This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DC13412CC5211F09E19C0F0DAE4EC9C.roa
File: 7DC13412CC5211F09E19C0F0DAE4EC9C.roa (raw, json)
Hash identifier: 7m7asvbLtlg/ItOGSTauu2u9t/PKlnufHQDAkqVx+qk=
Subject key identifier: 5D:0A:E6:E7:9D:CC:59:9B:7E:45:BB:72:27:CD:97:D4:44:B4:24:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AB0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DC13412CC5211F09E19C0F0DAE4EC9C.roa
Signing time: Fri 28 Nov 2025 12:05:12 +0000
ROA not before: Fri 28 Nov 2025 12:05:05 +0000
ROA not after: Thu 18 Dec 2025 12:05:05 +0000
asID: 399077
IP address blocks: 154.91.64.0/24 maxlen: 24
154.91.65.0/24 maxlen: 24
154.91.66.0/24 maxlen: 24
154.91.67.0/24 maxlen: 24
154.91.68.0/24 maxlen: 24
154.91.69.0/24 maxlen: 24
154.91.70.0/24 maxlen: 24
154.91.71.0/24 maxlen: 24
154.91.72.0/24 maxlen: 24
154.91.73.0/24 maxlen: 24
154.91.74.0/24 maxlen: 24
154.91.75.0/24 maxlen: 24
154.91.76.0/24 maxlen: 24
154.91.77.0/24 maxlen: 24
154.91.78.0/24 maxlen: 24
154.91.79.0/24 maxlen: 24
154.91.80.0/24 maxlen: 24
154.91.81.0/24 maxlen: 24
154.91.82.0/24 maxlen: 24
154.91.83.0/24 maxlen: 24
154.91.84.0/24 maxlen: 24
154.91.85.0/24 maxlen: 24
154.91.86.0/24 maxlen: 24
154.91.87.0/24 maxlen: 24
154.91.88.0/24 maxlen: 24
154.91.89.0/24 maxlen: 24
154.91.90.0/24 maxlen: 24
154.91.91.0/24 maxlen: 24
154.91.92.0/24 maxlen: 24
154.91.93.0/24 maxlen: 24
154.91.94.0/24 maxlen: 24
154.91.95.0/24 maxlen: 24
154.91.96.0/24 maxlen: 24
154.91.97.0/24 maxlen: 24
154.91.98.0/24 maxlen: 24
154.91.99.0/24 maxlen: 24
154.91.100.0/24 maxlen: 24
154.91.101.0/24 maxlen: 24
154.91.102.0/24 maxlen: 24
154.91.103.0/24 maxlen: 24
154.91.104.0/24 maxlen: 24
154.91.105.0/24 maxlen: 24
154.91.106.0/24 maxlen: 24
154.91.107.0/24 maxlen: 24
154.91.108.0/24 maxlen: 24
154.91.109.0/24 maxlen: 24
154.91.110.0/24 maxlen: 24
154.91.111.0/24 maxlen: 24
154.91.112.0/24 maxlen: 24
154.91.113.0/24 maxlen: 24
154.91.114.0/24 maxlen: 24
154.91.115.0/24 maxlen: 24
154.91.116.0/24 maxlen: 24
154.91.117.0/24 maxlen: 24
154.91.118.0/24 maxlen: 24
154.91.119.0/24 maxlen: 24
154.91.120.0/24 maxlen: 24
154.91.121.0/24 maxlen: 24
154.91.122.0/24 maxlen: 24
154.91.123.0/24 maxlen: 24
154.91.124.0/24 maxlen: 24
154.91.125.0/24 maxlen: 24
154.91.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109326 (0x1ab0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 28 12:05:05 2025 GMT
Not After : Dec 18 12:05:05 2025 GMT
Subject: CN=69298ff8-6ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:70:8c:53:26:95:47:6a:20:a1:b9:40:fd:
80:00:41:23:14:6a:ef:13:28:b0:bd:54:84:89:c6:
87:65:6e:d2:38:30:64:bc:23:08:28:f7:95:07:68:
be:ff:91:6f:d8:bf:64:da:85:21:a3:f9:f8:f2:c5:
d9:3c:07:9b:22:ae:ae:6b:ba:a6:b8:15:32:ab:28:
66:20:28:33:00:20:b1:35:9a:c0:bf:8f:67:7d:83:
0b:47:db:1d:20:13:34:4d:22:0c:93:b0:72:42:80:
df:97:61:e2:23:9a:fc:96:51:0e:1b:33:76:20:0d:
8d:13:f4:a9:97:30:44:04:26:94:a9:11:6c:3b:87:
c8:18:be:02:e4:aa:9a:b5:31:0a:3c:ab:a3:93:5d:
09:2e:87:0c:d7:7a:46:e0:c5:50:77:56:41:6b:2c:
80:9f:44:f7:59:34:06:94:14:45:91:39:42:a8:4e:
59:4c:56:4b:6b:c7:32:04:d6:d3:af:a2:fa:85:73:
50:bf:6b:91:07:b1:2b:0b:94:d0:e2:1c:62:39:5d:
3c:10:9f:d5:7f:4f:89:3d:f2:72:16:3e:55:4b:34:
6d:95:27:8a:80:c3:be:85:b5:4e:82:2d:6a:04:ec:
44:8f:a0:e5:d3:cb:46:5f:ab:c3:d6:56:fd:e7:d1:
f3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0A:E6:E7:9D:CC:59:9B:7E:45:BB:72:27:CD:97:D4:44:B4:24:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DC13412CC5211F09E19C0F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.64.0-154.91.126.255
Signature Algorithm: sha256WithRSAEncryption
9d:5e:c6:ae:6d:4c:72:8c:4e:06:fd:99:05:69:ac:99:74:7d:
93:80:eb:0a:93:ba:9c:f4:89:52:ae:d3:83:45:c5:4b:e0:46:
db:98:30:46:73:4e:0b:a0:6e:44:54:99:c5:0a:62:ca:7d:6e:
a4:da:9d:a4:f4:7e:70:c9:c2:29:8d:0f:87:9b:83:8a:3b:c2:
47:d2:33:f2:be:e8:d2:b9:de:30:d4:91:56:e5:fa:88:20:24:
79:1f:b4:3f:d5:3a:33:b9:55:cb:7e:a4:ba:9a:77:54:e8:70:
dd:5e:67:b4:bf:2e:dc:1a:1e:b7:8b:5c:6e:c2:70:ce:36:51:
e2:62:a7:2d:0e:4f:c7:2e:6b:55:24:aa:5e:30:74:0d:55:31:
bb:f6:88:a6:ca:22:51:d5:c0:01:2c:61:75:80:3c:51:f4:73:
68:8d:7a:f6:a7:84:e6:3f:fa:27:52:5d:67:92:50:51:62:6a:
0e:1c:56:3a:68:cd:16:a9:b1:37:f7:35:da:07:9e:6c:f8:b9:
62:b3:2b:ad:78:0d:2b:04:f6:ee:84:36:51:9c:97:55:73:e5:
e4:49:de:e9:63:d0:5c:87:87:f7:4f:11:c8:bc:3f:6a:bf:d0:
8c:c7:c8:12:6a:39:7d:2f:38:1d:4a:e8:5c:07:9f:d4:6c:c8:
66:92:9f:84
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgIDAasOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTI4MTIwNTA1WhcNMjUxMjE4MTIwNTA1WjAYMRYw
FAYDVQQDEw02OTI5OGZmOC02ZWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAu1hwjFMmlUdqIKG5QP2AAEEjFGrvEyiwvVSEicaHZW7SODBkvCMIKPeV
B2i+/5Fv2L9k2oUho/n48sXZPAebIq6ua7qmuBUyqyhmICgzACCxNZrAv49nfYML
R9sdIBM0TSIMk7ByQoDfl2HiI5r8llEOGzN2IA2NE/SplzBEBCaUqRFsO4fIGL4C
5KqatTEKPKujk10JLocM13pG4MVQd1ZBayyAn0T3WTQGlBRFkTlCqE5ZTFZLa8cy
BNbTr6L6hXNQv2uRB7ErC5TQ4hxiOV08EJ/Vf0+JPfJyFj5VSzRtlSeKgMO+hbVO
gi1qBOxEj6Dl08tGX6vD1lb959Hz3QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFF0K
5uedzFmbfkW7cifNl9REtCSdMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83REMxMzQxMkNDNTIxMUYwOUUxOUMwRjBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAaaW0ADBACaW34wDQYJ
KoZIhvcNAQELBQADggEBAJ1exq5tTHKMTgb9mQVprJl0fZOA6wqTupz0iVKu04NF
xUvgRtuYMEZzTgugbkRUmcUKYsp9bqTanaT0fnDJwimND4ebg4o7wkfSM/K+6NK5
3jDUkVbl+oggJHkftD/VOjO5Vct+pLqad1TocN1eZ7S/LtwaHreLXG7CcM42UeJi
py0OT8cua1Ukql4wdA1VMbv2iKbKIlHVwAEsYXWAPFH0c2iNevanhOY/+idSXWeS
UFFiag4cVjpozRapsTf3NdoHnmz4uWKzK614DSsE9u6ENlGcl1Vz5eRJ3ulj0FyH
h/dPEci8P2q/0IzHyBJqOX0vOB1K6FwHn9RsyGaSn4Q=
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:24:46 2025 by rpki-client