This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BF09D42DBF411F09504C6F5DAE4EC9C.roa
File: 7BF09D42DBF411F09504C6F5DAE4EC9C.roa (raw, json)
Hash identifier: gdpjg5/uP9abv4pB359yRuMGDEFsCb2IB5+A8mcgQ34=
Subject key identifier: 7C:F6:C6:38:40:51:FF:F2:A5:7E:6C:AE:F2:76:F0:C6:76:0A:A3:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AF6D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BF09D42DBF411F09504C6F5DAE4EC9C.roa
Signing time: Thu 18 Dec 2025 09:32:35 +0000
ROA not before: Thu 18 Dec 2025 09:32:30 +0000
ROA not after: Sun 17 Dec 2028 09:32:30 +0000
asID: 17561
IP address blocks: 154.216.231.0/24 maxlen: 24
154.216.232.0/24 maxlen: 24
154.216.233.0/24 maxlen: 24
154.216.234.0/24 maxlen: 24
154.216.235.0/24 maxlen: 24
154.216.236.0/24 maxlen: 24
154.216.237.0/24 maxlen: 24
154.216.238.0/24 maxlen: 24
154.216.239.0/24 maxlen: 24
154.216.240.0/24 maxlen: 24
154.216.241.0/24 maxlen: 24
154.216.242.0/24 maxlen: 24
154.216.243.0/24 maxlen: 24
154.216.244.0/24 maxlen: 24
154.216.245.0/24 maxlen: 24
154.216.246.0/24 maxlen: 24
154.216.247.0/24 maxlen: 24
154.216.248.0/24 maxlen: 24
154.216.249.0/24 maxlen: 24
154.216.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110445 (0x1af6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 18 09:32:30 2025 GMT
Not After : Dec 17 09:32:30 2028 GMT
Subject: CN=6943ca33-5069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:21:20:99:58:22:3a:09:e0:94:71:e7:8c:8a:
96:25:f7:03:ff:6a:15:3d:0d:5d:6e:62:eb:37:ac:
2f:b2:a1:c5:54:0e:5a:d8:db:49:e9:09:db:e7:05:
d6:fe:6f:c8:4f:36:de:c4:29:b1:47:c9:fa:a5:bc:
23:50:b4:e5:b4:2b:98:3d:6b:e2:9b:9a:3d:14:2f:
c5:fe:2c:69:09:91:e4:54:8d:f5:68:4c:ca:7d:18:
bc:db:56:fe:da:f0:7e:d5:3d:fe:6b:d8:2b:15:c7:
c4:40:8a:e4:6f:a7:18:de:d1:80:86:73:97:8e:a9:
90:22:1c:ec:9e:6b:ff:2f:13:e4:d0:f0:2e:ae:4a:
ce:ac:95:89:82:f1:de:b3:a7:52:7c:cf:35:59:f6:
57:1f:f5:37:ee:3a:e4:4d:5f:cf:80:7b:82:40:8e:
37:0e:8f:cb:78:c8:16:b5:80:2a:32:88:b4:99:81:
b5:1e:6b:75:9e:be:3f:bc:9a:21:fd:64:2c:19:2a:
9e:bd:33:4f:fc:5a:22:6b:53:e9:7e:f5:b6:03:9c:
d5:67:63:26:54:98:11:2e:22:5f:a5:38:37:0c:42:
ee:c5:22:81:8a:71:4e:2c:5a:de:f0:ce:81:15:a6:
aa:83:08:be:94:57:88:12:fd:62:f2:dd:02:dd:31:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F6:C6:38:40:51:FF:F2:A5:7E:6C:AE:F2:76:F0:C6:76:0A:A3:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BF09D42DBF411F09504C6F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.216.231.0-154.216.250.255
Signature Algorithm: sha256WithRSAEncryption
27:c4:86:f9:6a:1f:a5:3d:c8:d7:29:e3:23:8a:07:7b:f9:3b:
90:ba:17:d6:4b:0f:15:f6:4f:e0:7c:7f:3a:9f:87:5a:f9:c1:
c2:11:67:8e:ef:fe:f7:04:a6:1f:ec:fc:a7:8d:a2:9c:bd:17:
a8:99:b8:e0:32:07:3e:11:0a:62:ac:c0:ec:56:45:48:2a:4f:
12:06:8c:12:cf:18:bb:c8:76:b7:44:1a:82:11:f4:65:78:2f:
6a:a6:c3:28:dd:d2:eb:0f:da:1a:66:a0:bc:6d:45:51:72:37:
74:6b:63:91:f1:83:31:8e:b9:c3:d1:e1:4d:6a:f3:d7:57:23:
0e:18:80:ee:0f:63:43:1d:3e:6c:d6:55:5f:a0:a1:30:53:74:
bd:56:ae:0c:9b:72:ec:33:b9:99:50:ff:25:2e:dc:10:f6:f6:
8c:50:cb:2b:c8:d4:aa:47:7f:17:06:2a:a3:5e:89:48:14:f4:
65:cd:e9:c4:66:a1:ec:b4:12:0e:97:75:cd:f0:a6:1d:6c:00:
31:96:73:e4:2f:72:64:3b:75:49:4c:de:2a:be:48:16:f2:68:
80:b1:1c:b4:ce:7b:ce:ad:e3:6a:ed:ec:82:6e:1c:1b:e9:c5:
4c:5d:ad:02:9a:93:08:46:b8:1b:e5:eb:10:18:f2:5e:49:5f:
0d:07:6a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 09:09:32 2025 by rpki-client