This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D2CA126DA7311F0B1CFB787DAE4EC9C.roa
File: 5D2CA126DA7311F0B1CFB787DAE4EC9C.roa (raw, json)
Hash identifier: knK4hHkAY/YGWa9ASlwxFy5deCaLcd7G8TNc6zUFkhw=
Subject key identifier: C1:99:63:CB:67:4C:19:4F:DB:2B:12:73:86:9C:78:0B:40:C7:F6:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AE93
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D2CA126DA7311F0B1CFB787DAE4EC9C.roa
Signing time: Tue 16 Dec 2025 11:35:47 +0000
ROA not before: Tue 16 Dec 2025 11:35:42 +0000
ROA not after: Sat 16 Dec 2028 11:35:42 +0000
asID: 17561
IP address blocks: 154.213.202.0/24 maxlen: 24
154.213.203.0/24 maxlen: 24
154.213.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110227 (0x1ae93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 11:35:42 2025 GMT
Not After : Dec 16 11:35:42 2028 GMT
Subject: CN=69414413-a002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:91:49:e5:56:e3:d9:e6:87:47:82:d5:34:fc:
4d:0e:08:63:9d:e2:bc:83:f2:bf:75:2b:70:0b:61:
20:70:bd:cf:63:40:5c:1a:c1:f2:09:25:27:95:e6:
29:e1:5e:56:4d:76:8a:a4:bf:65:75:0c:4f:d7:46:
7c:76:7f:23:be:5e:b7:11:42:2e:e0:e1:6e:76:c0:
37:cd:26:09:dc:6c:d2:2a:89:64:a9:ce:78:83:eb:
3d:43:6a:fa:46:ab:82:c5:b7:13:e9:3b:55:51:11:
14:80:9d:d5:47:1b:23:ba:2a:3c:40:51:d2:67:2b:
a2:1f:e0:19:66:ed:b5:61:3e:13:17:37:cc:d2:16:
37:70:2c:6f:c3:bd:0a:18:b5:4c:51:2e:aa:d7:e9:
7c:9a:56:0f:42:94:c4:4f:36:02:42:f0:f2:c0:11:
8a:6b:c5:29:d6:0b:92:5f:a5:e6:7b:a9:1e:89:df:
c1:0c:ff:e1:03:68:fd:99:98:9a:87:bb:fc:2d:f2:
91:89:f8:ae:28:a8:df:44:13:dd:44:81:a9:ab:47:
93:a6:e8:a8:23:52:2c:37:d8:f6:75:d8:63:36:59:
1b:bb:eb:a1:49:4e:ec:ca:03:b8:9d:c5:20:e6:9f:
92:f4:85:a7:72:f3:a5:b4:2a:2b:7e:51:cc:24:b7:
f7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:99:63:CB:67:4C:19:4F:DB:2B:12:73:86:9C:78:0B:40:C7:F6:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5D2CA126DA7311F0B1CFB787DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.202.0-154.213.204.255
Signature Algorithm: sha256WithRSAEncryption
cf:24:b3:ea:81:f8:04:f4:5f:4d:51:fb:97:18:8e:9d:8d:32:
1d:e0:f0:b7:0f:5a:04:be:9f:21:61:6e:b7:6a:b2:a6:37:c7:
39:62:92:02:6b:7f:c6:85:a3:0d:a8:04:07:a2:30:16:d5:c4:
ea:d8:45:13:04:e9:66:df:51:f1:2c:bd:fd:63:6b:aa:bf:86:
d2:ba:95:76:4d:b9:09:8c:f4:2c:fb:03:ea:23:6a:27:72:a1:
6f:66:61:ac:b6:3b:58:3d:a5:ad:86:4a:87:00:dc:42:c0:19:
e8:1a:0e:55:30:71:91:b2:a6:15:a7:fe:b0:1a:49:3c:90:4b:
33:ca:7a:6a:e4:f7:39:f6:3b:f1:e1:95:55:74:40:bb:ca:23:
65:93:69:03:7d:09:09:32:af:2f:20:86:d7:72:aa:05:61:7f:
fd:a4:66:7f:d7:f1:d6:c7:3c:e7:1d:6e:9b:40:ef:cb:d3:76:
88:bb:6c:a5:37:85:da:f0:43:b2:e8:da:eb:bc:56:93:bb:93:
d6:24:d1:a5:82:9e:a6:c1:d3:da:23:a4:44:98:d0:37:8d:81:
12:de:1f:b4:32:cb:c0:df:b2:92:c2:9d:bd:44:21:7c:b2:b2:
15:d8:ae:62:1b:31:6d:76:3a:aa:05:a6:70:ba:fa:b5:37:e5:
89:6b:00:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:09:27 2025 by rpki-client