This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FEF1DD2C9C811F092FE778BDAE4EC9C.roa
File: 5FEF1DD2C9C811F092FE778BDAE4EC9C.roa (raw, json)
Hash identifier: Ip0McuYm0L+vIZ+re9nAFAFnVEQpSdX0hehh0aZJQ7w=
Subject key identifier: 7B:46:81:69:19:BB:06:85:6F:B6:BF:BC:CA:1B:39:26:4E:48:E8:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AA79
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FEF1DD2C9C811F092FE778BDAE4EC9C.roa
Signing time: Tue 25 Nov 2025 06:31:37 +0000
ROA not before: Tue 25 Nov 2025 06:31:20 +0000
ROA not after: Sun 28 Dec 2025 06:31:20 +0000
asID: 52263
IP address blocks: 154.194.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109177 (0x1aa79)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 25 06:31:20 2025 GMT
Not After : Dec 28 06:31:20 2025 GMT
Subject: CN=69254d49-b4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8e:0e:71:66:bc:ee:ad:1b:17:50:9b:4b:15:
6f:9b:36:73:d1:b4:a8:e2:93:65:ef:e5:94:ef:1f:
dd:7c:e5:0b:e2:80:22:77:7d:a0:3c:e2:94:90:6d:
6c:9a:c4:8d:52:cb:52:20:ed:d5:41:09:fe:31:20:
ed:bf:6d:81:f4:00:8f:77:4d:04:03:1a:dd:02:8d:
c6:42:22:51:f9:3c:85:6a:95:28:9e:3b:c9:10:d5:
da:9c:23:ff:4b:8f:13:db:e5:e2:93:93:4a:90:31:
f0:70:41:7c:ca:46:8f:69:68:0d:ed:53:fd:d1:48:
34:bc:35:77:9d:f5:e1:73:66:51:a4:95:0e:06:8e:
86:61:98:17:e6:ea:f8:42:50:95:54:9b:cb:3e:01:
76:d6:30:6e:09:a4:a6:9e:6a:38:5e:ff:31:05:90:
0e:74:29:93:06:f7:b7:ba:31:25:8a:95:f5:3c:1b:
0a:05:5c:88:3b:ac:df:db:01:3e:e9:b9:0d:42:9f:
16:d9:50:b8:ff:38:10:9f:97:c2:6e:40:fb:69:42:
5a:17:dc:1a:36:e6:2d:47:55:ef:c4:7e:60:9c:68:
b4:46:bf:fa:ed:93:23:06:bb:ad:ba:fb:9c:41:9c:
15:2c:44:83:05:de:d6:53:b2:c0:2c:0f:0c:84:11:
fe:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:46:81:69:19:BB:06:85:6F:B6:BF:BC:CA:1B:39:26:4E:48:E8:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5FEF1DD2C9C811F092FE778BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.69.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:2c:68:38:79:52:4c:b2:b1:e4:91:da:18:e6:81:ef:a4:1f:
b4:cc:1c:71:e5:21:8c:f5:3a:95:44:02:3d:68:ff:af:0f:29:
9d:ee:d9:5e:24:97:be:1f:1c:29:f6:ce:24:42:1e:ef:89:7a:
f3:ef:99:6b:8d:a3:79:90:2b:46:3a:1a:25:bd:1e:f5:fd:fd:
cf:f2:c0:62:84:2d:c7:fd:cb:82:64:ef:58:52:9f:a4:8a:ce:
fd:ec:2a:b0:7b:b5:ea:77:0b:21:6a:d5:ff:da:ec:8f:a7:74:
53:a6:47:c8:5e:b1:16:8a:df:6e:e2:a2:31:bd:88:c7:d1:9f:
be:54:2d:53:3d:dc:7c:0b:7c:9c:d0:37:28:63:6f:47:43:f5:
21:e7:c8:2d:93:83:b1:95:20:31:8d:c1:cc:02:3b:46:36:ba:
76:21:d0:62:ae:4e:bc:02:24:ff:4e:fa:22:96:c3:38:0f:38:
bf:91:3a:ac:be:43:2e:fb:4d:49:94:ef:44:a7:4a:e3:f2:5a:
e4:d1:03:bd:f4:19:1b:7c:41:3d:79:19:a2:db:95:ff:4e:6b:
4a:30:b4:a8:a4:58:cf:a0:71:0d:74:e5:55:a4:57:f1:23:58:
7d:1d:8c:f7:f9:a8:01:9d:a3:fc:f9:03:f4:a3:69:eb:0a:d6:
77:02:8e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:07:12 2025 by rpki-client