This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F84DE24C91411F08AC7758CDAE4EC9C.roa
File: 8F84DE24C91411F08AC7758CDAE4EC9C.roa (raw, json)
Hash identifier: q2AI4zlyfjZoGGAqoWVqackdemmkQCulNTQlFP0wAx0=
Subject key identifier: 83:00:09:2E:7A:FA:FC:2A:CB:CC:A4:43:E8:50:C3:6B:26:A4:5E:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AA3D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F84DE24C91411F08AC7758CDAE4EC9C.roa
Signing time: Mon 24 Nov 2025 09:04:20 +0000
ROA not before: Mon 24 Nov 2025 09:04:15 +0000
ROA not after: Tue 30 Dec 2025 09:04:15 +0000
asID: 32043
IP address blocks: 154.194.5.0/24 maxlen: 24
154.195.8.0/24 maxlen: 24
154.195.9.0/24 maxlen: 24
154.195.10.0/24 maxlen: 24
154.195.11.0/24 maxlen: 24
154.195.12.0/24 maxlen: 24
154.195.13.0/24 maxlen: 24
154.203.8.0/22 maxlen: 24
154.203.12.0/22 maxlen: 24
154.203.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109117 (0x1aa3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 24 09:04:15 2025 GMT
Not After : Dec 30 09:04:15 2025 GMT
Subject: CN=69241f93-5a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8b:dc:fc:79:2f:68:91:a9:98:3a:a0:4e:4b:
e9:b5:36:58:1a:94:40:9b:7a:f0:2d:b7:0f:e9:49:
1e:56:c5:b2:6d:30:a1:1a:5c:6d:50:0f:4b:1c:eb:
6a:cc:50:15:5b:cc:7b:85:11:a8:60:f7:ab:bb:78:
26:9f:b6:47:83:72:d5:16:82:76:be:01:0b:74:7d:
9e:ed:70:24:80:48:ab:3f:bc:ac:b0:95:59:a6:7a:
fc:35:73:e6:17:8b:59:de:95:a3:d2:97:d6:c9:71:
0d:4b:2c:d3:31:81:c9:a8:5b:55:e4:55:8a:76:17:
69:1e:60:65:dd:65:3d:15:ff:f1:dd:f2:6d:18:eb:
84:ab:81:84:30:c0:f7:c2:22:78:7a:74:b1:57:31:
18:dd:47:13:bd:89:ef:ad:7a:64:5e:18:28:73:48:
89:3a:78:65:54:db:0d:be:19:5d:b7:f8:e1:2a:fa:
5c:09:6e:43:9b:1d:ef:7c:72:ae:e9:2f:00:c0:82:
05:26:b5:27:03:d7:76:fe:ce:02:d8:40:90:a6:a3:
e9:32:f8:cf:5c:c1:53:9f:d2:39:eb:12:e4:a5:8f:
5c:1b:c6:44:bb:80:77:2d:9d:e4:73:61:95:78:d0:
cb:36:1d:ef:0f:46:10:ea:27:9d:90:f4:51:d0:22:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:00:09:2E:7A:FA:FC:2A:CB:CC:A4:43:E8:50:C3:6B:26:A4:5E:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F84DE24C91411F08AC7758CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.5.0/24
154.195.8.0-154.195.13.255
154.203.8.0/21
154.203.243.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:ca:b1:47:11:43:cc:f2:6f:72:8a:f7:8e:a0:5c:d6:59:eb:
2e:0d:af:9d:82:28:8c:58:26:b6:61:9e:66:ed:bb:a3:55:a1:
49:62:04:56:72:2f:32:f7:04:f5:4a:87:33:65:a9:93:f1:a3:
e1:21:c2:db:22:ff:e7:c4:d5:0f:15:a1:bd:ea:67:06:a4:e7:
dc:ef:75:64:9d:ad:8b:63:cd:9d:aa:76:8d:b5:35:89:90:d6:
10:04:65:d8:e0:4d:81:d0:df:34:d1:d8:44:c3:e1:73:9a:fd:
71:e0:6e:1e:e7:3d:1b:44:e6:f5:46:d9:b1:47:fe:0f:4a:12:
52:8a:6f:46:a3:0e:1a:b5:2a:83:45:d3:89:77:55:24:45:c8:
fc:cd:e3:22:e8:85:d0:ba:ba:57:01:05:68:f4:e9:3d:89:d7:
38:f1:c2:af:8b:b4:3e:eb:2c:24:3c:4e:ad:56:9e:62:03:a6:
9d:b9:aa:5d:d9:ed:d4:17:46:ea:42:70:95:2d:c0:de:73:dd:
5f:84:5f:e3:a9:9e:06:d0:7c:8f:ff:fc:5e:32:dd:59:b3:bf:
75:c6:5c:b7:b0:0c:d1:84:2f:31:33:00:8a:fb:b9:a8:e6:f3:
ad:4c:0b:c3:80:2a:84:d1:21:c6:2d:d3:38:6b:43:28:2b:15:
82:b7:83:17
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAao9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTI0MDkwNDE1WhcNMjUxMjMwMDkwNDE1WjAYMRYw
FAYDVQQDEw02OTI0MWY5My01YTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlIvc/HkvaJGpmDqgTkvptTZYGpRAm3rwLbcP6UkeVsWybTChGlxtUA9L
HOtqzFAVW8x7hRGoYPeru3gmn7ZHg3LVFoJ2vgELdH2e7XAkgEirP7yssJVZpnr8
NXPmF4tZ3pWj0pfWyXENSyzTMYHJqFtV5FWKdhdpHmBl3WU9Ff/x3fJtGOuEq4GE
MMD3wiJ4enSxVzEY3UcTvYnvrXpkXhgoc0iJOnhlVNsNvhldt/jhKvpcCW5Dmx3v
fHKu6S8AwIIFJrUnA9d2/s4C2ECQpqPpMvjPXMFTn9I56xLkpY9cG8ZEu4B3LZ3k
c2GVeNDLNh3vD0YQ6iedkPRR0CIY3QIDAQABo4ICvzCCArswHQYDVR0OBBYEFIMA
CS56+vwqy8ykQ+hQw2smpF7kMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC84Rjg0REUyNEM5MTQxMUYwOEFDNzc1OENEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAmsIFMAwDBAOawwgDBAGa
wwwDBAOaywgDBACay/MwDQYJKoZIhvcNAQELBQADggEBAMPKsUcRQ8zyb3KK946g
XNZZ6y4Nr52CKIxYJrZhnmbtu6NVoUliBFZyLzL3BPVKhzNlqZPxo+Ehwtsi/+fE
1Q8Vob3qZwak59zvdWSdrYtjzZ2qdo21NYmQ1hAEZdjgTYHQ3zTR2ETD4XOa/XHg
bh7nPRtE5vVG2bFH/g9KElKKb0ajDhq1KoNF04l3VSRFyPzN4yLohdC6ulcBBWj0
6T2J1zjxwq+LtD7rLCQ8Tq1WnmIDpp25ql3Z7dQXRupCcJUtwN5z3V+EX+OpngbQ
fI///F4y3Vmzv3XGXLewDNGELzEzAIr7uajm861MC8OAKoTRIcYt0zhrQygrFYK3
gxc=
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:13 2025 by rpki-client