This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E67FF6CCAC611F0A6BB28C0DAE4EC9C.roa
File: 4E67FF6CCAC611F0A6BB28C0DAE4EC9C.roa (raw, json)
Hash identifier: Ml5b1qdbCvZS+5Tzy+qDrf2DReDXOAimmFIM1MF2hUo=
Subject key identifier: E2:D9:6F:28:92:21:B9:8D:43:5F:53:B6:C1:3C:4A:AB:A6:83:E8:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AAB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E67FF6CCAC611F0A6BB28C0DAE4EC9C.roa
Signing time: Wed 26 Nov 2025 12:49:12 +0000
ROA not before: Wed 26 Nov 2025 12:49:04 +0000
ROA not after: Sat 10 Jan 2026 12:49:04 +0000
asID: 142032
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109233 (0x1aab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 26 12:49:04 2025 GMT
Not After : Jan 10 12:49:04 2026 GMT
Subject: CN=6926f748-0242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4d:50:9a:70:f6:a3:87:5b:14:a4:f5:f6:c2:
aa:c3:3a:bf:58:ae:bc:e2:7d:b9:48:4e:d4:d9:1c:
4a:8a:d5:df:30:c3:ff:e1:39:33:7d:b9:5b:4e:b2:
e6:dd:eb:16:2d:c2:6b:18:4f:01:52:6d:16:b3:1c:
64:95:69:47:03:96:c3:ff:89:03:0f:45:62:cd:aa:
4f:dd:8d:6c:16:2d:40:aa:7e:e8:93:77:d2:29:7e:
b9:20:94:49:b3:9b:8e:89:f8:55:b6:eb:f3:16:df:
ee:81:5c:e9:db:3d:c3:3f:0e:42:99:3f:5b:f4:e3:
5c:0b:1c:11:ce:dc:b7:a5:5b:92:c1:89:05:1a:41:
e4:9b:b8:f3:ce:95:05:04:b3:9d:76:39:37:49:2f:
6a:22:04:bf:a3:60:f5:21:14:c4:73:20:08:9b:5c:
b8:f3:80:26:11:60:eb:28:68:5b:b1:f3:0c:82:ed:
e8:f9:0f:38:45:14:be:37:f5:ab:fe:7c:55:dd:89:
45:e4:26:11:67:1c:d0:49:f6:50:9d:b9:2f:94:25:
e6:af:14:ac:a9:43:84:1b:1a:68:06:6b:e1:ac:08:
c4:1a:d2:1c:29:39:43:eb:6f:fd:03:b6:cb:e0:8c:
fc:1c:41:ed:5b:ec:9c:fc:0e:73:c8:27:8c:1b:59:
bd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D9:6F:28:92:21:B9:8D:43:5F:53:B6:C1:3C:4A:AB:A6:83:E8:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4E67FF6CCAC611F0A6BB28C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
4b:f2:de:f6:b4:15:cc:8f:a9:90:e1:18:ea:38:d9:5b:e9:b5:
d5:54:a3:e8:fc:19:14:06:8d:ca:b7:14:3b:5f:f3:19:1e:ea:
d2:7d:81:b9:0f:ab:a8:37:d8:f4:c8:5a:0e:66:92:cc:f4:01:
67:75:46:c6:a3:7f:88:cc:b4:01:6b:e8:15:81:94:09:b2:dc:
78:d7:94:40:5e:a9:41:a4:40:ae:25:d7:a9:cc:68:ed:a3:c8:
ed:f0:51:6c:8d:19:8d:9a:0b:cb:66:04:68:ae:0c:be:c6:7f:
60:96:10:25:75:bd:f1:df:12:75:cb:6f:58:4a:38:e1:b7:56:
88:e2:f8:56:de:a3:04:f5:dd:c3:f4:65:01:d9:de:cb:7d:bc:
eb:dd:dd:dd:31:7d:11:ed:a3:a5:cd:a9:8c:97:3b:c8:97:5d:
f5:81:1b:8a:37:a6:b6:ff:06:2b:dd:23:8f:da:f8:4a:5f:0e:
6c:c3:4f:1c:86:76:8c:74:be:d9:07:af:34:8a:8a:74:5e:91:
cc:29:67:80:0f:24:3e:3a:4b:b0:44:ee:bd:ea:3d:a4:45:74:
b6:29:a6:a6:1d:24:1c:9e:b9:8c:b8:9b:a1:8f:90:84:bb:e9:
c8:47:60:e0:d4:1c:73:3b:a5:66:42:6b:4c:f1:0a:d2:b4:11:
58:ac:12:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaqxMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTI2MTI0OTA0WhcNMjYwMTEwMTI0OTA0WjAYMRYw
FAYDVQQDEw02OTI2Zjc0OC0wMjQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArU1QmnD2o4dbFKT19sKqwzq/WK684n25SE7U2RxKitXfMMP/4Tkzfblb
TrLm3esWLcJrGE8BUm0WsxxklWlHA5bD/4kDD0VizapP3Y1sFi1Aqn7ok3fSKX65
IJRJs5uOifhVtuvzFt/ugVzp2z3DPw5CmT9b9ONcCxwRzty3pVuSwYkFGkHkm7jz
zpUFBLOddjk3SS9qIgS/o2D1IRTEcyAIm1y484AmEWDrKGhbsfMMgu3o+Q84RRS+
N/Wr/nxV3YlF5CYRZxzQSfZQnbkvlCXmrxSsqUOEGxpoBmvhrAjEGtIcKTlD62/9
A7bL4Iz8HEHtW+yc/A5zyCeMG1m9HQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOLZ
byiSIbmNQ19TtsE8Squmg+jZMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC80RTY3RkY2Q0NBQzYxMUYwQTZCQjI4QzBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEml7gMA0GCSqGSIb3DQEB
CwUAA4IBAQBL8t72tBXMj6mQ4RjqONlb6bXVVKPo/BkUBo3KtxQ7X/MZHurSfYG5
D6uoN9j0yFoOZpLM9AFndUbGo3+IzLQBa+gVgZQJstx415RAXqlBpECuJdepzGjt
o8jt8FFsjRmNmgvLZgRorgy+xn9glhAldb3x3xJ1y29YSjjht1aI4vhW3qME9d3D
9GUB2d7Lfbzr3d3dMX0R7aOlzamMlzvIl131gRuKN6a2/wYr3SOP2vhKXw5sw08c
hnaMdL7ZB680iop0XpHMKWeADyQ+OkuwRO696j2kRXS2KaamHSQcnrmMuJuhj5CE
u+nIR2Dg1BxzO6VmQmtM8QrStBFYrBJZ
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:09 2025 by rpki-client