This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC19E81CB8A711F0AB4A4A79DAE4EC9C.roa
File: BC19E81CB8A711F0AB4A4A79DAE4EC9C.roa (raw, json)
Hash identifier: pffadsJeT34sXp6HdqaLlXqb4zYXMGc7oy3qHsttUk0=
Subject key identifier: A9:E4:64:ED:97:18:1B:C1:4D:99:CF:0D:58:A2:9A:B0:AE:4F:70:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A730
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC19E81CB8A711F0AB4A4A79DAE4EC9C.roa
Signing time: Mon 03 Nov 2025 11:25:01 +0000
ROA not before: Mon 03 Nov 2025 11:24:56 +0000
ROA not after: Wed 10 Dec 2025 11:24:56 +0000
asID: 401696
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108336 (0x1a730)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 3 11:24:56 2025 GMT
Not After : Dec 10 11:24:56 2025 GMT
Subject: CN=6908910d-b891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:b3:27:c0:b7:67:9c:81:dc:b9:02:19:b3:
c7:7a:57:40:87:dc:4e:00:e6:56:7c:94:64:a1:a1:
b6:e2:c8:6e:48:07:5d:41:78:3f:b0:36:06:e9:d3:
30:7c:35:91:6c:c7:70:d2:93:25:8c:6c:52:73:0e:
35:c2:e5:fd:87:eb:71:46:42:2d:00:d2:31:22:39:
2a:fc:05:ec:d3:0b:a7:d8:6f:ef:cb:99:bb:77:74:
ba:da:88:f4:c9:d1:31:fc:fb:4f:89:bb:f6:af:2b:
cd:f2:61:82:46:a0:84:2c:a6:cf:f1:63:87:cb:99:
c5:e7:d8:49:d7:31:df:e7:94:aa:9a:37:26:f8:4a:
34:7b:32:36:c0:1d:78:83:9c:1b:d0:bf:48:ca:1a:
3f:d8:dd:12:85:0f:5b:4a:fc:80:f2:c9:63:bd:6b:
af:e3:3f:c6:54:df:22:c4:1a:04:06:22:07:80:20:
3e:19:57:1b:85:04:f1:bf:0a:a0:3f:17:28:e2:20:
4c:43:a6:b0:54:ce:22:f4:2a:34:62:04:35:2b:b0:
69:f8:f4:60:c6:f1:af:ad:e0:bb:17:7a:5f:db:5c:
92:65:eb:16:e5:bb:d1:0f:91:20:ab:56:3e:74:05:
91:f3:ef:b0:d7:7e:e1:b7:b6:55:d2:18:cd:d1:30:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E4:64:ED:97:18:1B:C1:4D:99:CF:0D:58:A2:9A:B0:AE:4F:70:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BC19E81CB8A711F0AB4A4A79DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:db:3b:a2:60:94:d4:eb:ba:5d:ef:54:31:76:11:a6:16:e3:
59:c0:d6:2c:ce:15:f9:e8:f0:58:8a:84:2c:28:4e:9d:9d:b1:
b0:37:8a:3a:eb:48:ad:97:3c:d9:e7:36:b9:22:cf:b3:ca:53:
2e:1e:c6:e0:13:8d:20:4d:08:e1:1f:52:b3:5e:b3:c9:0d:27:
ed:3b:fb:10:9e:8e:05:bc:64:81:2d:0d:cb:ba:4d:74:cb:30:
57:36:2c:9f:17:12:9a:b7:9f:a5:ad:63:6b:ff:26:a3:6b:7d:
4a:1c:9b:34:db:26:e1:7b:c8:31:b3:7a:15:d6:a0:d8:fc:c5:
04:3b:24:ce:d3:e0:09:1f:f3:fa:73:0e:c1:7a:95:d8:7c:67:
41:5c:bb:82:56:a8:71:d9:d7:78:dd:f5:e9:0b:5f:2f:6f:75:
4b:4a:e5:7b:b7:20:fb:bd:68:ef:09:66:02:d3:33:88:e7:83:
79:1b:99:24:6a:f1:35:fc:5b:26:fe:ae:f3:8c:2f:20:b8:db:
ec:b4:e8:96:b5:3a:31:42:1e:3c:42:70:d3:81:71:bd:85:6f:
71:56:4e:d3:fe:71:c3:54:55:d6:39:c8:df:31:ab:c7:6a:f1:
8b:40:75:2f:cf:d0:31:0f:0d:67:66:c9:b5:d2:c5:5d:95:6c:
db:78:30:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:07:10 2025 by rpki-client