0:6c:48:
2c:d5:85:d4:db:ac:f5:11:ab:bd:c0:4d:e7:46:fe:ab:f6:22:
29:88:b4:52:de:e6:5c:b9:61:92:4c:3c:95:1e:c6:28:d8:ec:
58:c1:89:1c:42:ca:42:7e:66:07:46:b1:77:f4:94:70:be:ac:
eb:42:c2:b8:92:c1:a3:5e:69:d0:be:29:9c:5c:80:74:45:04:
5f:c6:71:d2:6d:2c:74:7b:be:05:62:92:8a:7c:ad:b3:52:5f:
ba:64:68:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:29:01 2025 by rpki-client