This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C2E1CC4D02011F0B0A363CBDAE4EC9C.roa
File: 2C2E1CC4D02011F0B0A363CBDAE4EC9C.roa (raw, json)
Hash identifier: gbIb4Du1s/gCygqbVkrNX8bMKmlp5PbapcVk58yhl/0=
Subject key identifier: 88:5C:05:47:23:06:A6:6B:54:70:1B:32:68:C6:C3:E1:09:6B:BF:A9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AC0F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C2E1CC4D02011F0B0A363CBDAE4EC9C.roa
Signing time: Wed 03 Dec 2025 08:15:05 +0000
ROA not before: Wed 03 Dec 2025 08:15:00 +0000
ROA not after: Mon 05 Jan 2026 08:15:00 +0000
asID: 44559
IP address blocks: 154.209.197.0/24 maxlen: 24
154.209.198.0/24 maxlen: 24
154.209.199.0/24 maxlen: 24
154.209.200.0/24 maxlen: 24
154.209.201.0/24 maxlen: 24
154.209.202.0/24 maxlen: 24
154.209.203.0/24 maxlen: 24
154.209.204.0/24 maxlen: 24
154.209.205.0/24 maxlen: 24
154.209.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109583 (0x1ac0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 3 08:15:00 2025 GMT
Not After : Jan 5 08:15:00 2026 GMT
Subject: CN=692ff189-636f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:83:47:5a:f1:a9:58:8d:10:db:8e:55:08:10:
a7:20:8a:b5:95:67:af:57:85:b5:5a:f3:db:91:7c:
33:59:61:e0:ce:c6:c2:84:66:3c:e6:25:fc:c6:8e:
f7:3a:c1:3c:17:7e:ba:84:da:92:b3:59:4c:10:70:
2c:00:be:91:29:f2:e5:eb:a2:a6:80:f1:70:15:d2:
f8:02:95:62:dc:90:de:e8:7a:67:73:17:09:b5:58:
53:d3:5f:49:73:25:77:b5:6c:a5:7c:95:ef:6f:f1:
ff:e6:02:52:41:b3:38:c0:02:0f:1d:77:c6:53:ff:
60:28:e9:2d:20:1e:87:92:16:f7:78:ee:1d:2e:3d:
e1:65:e8:e4:f7:92:6e:6a:76:eb:7a:a4:bb:e4:4f:
56:e0:80:9f:c6:5c:e6:7f:a4:e9:23:76:b7:59:e3:
c1:26:9d:15:eb:ba:1a:2a:95:10:20:e7:58:80:eb:
9b:49:e6:1d:49:8e:36:61:a9:11:0a:97:1b:3e:98:
d1:4f:7b:20:b5:37:23:77:82:7a:db:09:12:9b:7f:
ac:d9:a5:2d:1d:ca:71:37:13:82:ff:f0:32:7e:f7:
0d:b1:ac:28:d0:af:15:91:8c:3f:91:ff:e4:61:bd:
d9:ed:15:76:9c:d7:d9:9e:16:0b:75:bc:77:1c:66:
c3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5C:05:47:23:06:A6:6B:54:70:1B:32:68:C6:C3:E1:09:6B:BF:A9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2C2E1CC4D02011F0B0A363CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.197.0-154.209.205.255
154.209.207.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ea:30:ee:31:2e:24:34:39:48:65:83:31:e7:26:64:08:f2:
9f:10:be:a4:e6:00:8b:00:27:ff:21:ef:43:3f:33:fe:4b:11:
33:b2:9b:72:88:65:0f:74:c2:12:18:16:87:bd:9c:a2:d8:07:
bb:e8:3c:57:60:44:35:42:26:6e:1c:a0:82:fe:ba:98:08:b6:
46:f4:4e:34:b1:41:28:68:76:87:be:d9:46:d4:5e:26:c4:67:
f3:90:72:e5:6e:4b:84:f5:54:e6:8b:23:b6:ec:81:ce:eb:c5:
a1:cf:c2:e1:6d:58:26:72:6b:ae:40:10:00:c5:85:31:11:06:
fd:58:a1:38:91:4b:95:c9:10:a0:37:b7:b9:b4:f3:8a:72:0a:
46:9d:1c:93:9a:0f:a4:52:51:fb:a0:81:d5:24:31:ee:f2:cf:
ed:d3:a2:51:41:ca:18:1b:f0:c5:bb:3b:49:37:09:06:fa:51:
de:8f:62:41:46:9d:2d:f1:0d:c3:a0:87:66:9a:dc:51:0b:ad:
af:d8:33:da:b1:df:7b:79:d0:dd:66:e7:b5:69:11:b3:e4:42:
03:35:88:07:42:3d:17:b6:c7:0e:ad:2b:98:99:a9:ea:25:3e:
1d:ba:f7:3a:a7:90:5a:72:14:6b:73:eb:83:1c:bd:d2:99:08:
27:7a:d7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:29:00 2025 by rpki-client