This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3506A53ECF9711F0B363D4E4DAE4EC9C.roa
File: 3506A53ECF9711F0B363D4E4DAE4EC9C.roa (raw, json)
Hash identifier: TdqNsGpVSc7X8MIFkDKLUDdD0dmDkhyZThH8TUA7T1s=
Subject key identifier: D2:7B:06:23:FD:70:26:75:F9:CE:11:52:50:6B:37:52:2D:99:EE:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01ABA9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3506A53ECF9711F0B363D4E4DAE4EC9C.roa
Signing time: Tue 02 Dec 2025 15:54:39 +0000
ROA not before: Tue 02 Dec 2025 15:54:33 +0000
ROA not after: Thu 03 Dec 2026 15:54:33 +0000
asID: 37517
IP address blocks: 154.203.64.0/21 maxlen: 24
154.203.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109481 (0x1aba9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 2 15:54:33 2025 GMT
Not After : Dec 3 15:54:33 2026 GMT
Subject: CN=692f0bbf-fbf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f5:4e:83:11:11:2d:7d:ea:e3:40:8b:5f:30:
06:db:3e:95:79:e1:7a:0c:56:6d:c5:12:ab:13:0f:
c4:f4:6a:c7:ee:cc:be:24:6f:95:50:c1:fb:fb:c9:
53:83:c0:01:16:a0:18:97:fc:d3:32:1a:dc:02:c2:
64:e2:96:fe:00:b5:14:38:7a:66:1a:36:db:8f:ea:
b5:da:1d:af:aa:9b:52:80:05:cb:e9:3e:55:78:1a:
0c:85:8e:ed:01:07:ed:9e:64:e1:46:5b:5f:a6:c8:
a0:31:a8:57:49:07:9e:99:25:81:97:3f:17:0b:ea:
7f:cb:c2:f0:af:cb:e3:50:af:e6:e6:39:d3:47:0c:
b4:64:4f:67:17:7d:34:2c:29:4a:8b:72:6e:60:cc:
b5:75:d0:ab:1c:e0:0a:72:ee:d8:64:d8:a2:06:6c:
16:01:3f:96:43:50:99:74:93:fa:8f:5a:93:7a:9c:
5e:3c:06:c2:88:67:fe:5c:37:fc:1c:36:34:da:1e:
47:14:17:de:d5:9f:b7:a0:a0:0d:3a:92:7f:13:cd:
79:18:0c:bc:0b:e4:cd:0a:1a:f2:65:61:ab:8a:75:
e0:8a:21:8b:20:bd:dd:05:f3:c7:4b:50:ef:0a:a8:
d5:b7:d1:e4:d6:63:15:6a:ff:ee:e9:f0:a8:4f:68:
f3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7B:06:23:FD:70:26:75:F9:CE:11:52:50:6B:37:52:2D:99:EE:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3506A53ECF9711F0B363D4E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.64.0/21
154.203.232.0/21
Signature Algorithm: sha256WithRSAEncryption
a0:d2:16:71:d0:41:95:25:1d:fb:33:0b:01:17:b8:3a:bd:c0:
2e:c1:6d:82:fa:e1:bc:db:dd:51:b4:b0:42:f8:29:1c:2c:6f:
6f:58:78:59:dd:a0:e1:2e:f6:f5:27:80:94:92:e2:6e:7b:0b:
d0:af:e1:b6:5d:e9:7d:e1:77:16:da:9b:a5:da:ed:07:79:ee:
40:df:73:57:74:f0:70:06:af:05:b4:a4:8d:4d:6e:f0:58:73:
5f:d4:ee:27:b5:1e:24:f3:cd:fc:b3:a7:ea:12:8e:6e:be:db:
b1:3e:3c:d2:20:d6:cb:92:52:8f:40:0b:02:bc:da:a3:9c:e6:
ba:26:90:81:24:b5:da:5f:10:e7:1a:f8:59:eb:c7:26:0b:21:
30:d7:59:ce:44:68:88:3f:b1:8f:6a:cf:1e:e9:65:74:e6:8b:
78:c7:05:ad:1d:1d:61:b5:d9:0c:4a:68:0e:bd:e5:c9:0e:95:
78:17:1f:79:e6:c4:cd:83:98:b8:46:f7:85:d3:09:62:e2:08:
60:13:b1:a5:48:49:81:bd:e9:6f:f5:3a:c0:74:79:76:67:a0:
97:c2:46:05:0a:2a:c2:a5:4e:2f:52:46:79:51:d1:b3:d8:14:
37:2a:88:31:03:e9:ab:5b:bd:66:3b:63:68:54:f1:d0:43:83:
88:b2:c5:5c
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIDAaupMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjAyMTU1NDMzWhcNMjYxMjAzMTU1NDMzWjAYMRYw
FAYDVQQDEw02OTJmMGJiZi1mYmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzvVOgxERLX3q40CLXzAG2z6VeeF6DFZtxRKrEw/E9GrH7sy+JG+VUMH7
+8lTg8ABFqAYl/zTMhrcAsJk4pb+ALUUOHpmGjbbj+q12h2vqptSgAXL6T5VeBoM
hY7tAQftnmThRltfpsigMahXSQeemSWBlz8XC+p/y8Lwr8vjUK/m5jnTRwy0ZE9n
F300LClKi3JuYMy1ddCrHOAKcu7YZNiiBmwWAT+WQ1CZdJP6j1qTepxePAbCiGf+
XDf8HDY02h5HFBfe1Z+3oKANOpJ/E815GAy8C+TNChryZWGrinXgiiGLIL3dBfPH
S1DvCqjVt9Hk1mMVav/u6fCoT2jz9QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFNJ7
BiP9cCZ1+c4RUlBrN1Itme5pMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNTA2QTUzRUNGOTcxMUYwQjM2M0Q0RTREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDmstAAwQDmsvoMA0GCSqG
SIb3DQEBCwUAA4IBAQCg0hZx0EGVJR37MwsBF7g6vcAuwW2C+uG8291RtLBC+Ckc
LG9vWHhZ3aDhLvb1J4CUkuJuewvQr+G2Xel94XcW2pul2u0Hee5A33NXdPBwBq8F
tKSNTW7wWHNf1O4ntR4k8838s6fqEo5uvtuxPjzSINbLklKPQAsCvNqjnOa6JpCB
JLXaXxDnGvhZ68cmCyEw11nORGiIP7GPas8e6WV05ot4xwWtHR1htdkMSmgOveXJ
DpV4Fx955sTNg5i4RveF0wli4ghgE7GlSEmBvelv9TrAdHl2Z6CXwkYFCirCpU4v
UkZ5UdGz2BQ3KogxA+mrW71mO2NoVPHQQ4OIssVc
-----END CERTIFICATE-----
Generated at Wed Dec 3 11:07:14 2025 by rpki-client