This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86329A68CF9611F083C9A6E0DAE4EC9C.roa
File: 86329A68CF9611F083C9A6E0DAE4EC9C.roa (raw, json)
Hash identifier: FVL5CZj6ZH0dB7TLMcr+Q2jk3OHLwO1PS7+YxQe4Lr4=
Subject key identifier: 97:55:30:1B:A8:11:54:E8:91:07:03:2A:85:6F:52:AE:D5:A8:97:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01ABA7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86329A68CF9611F083C9A6E0DAE4EC9C.roa
Signing time: Tue 02 Dec 2025 15:49:46 +0000
ROA not before: Tue 02 Dec 2025 15:49:41 +0000
ROA not after: Mon 05 Jan 2026 15:49:41 +0000
asID: 272040
IP address blocks: 154.88.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109479 (0x1aba7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 2 15:49:41 2025 GMT
Not After : Jan 5 15:49:41 2026 GMT
Subject: CN=692f0a99-a2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2d:a8:16:cf:c7:d1:f6:78:4e:60:25:2f:ee:
c4:ac:39:45:6d:59:a9:a6:36:c6:79:88:b4:3f:87:
23:e2:a3:c3:11:d3:8a:b2:18:23:b9:9c:3e:c5:1f:
49:ef:89:a0:06:1e:09:79:58:cb:12:92:6a:36:e8:
5a:f7:c9:a1:0f:10:60:ae:ed:70:da:b4:83:8e:cc:
04:90:83:d5:0d:e4:2a:91:83:c7:38:c7:c4:42:2b:
bd:d7:6f:e4:6e:46:03:bc:c7:02:11:24:a8:bc:6f:
c0:0d:55:7f:f3:3e:76:95:52:ca:bb:f8:ae:cd:78:
e6:9d:9d:5e:64:41:b1:51:0a:de:c1:9c:22:8c:f0:
8a:c5:6d:07:fd:bc:12:78:78:e3:ea:d1:3d:3f:b6:
87:92:22:f7:1e:b2:b6:c9:15:3c:8e:8f:33:8a:9d:
9c:94:e9:23:be:7f:8f:84:0a:ce:a2:57:46:e0:55:
48:b3:8a:6a:73:da:a7:a4:7f:04:72:7a:aa:68:38:
49:66:94:cb:26:88:7f:4c:de:6e:34:ee:29:f8:b3:
94:31:6c:d4:bb:ed:57:5b:ca:c6:43:2a:05:8f:f3:
08:60:19:8c:5e:d4:24:94:b4:e1:5a:e5:43:3c:1f:
92:e9:66:e4:66:16:c2:b1:ad:ce:73:0d:83:dc:55:
a4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:55:30:1B:A8:11:54:E8:91:07:03:2A:85:6F:52:AE:D5:A8:97:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/86329A68CF9611F083C9A6E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.184.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:4c:11:31:f2:eb:ec:cf:79:27:98:17:de:43:55:22:2d:e3:
1b:3d:35:ed:69:19:50:56:d3:ca:90:62:71:9b:fd:8f:be:c7:
28:7b:1c:c8:70:14:9b:f8:47:0b:a2:a1:65:b8:3f:a6:2e:5f:
d5:55:5a:01:72:91:61:52:1e:9a:b5:6e:f3:cf:67:e3:84:fb:
ee:d1:0d:d3:a7:bb:58:02:75:47:e1:7d:49:53:4a:8c:87:b1:
9f:7c:0e:60:6b:3c:ee:34:9b:7d:6c:10:70:6a:ca:cd:30:f6:
61:e6:25:b9:b6:15:a7:90:75:f3:f0:f2:4e:36:fd:9d:13:dc:
e3:ee:2e:53:38:ea:51:81:4f:cd:de:58:f9:c5:29:39:2e:14:
2f:8e:9c:48:94:eb:37:91:d7:e5:42:1a:c6:47:57:11:e3:73:
62:37:cc:85:35:a0:36:19:7a:a3:72:e5:77:13:75:d2:ef:0d:
c8:a7:df:94:5c:99:b2:32:02:2f:77:b7:f8:0c:03:12:2e:fb:
ac:96:ad:de:e6:41:72:d3:fe:5a:84:27:75:1c:52:31:f8:ce:
c5:7a:32:f5:2a:10:93:bc:2e:9d:c2:93:29:88:0e:71:ee:18:
69:76:a6:4d:aa:55:43:50:05:38:f5:2a:52:d0:73:f9:f9:85:
50:d4:75:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaunMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjAyMTU0OTQxWhcNMjYwMTA1MTU0OTQxWjAYMRYw
FAYDVQQDEw02OTJmMGE5OS1hMmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuC2oFs/H0fZ4TmAlL+7ErDlFbVmppjbGeYi0P4cj4qPDEdOKshgjuZw+
xR9J74mgBh4JeVjLEpJqNuha98mhDxBgru1w2rSDjswEkIPVDeQqkYPHOMfEQiu9
12/kbkYDvMcCESSovG/ADVV/8z52lVLKu/iuzXjmnZ1eZEGxUQrewZwijPCKxW0H
/bwSeHjj6tE9P7aHkiL3HrK2yRU8jo8zip2clOkjvn+PhArOoldG4FVIs4pqc9qn
pH8EcnqqaDhJZpTLJoh/TN5uNO4p+LOUMWzUu+1XW8rGQyoFj/MIYBmMXtQklLTh
WuVDPB+S6WbkZhbCsa3Ocw2D3FWk6QIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFJdV
MBuoEVTokQcDKoVvUq7VqJeEMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84NjMyOUE2OENGOTYxMUYwODNDOUE2RTBEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmli4MA0GCSqGSIb3DQEB
CwUAA4IBAQAcTBEx8uvsz3knmBfeQ1UiLeMbPTXtaRlQVtPKkGJxm/2PvscoexzI
cBSb+EcLoqFluD+mLl/VVVoBcpFhUh6atW7zz2fjhPvu0Q3Tp7tYAnVH4X1JU0qM
h7GffA5gazzuNJt9bBBwasrNMPZh5iW5thWnkHXz8PJONv2dE9zj7i5TOOpRgU/N
3lj5xSk5LhQvjpxIlOs3kdflQhrGR1cR43NiN8yFNaA2GXqjcuV3E3XS7w3Ip9+U
XJmyMgIvd7f4DAMSLvuslq3e5kFy0/5ahCd1HFIx+M7FejL1KhCTvC6dwpMpiA5x
7hhpdqZNqlVDUAU49SpS0HP5+YVQ1HWd
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:26:07 2025 by rpki-client