This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D071DE8CAC211F0842021A7DAE4EC9C.roa
File: 2D071DE8CAC211F0842021A7DAE4EC9C.roa (raw, json)
Hash identifier: 1KWYneXKM5PijfZ5uRKzcTb+CcPCvaEjMBMBF6dAC3E=
Subject key identifier: 38:F8:BB:13:17:9F:77:47:E4:4D:23:0E:31:E4:69:2E:3F:05:CE:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AAAB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D071DE8CAC211F0842021A7DAE4EC9C.roa
Signing time: Wed 26 Nov 2025 12:19:38 +0000
ROA not before: Wed 26 Nov 2025 12:19:31 +0000
ROA not after: Fri 02 Jan 2026 12:19:31 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109227 (0x1aaab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 26 12:19:31 2025 GMT
Not After : Jan 2 12:19:31 2026 GMT
Subject: CN=6926f05a-3149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:c3:8c:f2:59:18:0d:5a:96:f2:29:71:8b:
24:38:90:37:44:f3:ec:a5:35:01:89:1c:d4:7e:ec:
8c:fb:78:31:b0:6a:03:40:36:4b:b9:84:fb:c6:67:
5d:a8:54:87:5e:e1:0a:bc:4e:1c:3b:17:44:77:07:
1d:ec:12:a4:01:1e:dd:18:e4:eb:f5:5c:4b:cd:f4:
7e:93:44:c7:01:b0:cd:22:62:93:9b:1e:0f:54:e6:
ab:db:c1:db:82:27:10:26:47:67:97:11:f6:03:af:
10:ff:9a:43:7c:ee:31:b4:1d:dc:26:8e:a7:b8:12:
32:97:e1:57:50:65:42:e6:a6:23:98:43:95:fd:79:
84:ac:fa:3e:22:8d:20:a1:e8:71:6b:52:89:cc:e9:
3f:9a:f4:d7:d7:00:eb:ec:de:23:43:ff:cd:d3:dd:
b3:07:3e:86:73:0d:c8:6e:9e:96:77:17:25:32:02:
a7:82:55:aa:fd:91:92:99:ab:57:ed:39:4d:51:cd:
3e:f7:23:8e:d9:bd:9b:4e:70:b4:22:9a:41:11:e0:
63:a9:43:8c:3c:9f:55:ab:c1:32:86:de:49:2e:f8:
4f:8b:72:54:c7:78:a3:af:19:0c:8a:4a:1c:76:61:
d3:46:f8:a7:03:f6:fc:f7:b5:bd:00:dd:bc:f3:e1:
8a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F8:BB:13:17:9F:77:47:E4:4D:23:0E:31:E4:69:2E:3F:05:CE:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2D071DE8CAC211F0842021A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6e:84:99:48:81:8c:da:d4:76:a4:c8:93:ba:0d:b3:ff:10:
1d:4e:b7:65:65:31:af:9a:c8:41:cf:5d:13:2d:3e:80:fb:d9:
5e:d9:88:9d:ca:ea:fa:96:68:f7:2f:41:bb:9e:3a:45:31:25:
cf:e4:de:1a:1a:d2:bf:1f:28:9b:05:55:ce:c8:51:ba:f4:19:
a2:e2:b9:1d:a2:a4:62:04:3a:70:f0:94:07:35:56:dc:64:76:
66:26:93:1e:1c:06:43:65:b0:e7:43:ad:ff:e9:a5:38:10:f3:
06:cf:3b:67:21:21:20:e9:3c:90:32:fb:e1:31:0c:d3:d4:48:
48:d9:04:57:f3:61:93:a0:69:8c:97:c4:67:a1:e6:45:36:69:
59:51:07:4a:20:82:03:ee:34:45:5b:28:55:bf:d0:19:16:8c:
91:22:d5:2e:1a:75:6e:ec:23:2a:fc:05:fd:3a:27:87:e7:d4:
a1:d0:3f:95:b7:af:a7:e5:4d:35:92:20:b1:95:68:53:c9:66:
d7:d7:a8:cb:e0:93:c5:a6:d1:89:59:f3:3a:4b:eb:bf:c5:59:
88:55:f4:a7:ca:65:c6:94:59:b8:56:c6:96:ca:0f:6c:9b:dc:
cb:f5:87:3e:36:41:f3:67:bf:f7:04:38:cc:6a:59:b3:91:47:
7c:b1:b9:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:10 2025 by rpki-client