This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/901DFDA6BFDD11F08F23F2F0DAE4EC9C.roa
File: 901DFDA6BFDD11F08F23F2F0DAE4EC9C.roa (raw, json)
Hash identifier: hptvP7klI0UuCMCSUei+5zoif17hifK3X/QDjHzYUis=
Subject key identifier: DF:7B:21:5F:0D:22:8F:D2:C6:32:75:86:3F:F4:53:6A:17:00:14:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A8B0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/901DFDA6BFDD11F08F23F2F0DAE4EC9C.roa
Signing time: Wed 12 Nov 2025 15:37:58 +0000
ROA not before: Wed 12 Nov 2025 15:37:52 +0000
ROA not after: Sun 04 Jan 2026 15:37:52 +0000
asID: 20326
IP address blocks: 154.194.32.0/24 maxlen: 24
154.194.192.0/23 maxlen: 24
154.194.206.0/24 maxlen: 24
154.198.165.0/24 maxlen: 24
154.198.166.0/23 maxlen: 24
154.198.176.0/21 maxlen: 24
154.202.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108720 (0x1a8b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 12 15:37:52 2025 GMT
Not After : Jan 4 15:37:52 2026 GMT
Subject: CN=6914a9d6-dc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ef:ad:a8:b3:04:fa:1e:76:bb:11:8c:31:09:
69:54:80:8b:48:7f:4d:5e:17:c2:f3:62:cd:2e:55:
e1:df:d8:0b:0c:30:0d:b2:44:37:51:2e:f9:3f:79:
4d:e1:0f:38:5f:3e:82:b4:e4:ac:85:6c:99:6c:07:
c6:95:50:40:9c:88:28:41:00:a3:d6:c7:0d:1e:8f:
83:a0:90:58:96:22:ec:ff:53:54:1c:51:83:8d:f9:
7d:78:27:ce:c3:55:27:92:d2:7a:12:b8:58:d2:4b:
c3:9a:56:70:e8:e7:66:30:95:c2:91:2d:cd:e5:49:
c4:ab:c5:42:36:44:e0:e1:0d:65:ea:60:6b:73:26:
77:d6:57:00:ab:de:ca:71:94:b6:e0:34:5d:36:c1:
eb:71:f6:38:cd:8e:4c:3c:72:29:13:22:ee:9f:56:
c2:d2:fb:56:b0:a6:3d:2c:a4:a1:8c:ba:55:c0:b2:
e4:c4:f2:7f:41:d8:1f:f2:0b:43:bc:f9:50:79:bf:
0a:c0:83:d7:0d:39:b7:ed:1e:f0:d2:ee:1a:28:6a:
ac:ae:d7:e5:21:51:36:38:3c:eb:e6:9a:fe:b5:02:
36:27:fc:92:58:e4:50:d7:f3:5b:ba:c3:e0:4c:a9:
e6:ad:cc:e0:1e:ec:24:11:1f:cb:29:06:7a:3f:35:
93:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7B:21:5F:0D:22:8F:D2:C6:32:75:86:3F:F4:53:6A:17:00:14:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/901DFDA6BFDD11F08F23F2F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.32.0/24
154.194.192.0/23
154.194.206.0/24
154.198.165.0-154.198.167.255
154.198.176.0/21
154.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:15:ac:a0:a6:a2:97:6e:39:5b:71:83:e3:7a:02:be:f2:ed:
af:c2:cd:29:a7:6c:6a:b0:03:f5:cb:1a:d4:f5:61:04:93:ab:
07:4b:a5:0b:43:7a:57:c4:8f:a1:f1:9d:e6:1d:cc:7b:0a:5a:
1c:34:a6:ad:49:65:3e:2f:a7:e2:50:78:1e:b7:1f:be:d4:7a:
b2:11:11:94:db:18:a9:4c:c9:f3:a1:c8:3f:27:43:91:ee:92:
fa:ca:fc:59:26:fe:0d:a2:8f:fe:46:57:15:59:d5:86:cf:11:
ae:84:0d:88:79:8a:c4:bd:c3:1b:54:c8:e4:34:ea:d5:3c:3b:
b9:4e:48:84:8f:b6:19:00:52:6b:f9:69:48:fd:6b:2b:77:03:
b8:67:2d:3b:5e:98:56:b3:65:b3:33:c2:49:d0:bf:ff:8e:89:
f8:f6:d1:a8:3e:78:83:51:7c:1a:58:08:56:b6:97:24:83:21:
f2:12:e0:c8:14:45:be:c5:16:ed:c0:b0:31:f6:13:7b:9c:cb:
c2:38:54:89:f1:75:3b:aa:ed:25:35:79:d4:e5:5c:27:53:97:
6c:c0:88:a9:ba:f7:b8:50:dc:d9:14:41:ef:32:a8:04:ef:c1:
f8:78:95:7d:44:76:b0:be:79:55:1b:d0:fd:db:1d:67:7f:cf:
87:25:df:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:10 2025 by rpki-client