This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F2E551ECF9511F0BA4778D8DAE4EC9C.roa
File: 2F2E551ECF9511F0BA4778D8DAE4EC9C.roa (raw, json)
Hash identifier: g9rDuiTCw839bY2/mUDLPsi4dP/wuyty2yCe3FSaxS0=
Subject key identifier: 84:30:D8:C8:EB:CC:B3:A3:D9:6F:41:03:5A:61:0D:1F:BF:9A:C9:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01ABA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F2E551ECF9511F0BA4778D8DAE4EC9C.roa
Signing time: Tue 02 Dec 2025 15:40:10 +0000
ROA not before: Tue 02 Dec 2025 15:40:02 +0000
ROA not after: Mon 05 Jan 2026 15:40:02 +0000
asID: 64126
IP address blocks: 154.88.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109475 (0x1aba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 2 15:40:02 2025 GMT
Not After : Jan 5 15:40:02 2026 GMT
Subject: CN=692f085a-fa9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9b:87:aa:89:35:52:e9:7f:95:a7:50:1f:c8:
16:ba:4f:63:e4:3d:91:93:e3:93:49:6e:3e:a5:7d:
fb:ba:6a:af:83:3b:9a:e3:8a:ac:17:58:d8:7b:86:
cd:50:11:82:af:38:ae:7a:d1:0b:6a:93:71:72:be:
b3:06:ed:a7:f2:2b:61:3a:d6:be:42:c0:90:9f:a4:
a0:36:4b:03:f3:28:2b:3a:5d:93:6f:45:ac:53:ef:
1a:56:18:ed:8e:a5:60:2a:f0:e0:38:13:4e:a8:6c:
66:69:11:42:62:e0:33:1f:5f:67:15:31:82:6a:ae:
2b:fd:f3:cf:55:63:66:5c:45:ea:d3:c4:76:d1:7d:
1b:3c:5c:a6:cf:8a:e0:c6:24:5f:17:26:27:13:5a:
fe:5f:70:83:52:c1:00:8e:59:86:46:6e:cd:74:9a:
f9:fb:28:fc:6f:0f:b6:64:e9:7e:e3:55:3e:f5:de:
45:bc:cd:5b:cd:a0:13:37:f3:16:b8:bd:5f:f5:cb:
af:c3:54:42:0d:28:af:6e:b2:bb:0e:70:38:b8:b2:
b9:7d:82:05:ed:a1:24:fe:18:1a:9a:d4:2f:45:26:
86:06:ab:28:54:50:d1:d8:7b:e5:d0:da:36:db:77:
64:dd:2e:fa:b8:c7:0f:a3:ee:05:8c:e3:fa:65:03:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:30:D8:C8:EB:CC:B3:A3:D9:6F:41:03:5A:61:0D:1F:BF:9A:C9:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F2E551ECF9511F0BA4778D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.128.0/17
Signature Algorithm: sha256WithRSAEncryption
c3:8a:68:61:be:cb:c7:f7:37:9e:c9:86:a8:61:fc:4f:11:c9:
4d:b1:70:9d:5e:cd:6e:02:b4:bc:06:11:08:fa:09:d9:0a:f7:
17:b7:e1:bd:0d:99:ae:44:d5:82:75:13:95:fa:0b:49:38:f7:
97:b8:8f:bb:ee:d0:b9:68:99:a1:0b:fe:71:5e:85:b1:96:ac:
00:ca:af:e4:b9:5d:a8:31:74:de:f4:65:e4:f9:8b:7f:22:5f:
7e:29:93:22:33:d9:10:bf:c8:fc:e4:17:d8:68:84:66:50:71:
23:c2:14:d5:a1:5d:fa:61:ac:6f:54:20:03:e9:7e:e9:1c:d0:
14:16:b0:fb:e1:ff:c6:f2:89:25:21:c5:56:dd:93:f9:75:6f:
b0:36:8a:b2:e1:c8:df:aa:7f:4d:9e:1b:83:ab:94:27:1f:0b:
3d:fa:fc:70:29:da:70:b8:ee:34:52:8f:aa:b4:8a:15:2d:1e:
bb:9e:85:93:a3:d5:4a:7d:1c:b2:9e:0a:6e:db:40:30:c5:a8:
2f:66:80:f1:05:94:ad:d6:72:04:f3:96:ce:3a:a3:51:d7:cd:
7c:7c:cb:c5:be:92:22:3a:c8:fc:4c:eb:a8:f8:40:fa:45:6e:
d7:98:3f:ee:f4:cb:de:fd:96:75:9f:64:5f:f0:7b:65:5c:ea:
7c:37:49:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:06:35 2025 by rpki-client