This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8938AE5AC45611F081523EB7DAE4EC9C.roa
File: 8938AE5AC45611F081523EB7DAE4EC9C.roa (raw, json)
Hash identifier: EZq2oQc301EunfDhoLesRtYHziEFq8m3qhMmbIgX9EE=
Subject key identifier: 29:53:FB:ED:C1:6E:A5:75:2F:A9:B7:B9:33:3C:1F:31:07:9C:E4:A7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A988
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8938AE5AC45611F081523EB7DAE4EC9C.roa
Signing time: Tue 18 Nov 2025 08:14:00 +0000
ROA not before: Tue 18 Nov 2025 08:13:55 +0000
ROA not after: Wed 17 Dec 2025 08:13:55 +0000
asID: 22773
IP address blocks: 154.194.3.0/24 maxlen: 24
154.202.14.0/24 maxlen: 24
154.202.15.0/24 maxlen: 24
154.202.16.0/24 maxlen: 24
154.202.17.0/24 maxlen: 24
154.202.18.0/24 maxlen: 24
154.202.19.0/24 maxlen: 24
154.202.20.0/24 maxlen: 24
154.202.21.0/24 maxlen: 24
154.202.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108936 (0x1a988)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 18 08:13:55 2025 GMT
Not After : Dec 17 08:13:55 2025 GMT
Subject: CN=691c2ac8-1fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:51:a3:6a:d3:7c:3a:4f:db:27:3c:26:db:a0:
47:c0:08:d3:02:ef:b4:22:bd:29:e5:2b:bf:de:d7:
5f:ab:73:d2:76:08:68:72:61:e4:66:e6:5f:d6:53:
a4:5c:1f:93:0a:72:bb:e8:c4:bb:97:a2:91:d5:10:
8a:71:e9:a8:43:ba:d1:8c:a0:ad:b6:d2:14:06:2b:
e0:7f:8d:06:23:e5:53:0f:8b:da:46:db:2d:77:4d:
12:62:b8:d4:32:7c:65:94:40:c4:2a:95:5c:ad:9c:
3a:77:95:b3:fb:4d:01:eb:80:4a:d3:47:07:20:8f:
de:d3:84:e0:62:b6:99:3b:26:e0:45:68:f7:e3:d3:
1f:b5:19:33:be:e3:4e:1d:fc:a7:8e:2f:74:b6:74:
14:c7:83:63:56:de:e2:60:f5:ff:b2:44:95:55:31:
96:00:2a:0c:3b:60:d6:55:8d:57:83:71:56:9e:5e:
c8:9e:ce:ed:5f:3b:1c:9c:5e:09:37:01:b7:b5:e5:
b8:ae:27:e9:ea:40:3a:f5:44:f9:21:39:92:b5:0a:
0c:ed:83:81:98:e1:04:cf:2f:f9:ed:8b:55:99:c7:
89:2d:a5:fc:6a:fd:7c:c4:bc:03:55:fb:6f:0a:9a:
7a:01:12:5c:35:e6:fd:e0:39:5b:0b:c1:ba:1a:9c:
07:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:53:FB:ED:C1:6E:A5:75:2F:A9:B7:B9:33:3C:1F:31:07:9C:E4:A7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8938AE5AC45611F081523EB7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.3.0/24
154.202.14.0-154.202.22.255
Signature Algorithm: sha256WithRSAEncryption
6c:6a:93:7f:73:d9:60:cd:33:6f:bf:87:20:17:cf:24:74:c0:
c8:ad:c0:b8:45:ec:1d:d2:aa:ef:7a:ae:5a:79:a7:b2:f5:79:
2d:9b:fa:03:6d:ff:43:d2:cc:8e:b6:72:32:ce:df:ad:5f:33:
7e:8b:45:52:60:e2:c5:6d:6f:12:de:a2:97:c4:e5:10:a3:4b:
60:cb:48:7c:5e:d0:fe:b3:22:c2:fa:b8:22:56:e8:35:f9:57:
e7:00:5a:2c:a9:6f:e6:15:48:04:2d:96:b6:12:1e:c4:ce:d6:
f3:48:31:8a:b4:9d:d5:6f:69:5e:68:2b:65:e0:61:88:8e:62:
a2:4e:c3:c9:f1:70:d3:fc:ff:47:bf:21:7d:84:9c:7e:f3:3f:
5f:93:c0:bb:9b:0d:01:f5:2d:4d:6a:74:71:67:45:90:93:6e:
df:d2:4a:b3:fa:f7:13:cf:6a:49:29:dd:1c:15:53:0b:f3:69:
60:c6:64:8b:28:d2:94:69:f6:b7:bd:c6:d9:4e:20:45:ca:0f:
8d:23:76:9e:a2:15:b5:4b:df:43:89:09:06:54:78:0a:aa:ac:
88:66:40:f9:be:ed:45:f2:39:d9:22:dc:b4:5d:9c:69:0d:9f:
9f:09:9a:25:30:82:2d:f0:a5:dd:ee:ab:6a:95:2d:f4:ca:4c:
ae:08:95:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:06:37 2025 by rpki-client