This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/995E0804C53011F0B781F89BDAE4EC9C.roa
File: 995E0804C53011F0B781F89BDAE4EC9C.roa (raw, json)
Hash identifier: UXvUdw18hrQbnqAhSyr6Q+fFTMNzhVjqmY3TjH2S+1I=
Subject key identifier: B3:60:14:D2:D1:A5:F6:77:EB:F0:5F:91:CF:DE:44:98:55:B0:58:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A9D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/995E0804C53011F0B781F89BDAE4EC9C.roa
Signing time: Wed 19 Nov 2025 10:14:58 +0000
ROA not before: Wed 19 Nov 2025 10:14:53 +0000
ROA not after: Sat 20 Dec 2025 10:14:53 +0000
asID: 273155
IP address blocks: 154.200.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109014 (0x1a9d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 19 10:14:53 2025 GMT
Not After : Dec 20 10:14:53 2025 GMT
Subject: CN=691d98a2-7091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:aa:c8:97:07:b6:22:a5:b4:ca:8c:33:e5:53:
85:d9:d3:6d:71:ba:02:08:a2:fb:fd:f3:a6:a7:68:
16:ee:71:88:88:15:f6:07:64:cc:8b:d4:3a:2f:ff:
5d:81:0d:25:05:9c:ce:63:76:8e:0b:4b:26:03:8c:
a4:68:d3:21:f1:10:62:aa:11:06:4e:4b:bc:d1:a0:
d1:99:40:1a:28:db:63:18:db:e3:89:ee:c6:eb:76:
c2:fd:13:ef:6d:20:e1:44:17:48:1d:8a:c3:56:17:
ea:bd:f1:e6:6e:7c:03:bb:a6:dc:c1:a9:a6:a0:72:
86:21:24:52:48:26:c4:00:40:a9:2d:b6:c6:f2:e5:
6b:7b:eb:c6:68:fe:87:5d:45:e0:8f:cf:c5:fc:9d:
f8:08:13:46:6e:f2:5f:cb:ff:d2:66:79:bb:3a:dd:
eb:7f:5b:5f:b5:0b:7f:da:c0:68:b3:1b:61:d6:9d:
69:bd:16:2b:83:20:8e:0e:f9:60:f4:32:1a:53:cf:
30:cd:c9:36:31:5d:9a:5a:eb:8e:30:a0:57:75:67:
0f:13:b6:52:3d:0b:9c:3d:2c:0c:76:fe:26:82:79:
5f:66:04:5e:fe:f5:c0:31:79:59:ac:f0:c5:62:ba:
58:0b:49:a7:3a:41:17:57:0c:5c:65:58:89:15:24:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:60:14:D2:D1:A5:F6:77:EB:F0:5F:91:CF:DE:44:98:55:B0:58:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/995E0804C53011F0B781F89BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.236.0/22
Signature Algorithm: sha256WithRSAEncryption
98:16:ac:d6:70:0d:9a:3f:5b:4d:8a:63:18:7c:40:8d:37:06:
c2:67:13:07:3c:bd:36:77:28:1c:a5:31:0d:f1:1a:25:98:3f:
52:4d:04:c2:a0:74:b4:c1:46:50:5d:c8:4c:82:7e:4b:db:54:
03:99:0c:aa:d5:37:31:49:e9:19:64:80:e5:61:4e:6d:c4:a9:
cf:b3:65:8d:bc:ed:b5:4c:f4:f0:64:22:15:9a:71:ec:ab:bb:
bc:da:b2:b2:72:06:84:8d:70:c3:da:cb:02:a1:b4:4a:37:84:
00:22:ff:4d:47:81:d5:11:46:ae:d8:f2:88:4f:fe:2b:19:2f:
4f:6f:9e:a1:35:88:49:4c:b4:1b:a7:4f:19:79:e3:c3:c0:c4:
39:9a:7a:e9:bb:25:9e:98:1e:3c:32:65:8f:6d:ed:ba:16:ea:
97:04:53:b4:aa:64:6f:ad:5a:7f:07:34:38:c6:9d:17:84:f4:
c2:e0:19:24:42:42:0f:3b:84:3e:86:28:54:ea:b7:22:90:4a:
1f:bd:ee:9e:4b:58:a2:89:8f:ad:1d:1e:47:54:8a:35:0b:d0:
2b:fb:08:00:3f:de:27:88:34:b0:f0:56:fe:fe:bd:5d:51:9e:
a4:93:f0:65:f7:b2:2f:ca:5d:ca:f0:3f:53:17:3c:d8:d4:14:
39:51:cb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:07:09 2025 by rpki-client