This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36C1992CDF0C11F0B5B2E8DCDAE4EC9C.roa
File: 36C1992CDF0C11F0B5B2E8DCDAE4EC9C.roa (raw, json)
Hash identifier: 8QOflydEeaaP8wm7hR5igBHbs8nxaXK+zF40b0AmfCU=
Subject key identifier: 38:FB:FD:A4:FC:07:D9:A9:B1:5A:7B:52:7B:CA:AC:A3:D3:53:90:82
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AFCC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36C1992CDF0C11F0B5B2E8DCDAE4EC9C.roa
Signing time: Mon 22 Dec 2025 08:00:00 +0000
ROA not before: Mon 22 Dec 2025 07:59:55 +0000
ROA not after: Tue 30 Dec 2025 07:59:55 +0000
asID: 138456
IP address blocks: 154.197.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Dec 2025 08:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110540 (0x1afcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 22 07:59:55 2025 GMT
Not After : Dec 30 07:59:55 2025 GMT
Subject: CN=6948fa80-b47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4f:f3:d7:41:b8:0d:25:41:e2:75:72:2d:f4:
40:64:cf:34:2f:ec:87:ff:97:a7:31:88:86:3c:01:
55:44:1d:38:c2:6b:73:cb:be:de:37:f6:1b:84:5b:
72:b1:95:52:47:7c:53:01:82:b5:49:9f:8b:b1:77:
cf:d8:b2:b8:29:27:9f:82:9a:bd:a3:6a:06:bb:de:
06:2d:1b:65:ce:e7:d1:6b:ee:aa:ca:51:6f:41:9d:
7e:72:c8:5a:11:5b:9e:56:dd:b0:8c:11:b4:35:64:
1a:db:92:74:64:2c:48:88:b3:bd:98:4b:88:91:f9:
07:31:ce:ca:54:26:3f:b6:58:0f:3d:52:68:ad:16:
b2:bf:a8:78:9c:ea:7f:b3:ea:f6:af:bf:f0:c1:94:
46:33:de:78:1d:8b:14:6e:f0:48:23:9d:2d:1e:e7:
8d:72:a3:33:80:29:70:f2:5b:70:ec:2f:33:ff:00:
f1:39:ce:a2:b0:03:cf:5d:a2:3b:f6:59:23:c9:06:
8a:51:e6:67:50:58:7d:79:54:72:1e:68:96:b6:b2:
f5:28:a6:72:ef:84:27:a8:90:33:d6:ea:b9:ec:8e:
c8:84:01:fb:29:f1:72:5e:6b:43:46:b4:32:81:8f:
fb:93:80:1d:6b:89:7b:3e:81:7d:0a:e7:f6:6f:16:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FB:FD:A4:FC:07:D9:A9:B1:5A:7B:52:7B:CA:AC:A3:D3:53:90:82
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/36C1992CDF0C11F0B5B2E8DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.76.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:76:eb:eb:db:98:dc:66:85:e4:00:ad:e1:cc:62:2b:31:44:
32:0a:3e:08:20:bf:89:f7:6d:bb:66:1d:7e:1a:13:99:b9:92:
c4:a4:46:32:11:e0:ab:00:ca:2d:d5:fe:ab:cf:f8:54:8c:4b:
1f:aa:23:27:e1:d7:50:57:47:48:d5:98:21:d8:88:13:61:f9:
27:21:12:7f:6b:a0:e2:52:c0:ae:9f:93:1e:4c:62:98:20:32:
1f:74:f2:d9:8d:8b:87:69:22:dc:ed:2d:c2:ae:55:83:04:b0:
73:2a:c8:45:61:dc:53:2a:8e:f2:a4:01:d3:de:a6:ff:c5:70:
01:a8:64:01:ea:7b:5b:f9:2f:ab:6f:08:0a:8c:e5:1a:54:e3:
e4:2c:ec:33:cd:7c:2a:67:04:e1:8f:7a:ef:37:00:af:36:a0:
40:16:28:7f:12:71:db:9b:10:31:23:bf:86:d5:4f:1f:31:44:
87:7f:c3:7a:37:f8:59:68:4a:18:02:00:86:bb:01:f5:93:d8:
5a:c6:a6:10:50:a9:95:3b:f2:a8:c0:97:58:7c:aa:f5:25:f9:
2c:fb:6c:14:e0:16:18:fc:bc:38:ea:80:f7:9b:91:e1:78:58:
8a:70:c9:6e:21:68:fc:4f:b8:d5:28:c7:c3:2c:e9:f8:b9:e4:
f2:1f:66:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAa/MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjIyMDc1OTU1WhcNMjUxMjMwMDc1OTU1WjAYMRYw
FAYDVQQDEw02OTQ4ZmE4MC1iNDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4U/z10G4DSVB4nVyLfRAZM80L+yH/5enMYiGPAFVRB04wmtzy77eN/Yb
hFtysZVSR3xTAYK1SZ+LsXfP2LK4KSefgpq9o2oGu94GLRtlzufRa+6qylFvQZ1+
cshaEVueVt2wjBG0NWQa25J0ZCxIiLO9mEuIkfkHMc7KVCY/tlgPPVJorRayv6h4
nOp/s+r2r7/wwZRGM954HYsUbvBII50tHueNcqMzgClw8ltw7C8z/wDxOc6isAPP
XaI79lkjyQaKUeZnUFh9eVRyHmiWtrL1KKZy74QnqJAz1uq57I7IhAH7KfFyXmtD
RrQygY/7k4Ada4l7PoF9Cuf2bxYVHQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFDj7
/aT8B9mpsVp7UnvKrKPTU5CCMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC8zNkMxOTkyQ0RGMEMxMUYwQjVCMkU4RENEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsVMMA0GCSqGSIb3DQEB
CwUAA4IBAQCOduvr25jcZoXkAK3hzGIrMUQyCj4IIL+J9227Zh1+GhOZuZLEpEYy
EeCrAMot1f6rz/hUjEsfqiMn4ddQV0dI1Zgh2IgTYfknIRJ/a6DiUsCun5MeTGKY
IDIfdPLZjYuHaSLc7S3CrlWDBLBzKshFYdxTKo7ypAHT3qb/xXABqGQB6ntb+S+r
bwgKjOUaVOPkLOwzzXwqZwThj3rvNwCvNqBAFih/EnHbmxAxI7+G1U8fMUSHf8N6
N/hZaEoYAgCGuwH1k9haxqYQUKmVO/KowJdYfKr1Jfks+2wU4BYY/Lw46oD3m5Hh
eFiKcMluIWj8T7jVKMfDLOn4ueTyH2bL
-----END CERTIFICATE-----
Generated at Tue Dec 23 09:37:56 2025 by rpki-client