This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9B5BB9AC39911F08144838DDAE4EC9C.roa
File: A9B5BB9AC39911F08144838DDAE4EC9C.roa (raw, json)
Hash identifier: piwtlTU30PrpI4bFfZQW+u4StE1XIB4jxgmROGXpQIo=
Subject key identifier: F3:47:57:57:D2:D5:C6:D2:3C:6F:BA:B8:24:F2:CA:2E:7B:EC:13:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A94B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9B5BB9AC39911F08144838DDAE4EC9C.roa
Signing time: Mon 17 Nov 2025 09:42:00 +0000
ROA not before: Mon 17 Nov 2025 09:41:52 +0000
ROA not after: Fri 19 Dec 2025 09:41:52 +0000
asID: 214143
IP address blocks: 154.92.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108875 (0x1a94b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 17 09:41:52 2025 GMT
Not After : Dec 19 09:41:52 2025 GMT
Subject: CN=691aede7-7260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:7a:0f:54:70:4a:5f:f8:4a:f1:ad:a5:4c:
7e:59:b3:96:b3:74:d0:10:98:57:86:ef:fc:64:34:
08:47:02:9d:9b:46:69:72:33:a3:12:94:2a:9a:b4:
24:c3:1c:89:68:3f:4e:8a:7a:4d:73:a7:f6:fc:d7:
a9:a8:44:f2:f4:56:34:f8:c6:01:b0:34:a2:05:b9:
7d:78:61:da:66:3c:5c:56:af:17:b2:30:5b:dc:cf:
4f:c6:6f:d4:f5:99:3a:2f:9a:2b:f8:5e:d4:70:06:
d3:79:2c:f5:e6:7c:2c:1d:d2:69:c8:bf:96:39:c0:
82:23:44:3b:bb:6d:1e:89:d2:2c:a3:10:69:96:d5:
86:12:08:e2:b4:cc:fa:03:12:d4:d1:0f:fe:c9:24:
6a:70:c1:5c:16:d5:4c:d5:ae:31:a6:fd:ce:15:20:
aa:16:da:2a:37:0e:f2:1f:a7:62:aa:7b:38:fc:d0:
ac:4d:79:0f:db:6c:01:3c:65:c8:3d:a6:33:93:a2:
7e:8a:de:ec:70:d9:91:dd:3d:79:9d:54:cc:c2:08:
b4:26:a4:7b:93:aa:f8:96:12:86:cb:82:38:13:ff:
3b:aa:f5:7d:6c:1c:43:29:8b:84:92:58:73:4d:df:
df:73:0c:5b:12:1a:3d:e2:f8:91:4d:e8:17:1a:ea:
b7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:47:57:57:D2:D5:C6:D2:3C:6F:BA:B8:24:F2:CA:2E:7B:EC:13:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9B5BB9AC39911F08144838DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:35:fc:5c:fc:ca:47:ff:81:80:9e:ee:4e:51:c1:85:14:8e:
9e:fd:4d:4f:08:70:32:eb:89:90:60:2c:f8:c9:03:fe:db:d5:
df:d8:e0:6e:89:4a:29:8b:3e:97:7a:ff:4d:94:70:32:68:1d:
b5:7f:1f:26:c9:86:d8:72:69:e6:d8:17:cf:06:fd:be:ed:f0:
e7:72:32:ec:87:b9:66:a0:26:64:a1:9c:24:ba:7b:c7:dd:f8:
1c:77:e0:d0:ae:0b:c4:a3:bb:74:4b:98:aa:88:d5:d5:df:e5:
31:1d:19:73:bf:bd:c6:27:5b:99:0c:71:ae:e5:86:d1:17:f4:
c4:10:aa:a3:27:f8:1c:11:df:d7:d4:72:8c:2f:4b:31:fe:f8:
c5:29:16:09:df:38:fc:c9:b2:b5:21:df:93:b8:54:c7:cf:17:
08:f4:58:92:76:01:d6:b6:65:5f:94:16:7a:3f:c9:77:41:a1:
9d:bf:65:ff:95:78:d3:4a:a8:9f:ee:e0:6f:53:48:c9:f4:97:
7f:e0:bf:6c:c2:ef:56:1f:0f:32:d8:72:a5:6f:4a:46:7f:32:
e9:6f:e2:7d:78:80:f7:26:6d:70:38:dd:50:56:4f:46:42:61:
d0:c5:ce:df:58:73:38:02:6c:80:62:c6:ed:4f:21:16:97:cc:
85:55:b3:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAalLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTE3MDk0MTUyWhcNMjUxMjE5MDk0MTUyWjAYMRYw
FAYDVQQDEw02OTFhZWRlNy03MjYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsoR6D1RwSl/4SvGtpUx+WbOWs3TQEJhXhu/8ZDQIRwKdm0ZpcjOjEpQq
mrQkwxyJaD9OinpNc6f2/NepqETy9FY0+MYBsDSiBbl9eGHaZjxcVq8XsjBb3M9P
xm/U9Zk6L5or+F7UcAbTeSz15nwsHdJpyL+WOcCCI0Q7u20eidIsoxBpltWGEgji
tMz6AxLU0Q/+ySRqcMFcFtVM1a4xpv3OFSCqFtoqNw7yH6diqns4/NCsTXkP22wB
PGXIPaYzk6J+it7scNmR3T15nVTMwgi0JqR7k6r4lhKGy4I4E/87qvV9bBxDKYuE
klhzTd/fcwxbEho94viRTegXGuq3cwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFPNH
V1fS1cbSPG+6uCTyyi577BNaMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9BOUI1QkI5QUMzOTkxMUYwODE0NDgzOEREQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmlzRMA0GCSqGSIb3DQEB
CwUAA4IBAQCoNfxc/MpH/4GAnu5OUcGFFI6e/U1PCHAy64mQYCz4yQP+29Xf2OBu
iUopiz6Xev9NlHAyaB21fx8myYbYcmnm2BfPBv2+7fDncjLsh7lmoCZkoZwkunvH
3fgcd+DQrgvEo7t0S5iqiNXV3+UxHRlzv73GJ1uZDHGu5YbRF/TEEKqjJ/gcEd/X
1HKML0sx/vjFKRYJ3zj8ybK1Id+TuFTHzxcI9FiSdgHWtmVflBZ6P8l3QaGdv2X/
lXjTSqif7uBvU0jJ9Jd/4L9swu9WHw8y2HKlb0pGfzLpb+J9eID3Jm1wON1QVk9G
QmHQxc7fWHM4AmyAYsbtTyEWl8yFVbOf
-----END CERTIFICATE-----
Generated at Wed Dec 3 11:07:11 2025 by rpki-client