This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5EB3A4AC14F11F0BE73A097DAE4EC9C.roa
File: A5EB3A4AC14F11F0BE73A097DAE4EC9C.roa (raw, json)
Hash identifier: j/EkO0EQ8EUHHrPwuksgKr42f2Mux0Y/d+vZ8Usg+SM=
Subject key identifier: A3:30:2A:40:AD:E9:FC:AC:5A:17:7F:28:CA:AF:02:75:4E:56:18:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A918
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5EB3A4AC14F11F0BE73A097DAE4EC9C.roa
Signing time: Fri 14 Nov 2025 11:47:08 +0000
ROA not before: Fri 14 Nov 2025 11:47:02 +0000
ROA not after: Tue 16 Dec 2025 11:47:02 +0000
asID: 22773
IP address blocks: 154.85.116.0/24 maxlen: 24
154.85.117.0/24 maxlen: 24
154.85.118.0/24 maxlen: 24
154.85.119.0/24 maxlen: 24
154.90.2.0/24 maxlen: 24
154.90.3.0/24 maxlen: 24
154.90.4.0/24 maxlen: 24
154.90.5.0/24 maxlen: 24
154.90.6.0/24 maxlen: 24
154.90.7.0/24 maxlen: 24
154.90.22.0/24 maxlen: 24
154.90.23.0/24 maxlen: 24
154.90.24.0/24 maxlen: 24
154.90.25.0/24 maxlen: 24
154.90.26.0/24 maxlen: 24
154.90.27.0/24 maxlen: 24
154.90.132.0/24 maxlen: 24
154.90.141.0/24 maxlen: 24
154.90.144.0/24 maxlen: 24
154.90.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108824 (0x1a918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 14 11:47:02 2025 GMT
Not After : Dec 16 11:47:02 2025 GMT
Subject: CN=691716bc-158f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:cc:af:58:58:2b:2d:2e:08:8a:2c:a3:22:
c2:18:da:83:97:32:6e:e7:83:71:6d:42:06:a2:4a:
53:47:15:1f:89:7e:1f:bc:85:fe:b2:76:00:a7:4d:
89:3f:88:ef:5c:7d:90:85:e7:cf:22:03:bf:20:65:
c3:01:a2:19:74:34:50:8a:0b:7b:55:d1:c1:39:c0:
0e:04:87:fe:9f:ba:cc:1f:9d:b0:01:6b:a6:f9:23:
97:70:d9:2b:bf:6a:a6:ae:cf:74:f1:b9:5c:20:0d:
bf:5e:bd:52:0e:b4:3d:69:60:f7:e5:85:69:64:05:
02:6a:bf:24:aa:f2:9e:b1:59:3b:e7:f7:0a:e2:09:
2a:77:ed:d7:61:f2:2d:49:76:bf:4d:47:c8:8a:b5:
32:7a:a2:b5:0f:64:77:97:9a:d0:c4:41:68:44:08:
34:bc:53:ed:0b:79:ae:e7:ec:09:b3:10:00:9f:68:
18:50:54:bc:22:3d:f2:3f:bc:06:3c:46:76:2a:fe:
ec:69:81:a1:e1:cc:66:b0:01:e9:a4:b0:79:85:04:
a2:a2:c1:d1:c1:9e:29:b7:9c:a2:0d:b3:05:78:b0:
e3:20:48:86:0a:83:3d:aa:8c:20:ee:60:fc:79:1d:
fe:a5:38:bd:c4:2c:de:1f:2d:ec:af:a7:b3:e9:1d:
ef:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:30:2A:40:AD:E9:FC:AC:5A:17:7F:28:CA:AF:02:75:4E:56:18:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A5EB3A4AC14F11F0BE73A097DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.116.0/22
154.90.2.0-154.90.7.255
154.90.22.0-154.90.27.255
154.90.132.0/24
154.90.141.0/24
154.90.144.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:72:ed:e8:a3:b9:5c:fa:01:bb:9c:a2:f5:b5:87:0c:3f:a7:
1f:e3:0e:b9:93:69:55:2b:5a:29:b6:e4:ee:fe:2c:8f:25:b8:
ab:27:b9:a6:80:d1:e0:8e:ea:c9:27:a6:f1:7f:5c:ca:4e:4d:
77:89:c4:aa:ac:45:d3:ba:54:d3:fd:c4:12:54:a1:2b:9c:7d:
3d:89:be:ad:f3:e3:95:46:80:e5:a4:b5:59:18:6d:6b:01:ea:
80:ed:47:f1:34:ff:12:c0:5b:06:9a:20:8b:eb:05:51:1e:89:
a1:a2:50:65:88:d7:df:31:dc:28:c3:a1:74:6c:f8:17:f4:1e:
ee:b2:45:06:3b:9b:35:04:34:85:73:8c:ce:91:9d:24:44:e5:
8f:0e:39:e6:11:cb:2d:d4:10:9a:8d:22:e3:88:c3:f2:9d:8a:
7f:cd:04:e1:cc:52:3d:32:08:04:62:41:ae:d2:9e:ac:e5:93:
c3:ab:67:0a:dc:fe:cb:01:7d:96:87:89:92:15:70:ed:87:a3:
2c:4b:ac:48:74:af:42:92:03:f9:b5:c5:5b:04:d8:87:f1:3a:
fd:40:4e:1e:45:e9:37:73:eb:18:47:70:2e:9b:b6:b6:15:06:
0a:80:df:e8:b7:b6:82:f6:22:4a:6a:00:a0:a2:d2:44:bf:6d:
55:b8:0a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:28:59 2025 by rpki-client