This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB826AC6D01911F0A8A571A5DAE4EC9C.roa
File: BB826AC6D01911F0A8A571A5DAE4EC9C.roa (raw, json)
Hash identifier: kRTvdydT2RWNkHDj8dycpJJGH6HLGs1fFz9gkZjUchw=
Subject key identifier: 24:96:D1:3B:6A:08:2C:CE:75:91:D2:90:E7:24:91:58:D9:C3:E7:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AC00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB826AC6D01911F0A8A571A5DAE4EC9C.roa
Signing time: Wed 03 Dec 2025 07:29:04 +0000
ROA not before: Wed 03 Dec 2025 07:28:52 +0000
ROA not after: Thu 01 Jan 2026 07:28:52 +0000
asID: 44559
IP address blocks: 154.203.226.0/24 maxlen: 24
154.203.227.0/24 maxlen: 24
154.203.228.0/24 maxlen: 24
154.203.229.0/24 maxlen: 24
154.203.250.0/24 maxlen: 24
154.205.28.0/24 maxlen: 24
154.205.29.0/24 maxlen: 24
154.205.241.0/24 maxlen: 24
154.205.242.0/24 maxlen: 24
154.205.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109568 (0x1ac00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 3 07:28:52 2025 GMT
Not After : Jan 1 07:28:52 2026 GMT
Subject: CN=692fe6c0-ca92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:16:c5:d8:07:8a:81:83:ac:0c:dd:3b:28:2e:
2c:1e:f7:f8:c3:6c:18:65:7a:8f:c8:d5:b6:a8:d4:
48:95:dc:16:68:95:67:8b:70:e7:14:75:ed:48:46:
af:01:8f:a7:29:50:28:bc:f4:90:27:ae:1f:d2:aa:
14:81:65:d1:2f:bd:77:71:93:4f:c4:cd:97:bb:0a:
47:fe:49:e1:ae:59:d0:85:50:60:1e:3a:a1:9a:c3:
05:c5:10:dc:3d:52:93:81:b6:ee:37:59:33:f6:7f:
55:c0:59:a8:55:a0:ab:fa:16:21:5b:6e:c3:c6:18:
67:58:9a:4b:b3:54:5f:94:07:01:85:9f:8a:ad:67:
d3:0b:c7:9d:4e:d6:80:d1:6e:7e:c2:76:1e:aa:16:
fb:83:b3:b6:bb:9d:b6:ba:ca:ac:86:a7:66:ab:4c:
6b:a1:be:87:90:1b:fb:59:da:80:87:61:2c:44:64:
50:65:2e:ff:25:ee:de:f8:06:a3:31:cf:6d:e1:e6:
e1:98:f1:cd:4a:55:6d:93:92:0b:96:41:98:64:43:
b6:4c:9b:96:1d:d4:b7:3e:3c:85:63:f8:fc:3a:35:
e5:7b:c3:6f:7d:88:68:b2:ef:9e:f1:d2:a3:3c:bb:
14:18:f2:01:07:1c:4d:b3:7f:61:19:40:1c:7e:1b:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:96:D1:3B:6A:08:2C:CE:75:91:D2:90:E7:24:91:58:D9:C3:E7:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB826AC6D01911F0A8A571A5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.226.0-154.203.229.255
154.203.250.0/24
154.205.28.0/23
154.205.241.0-154.205.243.255
Signature Algorithm: sha256WithRSAEncryption
81:ad:40:0d:7f:71:aa:eb:ef:12:a4:ef:25:11:6f:21:fe:27:
0a:01:a3:7b:49:4d:c5:be:2d:a3:07:23:97:91:15:87:6f:75:
58:62:f7:a4:63:e7:08:62:3d:9e:c4:9f:57:39:43:2b:c7:78:
b7:85:fa:c6:74:be:a7:6c:89:6d:4c:ca:84:bd:95:6f:ec:f8:
49:a6:b7:45:0e:b4:e7:ce:e8:fa:71:b7:6b:7b:8e:16:9f:a3:
60:be:0e:df:18:dd:a7:23:27:67:1c:cc:b8:8d:86:da:84:24:
bd:b8:ba:6f:e2:92:a8:83:8d:bb:e6:af:d9:8e:14:27:9d:20:
35:9e:ad:6b:1f:59:ef:a1:5b:e4:30:c5:6f:7a:f4:30:44:51:
6f:99:6f:3e:d8:37:34:53:95:b2:60:45:12:b8:47:59:e3:b0:
df:13:b6:f6:1f:a1:86:77:72:4f:a8:fe:97:73:13:85:5e:e5:
11:62:73:2d:83:83:01:a3:fe:0d:be:7a:53:aa:24:67:b7:9d:
d2:4f:d9:ab:dd:f6:a5:65:71:cd:fb:a3:fe:d9:e6:4c:cf:37:
39:af:28:b5:4a:47:7c:37:96:87:1c:36:32:19:2a:9b:c4:36:
3b:df:24:17:8f:3e:77:03:06:c8:43:1b:be:26:49:75:69:4f:
ff:fe:c6:65
-----BEGIN CERTIFICATE-----
MIIFpjCCBI6gAwIBAgIDAawAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjAzMDcyODUyWhcNMjYwMTAxMDcyODUyWjAYMRYw
FAYDVQQDEw02OTJmZTZjMC1jYTkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAlBbF2AeKgYOsDN07KC4sHvf4w2wYZXqPyNW2qNRIldwWaJVni3DnFHXt
SEavAY+nKVAovPSQJ64f0qoUgWXRL713cZNPxM2XuwpH/knhrlnQhVBgHjqhmsMF
xRDcPVKTgbbuN1kz9n9VwFmoVaCr+hYhW27DxhhnWJpLs1RflAcBhZ+KrWfTC8ed
TtaA0W5+wnYeqhb7g7O2u522usqshqdmq0xrob6HkBv7WdqAh2EsRGRQZS7/Je7e
+AajMc9t4ebhmPHNSlVtk5ILlkGYZEO2TJuWHdS3PjyFY/j8OjXle8NvfYhosu+e
8dKjPLsUGPIBBxxNs39hGUAcfhvJiQIDAQABo4ICxzCCAsMwHQYDVR0OBBYEFCSW
0TtqCCzOdZHSkOckkVjZw+dVMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9CQjgyNkFDNkQwMTkxMUYwQThBNTcxQTVEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAGay+IDBAGay+QDBACa
y/oDBAGazRwwDAMEAJrN8QMEAprN8DANBgkqhkiG9w0BAQsFAAOCAQEAga1ADX9x
quvvEqTvJRFvIf4nCgGje0lNxb4towcjl5EVh291WGL3pGPnCGI9nsSfVzlDK8d4
t4X6xnS+p2yJbUzKhL2Vb+z4Saa3RQ60587o+nG3a3uOFp+jYL4O3xjdpyMnZxzM
uI2G2oQkvbi6b+KSqIONu+av2Y4UJ50gNZ6tax9Z76Fb5DDFb3r0MERRb5lvPtg3
NFOVsmBFErhHWeOw3xO29h+hhndyT6j+l3MThV7lEWJzLYODAaP+Db56U6okZ7ed
0k/Zq932pWVxzfuj/tnmTM83Oa8otUpHfDeWhxw2Mhkqm8Q2O98kF48+dwMGyEMb
viZJdWlP//7GZQ==
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:26:11 2025 by rpki-client