This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5742ED7CC15211F0BE8F95A9DAE4EC9C.roa
File: 5742ED7CC15211F0BE8F95A9DAE4EC9C.roa (raw, json)
Hash identifier: 8FNlN1JU8eYYjOfm/mQrnZw2pJ2mikLFGFKkPMPWjIc=
Subject key identifier: F8:10:EA:D1:33:3A:6E:34:49:53:A5:0A:24:D1:99:70:4D:C0:CD:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A91E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5742ED7CC15211F0BE8F95A9DAE4EC9C.roa
Signing time: Fri 14 Nov 2025 12:06:25 +0000
ROA not before: Fri 14 Nov 2025 12:06:17 +0000
ROA not after: Wed 17 Dec 2025 12:06:17 +0000
asID: 153671
IP address blocks: 154.81.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108830 (0x1a91e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 12:06:17 2025 GMT
Not After : Dec 17 12:06:17 2025 GMT
Subject: CN=69171b41-e666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:0d:30:21:7d:ee:8f:50:03:4b:15:74:ad:
2e:26:92:ce:76:67:76:c8:a7:11:fa:89:7f:d3:ab:
41:ab:77:f1:f9:fa:8f:ae:af:fa:59:7f:eb:8e:13:
44:b1:bc:97:62:56:f9:eb:99:82:71:ab:76:90:69:
3d:45:78:bb:48:86:0c:8f:01:3d:84:47:e2:6c:79:
64:84:e3:13:22:ae:1d:0d:af:12:58:eb:9e:ce:f3:
35:2f:ec:e4:bd:f2:89:93:c5:5d:99:8d:36:23:5c:
65:31:d1:57:8f:af:25:ac:c6:b3:ef:ae:71:91:7c:
2d:48:36:f7:a5:7b:8d:4b:ff:ad:6b:db:8e:0f:f6:
00:32:f8:02:fa:53:fc:ea:38:06:3f:00:d7:aa:d1:
2e:48:ff:19:11:0c:9d:ac:6a:10:61:13:27:fb:34:
e6:98:48:43:82:9b:af:5c:3c:f9:f9:a8:b0:2d:53:
d3:24:8b:92:d8:f9:3d:53:de:84:07:93:02:af:48:
0a:1e:7f:c5:7e:7f:b5:b5:f0:d8:e5:96:7b:15:3f:
7c:bf:32:e0:0d:aa:21:cf:ae:6c:40:18:5f:56:dc:
74:84:24:a9:73:b5:f7:d9:b0:3f:59:9f:d1:6b:ec:
20:7e:c9:41:d9:e8:8a:4f:ec:8b:bb:73:b7:f9:91:
b7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:10:EA:D1:33:3A:6E:34:49:53:A5:0A:24:D1:99:70:4D:C0:CD:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5742ED7CC15211F0BE8F95A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.152.0/22
Signature Algorithm: sha256WithRSAEncryption
54:2e:ca:e6:12:4a:20:c9:4c:f5:e7:d5:0c:02:69:ac:10:6b:
c8:18:2b:77:84:d1:39:c1:89:6f:78:40:0e:d5:75:34:21:5f:
73:7a:25:b6:8b:c9:ee:05:d7:41:de:ae:51:c2:13:8b:6c:3a:
29:1c:86:55:45:28:6d:22:d4:1e:e7:8c:45:42:85:06:e9:f6:
ee:62:90:96:f4:4f:1d:8a:c8:ef:bc:ec:f8:31:47:df:ec:9c:
0a:ac:a4:77:c3:dd:41:87:4e:2a:75:b0:f3:00:98:01:db:67:
fc:1a:46:54:ee:10:eb:b7:a8:73:a6:7e:5d:09:9d:36:c0:11:
b9:ed:14:32:aa:7c:ef:02:8f:09:20:f5:e8:6c:10:87:42:f1:
1b:a0:6e:4a:0d:9a:a9:ff:06:3c:46:2e:b1:d0:21:3d:fa:54:
9b:d2:93:b6:1f:8f:2d:57:d3:10:ac:6a:88:14:f8:5b:94:c3:
7c:c3:b0:96:31:73:b1:da:09:ac:d8:3c:28:a4:33:a7:a3:30:
f9:28:f9:72:0c:5b:ad:e3:70:a2:ef:75:c6:7b:c8:43:b7:ad:
b2:dd:26:89:9f:ff:01:7e:d0:ce:67:4d:d4:55:2b:90:88:c5:
79:35:8a:50:87:e6:a4:61:74:a5:a2:06:a7:26:63:18:44:88:
db:1a:55:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:07:14 2025 by rpki-client