This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5957B3E8DF0911F096C8E1CBDAE4EC9C.roa
File: 5957B3E8DF0911F096C8E1CBDAE4EC9C.roa (raw, json)
Hash identifier: 87yTFa/um1mqUFkpknSphgtEJ+BiuNuoLf+XnyAa6OA=
Subject key identifier: 10:ED:4B:5C:97:88:2E:0A:FF:36:99:97:21:3B:44:D9:6F:60:BE:28
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AFC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5957B3E8DF0911F096C8E1CBDAE4EC9C.roa
Signing time: Mon 22 Dec 2025 07:39:30 +0000
ROA not before: Mon 22 Dec 2025 07:39:25 +0000
ROA not after: Mon 26 Jan 2026 07:39:25 +0000
asID: 6079
IP address blocks: 154.194.45.0/24 maxlen: 24
154.194.57.0/24 maxlen: 24
154.194.60.0/24 maxlen: 24
154.194.61.0/24 maxlen: 24
154.194.194.0/24 maxlen: 24
154.194.204.0/24 maxlen: 24
154.194.205.0/24 maxlen: 24
154.194.224.0/24 maxlen: 24
154.194.228.0/24 maxlen: 24
154.194.229.0/24 maxlen: 24
154.194.230.0/24 maxlen: 24
154.194.231.0/24 maxlen: 24
154.199.16.0/24 maxlen: 24
154.199.17.0/24 maxlen: 24
154.199.19.0/24 maxlen: 24
154.199.20.0/24 maxlen: 24
154.199.21.0/24 maxlen: 24
154.199.22.0/24 maxlen: 24
154.199.23.0/24 maxlen: 24
154.199.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Dec 2025 08:11:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110528 (0x1afc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 22 07:39:25 2025 GMT
Not After : Jan 26 07:39:25 2026 GMT
Subject: CN=6948f5b2-7ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:e7:e7:ac:bd:a1:aa:eb:e6:ea:7d:71:48:
c0:77:ff:d2:08:14:85:f3:78:38:06:a9:93:ff:08:
fb:c4:1c:90:b0:94:0b:4a:95:6b:84:ad:76:b1:05:
88:e7:c2:83:67:0f:6a:ca:50:e0:09:a8:d8:32:e1:
31:c4:25:4f:38:40:94:86:ae:89:fc:98:22:91:bf:
c7:48:ab:af:40:ce:c4:7b:97:ed:82:d8:2f:11:fd:
f0:c4:38:ab:ca:47:78:1a:8b:d4:f3:a2:46:db:8c:
32:51:c9:c4:2b:fd:ff:88:ed:cb:f9:a4:b8:88:73:
52:fc:fc:3d:ef:60:54:ce:e6:60:12:a7:0c:68:6f:
89:fe:63:71:21:a6:13:af:e9:59:d9:95:ab:42:68:
08:90:91:fa:5e:28:7e:8a:c2:7d:cf:91:9c:78:bc:
24:b1:ab:56:b1:30:4f:fe:bb:f3:15:ad:39:99:c5:
fe:c4:7f:5d:94:88:1e:5c:a8:ad:1f:c8:fa:22:f5:
e1:c5:51:9f:0e:42:1c:92:dc:40:6d:74:c4:20:14:
c8:7e:34:9e:ca:2d:b6:1c:4d:ae:80:b9:9c:9d:a0:
3c:29:45:6d:a3:b6:9a:72:76:49:cf:a1:f6:40:6f:
89:6b:52:e2:c2:91:b0:f2:91:3c:f3:cb:7a:09:dc:
86:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:ED:4B:5C:97:88:2E:0A:FF:36:99:97:21:3B:44:D9:6F:60:BE:28
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5957B3E8DF0911F096C8E1CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.45.0/24
154.194.57.0/24
154.194.60.0/23
154.194.194.0/24
154.194.204.0/23
154.194.224.0/24
154.194.228.0/22
154.199.16.0/23
154.199.19.0-154.199.23.255
154.199.48.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e7:ce:66:74:db:e1:b3:de:12:d9:6f:7d:ee:47:1b:12:ff:
0a:26:50:f7:71:6c:f1:4c:c1:4c:4d:62:07:e9:0e:95:96:21:
d6:03:dd:ad:a9:25:7e:7a:87:8a:7e:f7:6c:07:b4:e1:b8:44:
f5:a6:29:4c:34:a3:d3:cb:48:c4:ac:b1:cb:9f:12:b7:6a:f1:
60:63:ff:0c:60:b4:38:ba:b4:4d:5e:97:84:d2:e9:97:c9:4b:
b2:c0:05:eb:52:c9:af:94:74:a0:e8:6a:97:ff:a3:b1:68:cb:
37:60:63:23:83:42:bd:14:c9:7c:3b:8d:f3:58:13:22:e1:ca:
59:43:0d:98:d0:d9:ea:b0:83:a3:e6:78:70:b7:f8:d4:8d:13:
a1:7b:9e:f5:24:ca:52:44:45:97:dc:01:a2:3a:d6:95:4e:0d:
81:7c:d2:61:3b:44:a5:4e:c9:be:9b:4c:4e:35:68:f6:fd:6d:
f1:db:15:13:83:fc:e4:7e:8b:65:dc:d6:db:17:b3:f0:e0:91:
98:46:dc:53:a6:e9:78:69:dd:ba:f4:04:df:4e:d6:dc:36:63:
05:0a:ea:77:53:61:0b:85:f8:4c:9a:35:f6:58:09:1f:6d:e4:
73:b2:47:e7:77:e5:75:45:21:1a:c1:c1:29:ce:14:2c:89:84:
09:da:25:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 11:17:36 2025 by rpki-client