This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DF5EBD8DF0E11F0B66A14EADAE4EC9C.roa
File: 8DF5EBD8DF0E11F0B66A14EADAE4EC9C.roa (raw, json)
Hash identifier: aYq+qA0i/KL8hijEjqK/XX5XCuM7QZMmOxRxcKahv4c=
Subject key identifier: DF:D2:B4:8B:E6:36:06:C7:D3:E2:83:1D:F9:54:06:58:53:C1:57:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AFD0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DF5EBD8DF0E11F0B66A14EADAE4EC9C.roa
Signing time: Mon 22 Dec 2025 08:16:46 +0000
ROA not before: Mon 22 Dec 2025 08:16:41 +0000
ROA not after: Sun 27 Dec 2026 08:16:41 +0000
asID: 201411
IP address blocks: 154.84.156.0/24 maxlen: 24
154.84.157.0/24 maxlen: 24
154.84.158.0/24 maxlen: 24
154.84.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Dec 2025 08:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110544 (0x1afd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 22 08:16:41 2025 GMT
Not After : Dec 27 08:16:41 2026 GMT
Subject: CN=6948fe6d-1249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:a1:66:c3:d5:52:be:4d:36:b9:d5:68:15:
5c:91:a6:3d:15:51:b5:3c:a9:35:0f:5d:e3:40:5f:
e0:e6:24:66:33:29:c5:70:5c:3c:91:c9:fe:c3:82:
2e:54:4b:40:ab:88:ca:3f:9d:69:87:83:46:56:7e:
f4:ff:81:8a:fb:ff:e1:f0:43:c8:2f:46:b6:15:5a:
c9:b3:75:81:72:5f:1e:1c:63:2b:54:e7:f1:78:e3:
5d:a3:61:d6:e7:22:fa:f7:28:0c:86:f5:5c:27:1d:
ab:92:4c:08:11:f3:09:b0:ba:c4:bf:18:b1:d2:15:
af:da:c4:d5:8e:2f:60:9a:fe:23:a4:5d:a3:d8:c1:
b4:40:26:e7:bf:83:6e:6c:07:5f:46:71:01:8e:33:
84:4a:07:d0:0c:53:13:bf:8f:ca:a1:f3:e5:e1:57:
ae:5a:fe:d2:da:1b:f7:25:ec:2e:aa:a9:18:7a:7a:
69:0e:72:9e:b7:c3:90:65:31:f9:d9:01:0b:b6:42:
f1:46:c5:de:0f:77:d8:dd:d5:df:ed:ad:1b:d7:46:
07:92:0f:32:5a:40:ff:30:2f:c4:ca:c9:15:58:d2:
28:d6:c1:bc:bc:bc:51:23:89:bd:56:75:0a:78:90:
5a:50:45:d2:44:92:3a:2c:6a:71:62:20:37:98:58:
07:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D2:B4:8B:E6:36:06:C7:D3:E2:83:1D:F9:54:06:58:53:C1:57:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DF5EBD8DF0E11F0B66A14EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.156.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:24:6b:7f:c8:05:2b:8f:01:63:e7:77:1d:4c:d5:90:2a:d9:
67:1b:35:46:c2:35:18:6b:21:46:c7:0e:0b:16:37:6f:e3:54:
97:84:5e:f1:1d:c5:0b:3d:4e:ff:70:59:f4:09:7d:e5:d5:d9:
de:05:02:69:86:5a:dd:4d:37:9e:8b:91:ee:6d:23:ef:b1:6b:
6e:64:7f:17:12:f7:d6:fa:ae:fd:07:4b:2f:9e:cf:61:5b:91:
8b:3f:04:6e:6b:7e:8a:48:af:d2:9a:f7:9a:0a:07:99:52:be:
7a:21:51:24:40:91:41:3a:e1:63:a5:ef:68:52:fb:f7:d1:bf:
3c:fd:48:8c:35:98:45:6b:70:41:54:85:64:58:2b:43:19:c9:
7e:d7:10:2c:63:02:aa:db:b2:2a:41:b4:d0:05:11:33:2d:ef:
37:9f:c9:77:b3:39:e9:29:0a:7f:eb:a8:b1:d5:e1:74:f2:d1:
7c:b6:57:07:b0:34:52:43:a9:f7:f7:d2:0e:5e:25:ce:d5:99:
ee:80:64:64:c5:e7:1f:f4:81:5c:12:22:12:4a:90:f4:95:ab:
23:34:3a:dc:d1:05:c7:c9:33:18:02:8e:7d:e2:e7:4d:5f:3e:
94:6c:d2:3d:83:64:86:5b:50:0b:d5:da:1f:33:e8:51:02:89:
db:a6:95:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAa/QMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjIyMDgxNjQxWhcNMjYxMjI3MDgxNjQxWjAYMRYw
FAYDVQQDEw02OTQ4ZmU2ZC0xMjQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAx6KhZsPVUr5NNrnVaBVckaY9FVG1PKk1D13jQF/g5iRmMynFcFw8kcn+
w4IuVEtAq4jKP51ph4NGVn70/4GK+//h8EPIL0a2FVrJs3WBcl8eHGMrVOfxeONd
o2HW5yL69ygMhvVcJx2rkkwIEfMJsLrEvxix0hWv2sTVji9gmv4jpF2j2MG0QCbn
v4NubAdfRnEBjjOESgfQDFMTv4/KofPl4VeuWv7S2hv3JewuqqkYenppDnKet8OQ
ZTH52QELtkLxRsXeD3fY3dXf7a0b10YHkg8yWkD/MC/EyskVWNIo1sG8vLxRI4m9
VnUKeJBaUEXSRJI6LGpxYiA3mFgHXwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFN/S
tIvmNgbH0+KDHflUBlhTwVf7MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84REY1RUJEOERGMEUxMUYwQjY2QTE0RUFEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmlScMA0GCSqGSIb3DQEB
CwUAA4IBAQCzJGt/yAUrjwFj53cdTNWQKtlnGzVGwjUYayFGxw4LFjdv41SXhF7x
HcULPU7/cFn0CX3l1dneBQJphlrdTTeei5HubSPvsWtuZH8XEvfW+q79B0svns9h
W5GLPwRua36KSK/SmveaCgeZUr56IVEkQJFBOuFjpe9oUvv30b88/UiMNZhFa3BB
VIVkWCtDGcl+1xAsYwKq27IqQbTQBREzLe83n8l3sznpKQp/66ix1eF08tF8tlcH
sDRSQ6n399IOXiXO1ZnugGRkxecf9IFcEiISSpD0lasjNDrc0QXHyTMYAo594udN
Xz6UbNI9g2SGW1AL1dofM+hRAonbppVY
-----END CERTIFICATE-----
Generated at Tue Dec 23 09:38:08 2025 by rpki-client