This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/567BAB8CD10F11F0AB3251A5DAE4EC9C.roa
File: 567BAB8CD10F11F0AB3251A5DAE4EC9C.roa (raw, json)
Hash identifier: /tvyyf4E8rM8+qtyT9J18FHV6RThvztJj/ZMcLVSsW4=
Subject key identifier: 07:20:E8:1F:37:4A:6D:E5:75:E9:C7:7F:63:73:B3:D5:A6:53:2B:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01ACD6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/567BAB8CD10F11F0AB3251A5DAE4EC9C.roa
Signing time: Thu 04 Dec 2025 12:47:06 +0000
ROA not before: Thu 04 Dec 2025 12:47:01 +0000
ROA not after: Tue 06 Jan 2026 12:47:01 +0000
asID: 45194
IP address blocks: 154.84.209.0/24 maxlen: 24
154.84.210.0/24 maxlen: 24
154.84.211.0/24 maxlen: 24
154.84.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Dec 2025 11:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109782 (0x1acd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 4 12:47:01 2025 GMT
Not After : Jan 6 12:47:01 2026 GMT
Subject: CN=693182ca-adf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:05:42:0f:0a:f3:db:ca:06:af:7f:e4:9f:
88:76:9a:86:cf:fa:90:28:90:02:ba:eb:d7:7a:e7:
de:69:6f:1e:02:25:4e:a2:29:34:13:25:99:c1:39:
38:53:e8:3a:af:24:ea:6a:40:01:0e:3f:b3:3f:de:
4f:ed:9b:80:9b:4b:36:4e:13:d3:ff:5b:dc:f2:0e:
a3:15:2c:fc:45:dc:b2:23:ed:fe:7a:aa:fa:54:0e:
ed:b2:58:b7:5a:76:f4:01:ec:43:79:b7:c3:95:f7:
2a:34:0c:d1:c3:42:53:74:5a:43:dc:23:85:55:42:
37:51:fd:67:8f:91:8c:b7:13:99:4d:74:cd:d9:34:
e6:dd:27:86:f8:4a:1d:04:33:35:93:5b:b0:9f:1a:
78:93:b3:f0:0a:37:2a:b9:dd:0f:f5:6f:bd:61:16:
cc:d3:8a:a5:d6:03:50:b3:f5:8d:f6:8b:98:32:49:
5e:6a:83:f7:60:49:e4:92:cc:3e:2a:59:51:7f:c8:
8d:8e:14:86:30:61:cf:93:a2:c5:52:84:b0:e7:a3:
06:16:73:6d:d1:39:2c:77:d5:a4:15:53:d6:ea:82:
7a:52:da:21:5b:40:91:37:8d:3f:42:48:34:d2:17:
3f:e1:78:7b:43:a3:8b:af:44:e0:e9:be:bc:7e:5d:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:20:E8:1F:37:4A:6D:E5:75:E9:C7:7F:63:73:B3:D5:A6:53:2B:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/567BAB8CD10F11F0AB3251A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.209.0-154.84.212.255
Signature Algorithm: sha256WithRSAEncryption
35:fc:6b:bb:9b:57:b2:e5:f1:49:a1:34:62:1c:21:76:d5:e7:
e1:38:b4:bd:28:d7:c5:84:6a:0b:c2:f7:dc:cc:9b:2d:da:33:
f8:56:3c:6b:37:17:e4:db:da:82:3e:c0:2b:3f:51:2a:71:ef:
4f:ee:2b:77:14:c4:c1:51:86:4a:3d:21:d2:bd:97:11:c2:8d:
2e:0c:4e:af:45:da:de:cc:34:19:d9:70:33:f6:53:96:6e:2a:
5b:44:50:48:42:33:f8:5b:b6:ee:66:94:30:0b:b0:44:02:e2:
ee:47:a6:42:24:99:3e:7b:c0:31:4d:59:94:df:25:c4:88:d8:
80:fe:da:6b:8d:ca:34:da:4f:da:80:52:c6:b5:78:ac:1a:01:
34:59:08:02:3d:9f:e8:a3:02:d1:77:c6:7f:b2:c1:79:2a:71:
00:ea:f9:e5:85:29:0d:f6:06:62:ee:8f:45:93:4b:ea:eb:f1:
e7:3d:d8:c2:c2:78:aa:f0:81:e1:34:10:79:b3:78:20:ef:49:
02:b2:7c:54:6f:19:e3:06:1c:91:ed:14:04:da:5a:e0:81:1e:
fb:4d:33:6c:27:35:3c:9e:da:d9:f8:eb:15:ab:b8:32:cb:62:
2f:49:dc:75:90:d2:38:93:8b:ef:8b:d4:24:14:1a:55:c6:3a:
3b:e2:cc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 5 19:01:08 2025 by rpki-client