This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8C936C2CF6311F0BEFE7FA8DAE4EC9C.roa
File: B8C936C2CF6311F0BEFE7FA8DAE4EC9C.roa (raw, json)
Hash identifier: 8Fh8PJQCHFJpo9sKnU3kEqOixZOhuwrgGtgQRlCtefQ=
Subject key identifier: 11:8B:32:E6:7A:BF:43:E7:98:A0:D3:16:8A:6D:E6:03:A0:2C:C9:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AB75
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8C936C2CF6311F0BEFE7FA8DAE4EC9C.roa
Signing time: Tue 02 Dec 2025 09:46:06 +0000
ROA not before: Tue 02 Dec 2025 09:46:01 +0000
ROA not after: Thu 25 Dec 2025 09:46:01 +0000
asID: 54801
IP address blocks: 154.198.9.0/24 maxlen: 24
154.198.10.0/24 maxlen: 24
154.200.241.0/24 maxlen: 24
154.200.242.0/24 maxlen: 24
154.200.248.0/23 maxlen: 24
154.201.7.0/24 maxlen: 24
154.201.8.0/22 maxlen: 24
154.201.40.0/23 maxlen: 24
154.213.211.0/24 maxlen: 24
154.213.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109429 (0x1ab75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 2 09:46:01 2025 GMT
Not After : Dec 25 09:46:01 2025 GMT
Subject: CN=692eb55e-280a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:79:c0:c6:ba:a6:ba:18:ad:50:9c:b4:08:
e1:a8:42:d5:d3:38:94:a9:b7:56:56:5b:d1:e4:41:
a0:c3:42:f5:15:89:6b:71:ba:f9:3a:d7:98:97:90:
f3:1f:db:ca:e3:66:cf:f4:8c:c4:01:71:71:6c:8d:
3e:82:03:f1:44:bc:58:22:70:d8:70:53:eb:9c:e1:
20:7c:5f:c7:09:d1:33:56:17:e0:53:ca:07:b6:18:
71:7f:d1:ba:51:fd:85:d6:50:d4:31:17:84:2f:e4:
63:a5:5b:3d:a9:36:91:48:41:9b:3b:b7:1a:73:ee:
ab:40:7f:bb:20:97:29:6e:a4:b5:f7:95:36:95:f0:
d6:54:c7:4a:34:68:4a:52:24:b0:68:6e:22:01:08:
7b:91:92:a4:ae:66:16:78:ce:b2:7e:e7:17:5c:36:
81:eb:94:4d:c9:c3:87:b9:78:bb:dd:d7:de:ac:06:
32:99:85:87:7c:6f:c3:0e:20:f3:8f:ff:a8:fb:d9:
a6:ef:1a:78:ff:6e:8a:a5:f9:dd:72:ba:d7:08:cf:
d6:39:1c:f7:6c:72:af:57:52:8d:4e:38:03:8c:be:
f5:1e:75:d5:f3:8b:d3:8b:34:8c:20:28:2c:2d:38:
7f:21:9f:8d:d7:56:eb:29:61:74:40:80:3e:13:ad:
9a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8B:32:E6:7A:BF:43:E7:98:A0:D3:16:8A:6D:E6:03:A0:2C:C9:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8C936C2CF6311F0BEFE7FA8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.9.0-154.198.10.255
154.200.241.0-154.200.242.255
154.200.248.0/23
154.201.7.0-154.201.11.255
154.201.40.0/23
154.213.211.0-154.213.212.255
Signature Algorithm: sha256WithRSAEncryption
4a:4e:93:40:4d:63:40:b2:75:88:f3:21:d0:f1:e0:3c:0d:af:
83:22:c9:04:23:dc:99:c4:00:62:37:99:05:24:a6:4a:37:c6:
d8:4c:fb:39:a7:13:4c:a0:8b:82:3f:7e:31:46:64:27:22:ff:
ae:32:53:51:4b:5b:9b:85:f3:a7:85:29:ae:74:7c:69:db:49:
ed:b5:ad:88:2d:5a:e6:fb:20:8b:f9:36:46:2a:a4:02:0d:56:
40:76:6f:ce:0c:d3:3f:08:3c:6c:51:7e:37:37:81:0a:4e:92:
04:76:4f:4f:08:fe:d8:40:b9:ac:6b:83:14:26:9f:5f:32:c1:
44:f2:a5:16:ac:8d:08:62:a4:9c:7f:b8:76:bb:69:4d:46:1d:
ad:44:4e:1e:d4:fb:2b:8d:9a:88:56:0b:8a:db:39:fb:a4:13:
cd:e0:9b:01:09:a4:75:7b:76:d6:8b:4f:b0:b4:8d:7c:12:f5:
26:06:09:26:c4:3c:ff:78:b2:cc:35:c8:ae:c9:a8:b9:d3:18:
d5:88:95:4b:d5:20:05:9f:94:f0:2c:08:01:bb:05:8a:f1:cb:
7c:80:2e:4d:9d:42:33:d4:16:4d:d3:66:24:f4:38:88:97:02:
3b:03:18:33:bd:65:f8:18:0a:a0:bc:a2:80:1b:ff:dd:cf:e7:
b5:ee:af:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:21 2025 by rpki-client