This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFCAB76AD5C111F0962FF396DAE4EC9C.roa
File: CFCAB76AD5C111F0962FF396DAE4EC9C.roa (raw, json)
Hash identifier: n6bKjTNEdAItentKP+q2RIq2VJ294LtN2x61ygugWBY=
Subject key identifier: 63:3B:E7:B1:72:C4:9B:8F:85:9D:93:68:B7:31:85:C8:17:23:A7:9F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01ADBC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFCAB76AD5C111F0962FF396DAE4EC9C.roa
Signing time: Wed 10 Dec 2025 12:14:44 +0000
ROA not before: Wed 10 Dec 2025 12:14:39 +0000
ROA not after: Fri 19 Dec 2025 12:14:39 +0000
asID: 55320
IP address blocks: 154.205.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Dec 2025 00:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110012 (0x1adbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 10 12:14:39 2025 GMT
Not After : Dec 19 12:14:39 2025 GMT
Subject: CN=69396434-e5d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c6:de:17:8e:fc:90:96:3d:1c:6f:67:ee:cd:
f4:04:4c:b0:c6:b3:4c:2d:9a:18:51:47:60:04:63:
73:50:d5:db:a6:04:0f:41:9c:ea:de:7c:6c:8c:7a:
0e:fe:67:f3:a0:68:5f:68:1a:3f:69:b0:b5:39:b4:
2c:39:dc:c5:9c:d2:ec:6b:a9:da:63:03:1b:b4:5d:
4c:c5:7b:94:0a:a2:c5:77:71:32:93:d4:c4:a8:d1:
91:f8:a7:f5:ee:c1:b7:46:d6:92:d4:19:c8:fe:d8:
c3:ea:99:23:f8:73:52:ff:62:3b:4e:78:0f:6b:bb:
2f:dc:a0:24:09:f9:5a:0b:8e:24:54:3d:19:1e:c6:
62:b9:34:18:4d:02:aa:c7:5f:5a:72:86:b2:a6:4d:
e1:09:e9:4c:3d:9b:94:8f:47:6d:53:f3:49:92:70:
02:fe:6e:42:51:8d:fb:1c:b7:34:de:64:45:ab:a6:
de:12:03:ff:86:cf:08:62:65:4a:10:06:b3:c5:73:
ce:16:38:09:82:1c:11:0b:ab:a3:fc:7f:a3:53:79:
4a:26:b3:ce:aa:e3:00:71:40:8f:ab:00:78:34:ea:
5f:3b:a7:92:dd:d8:7f:a9:6d:bb:ed:68:c5:32:9a:
49:79:8f:03:23:41:56:93:10:4a:70:6e:ec:91:e9:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3B:E7:B1:72:C4:9B:8F:85:9D:93:68:B7:31:85:C8:17:23:A7:9F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFCAB76AD5C111F0962FF396DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.140.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:da:0a:36:55:e4:ae:93:46:28:0e:2b:bb:e2:dd:70:6a:a4:
b5:1b:a0:0c:d9:59:87:22:fc:0b:bb:b3:41:e0:9d:bd:08:2b:
a7:af:4e:7a:93:38:36:9e:d3:bc:41:3a:4f:65:b0:b7:8e:35:
5c:ab:9e:0a:86:61:b7:08:d8:79:52:43:3b:df:96:e3:f3:da:
dd:49:df:b5:80:73:3a:b4:8f:01:71:b0:e7:be:57:69:9b:20:
ed:82:a8:52:c0:16:dd:37:18:32:08:2c:c9:24:ac:05:5e:6a:
64:b3:42:8c:c6:e7:24:cc:4a:01:f1:56:2d:c3:8a:0b:a5:fc:
81:73:87:8f:3c:83:e1:20:55:5a:7e:12:0e:20:17:ea:cc:81:
a2:07:68:39:b3:66:9b:98:5e:d4:35:59:ea:25:03:14:8e:13:
25:00:e9:0e:96:de:91:34:48:4e:94:2c:13:32:9b:80:05:22:
fd:c7:92:af:e9:11:34:18:8c:08:07:88:e1:0c:ff:f4:ce:a4:
2e:50:cc:3d:c3:14:32:0b:13:91:79:88:de:48:ce:7d:a9:94:
71:33:40:60:f8:db:a7:74:db:9f:85:4b:ac:b4:5b:4b:b1:01:
84:77:42:5b:3d:d3:a8:57:b7:39:d8:76:0f:73:7a:50:63:13:
bf:84:85:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAa28MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjEwMTIxNDM5WhcNMjUxMjE5MTIxNDM5WjAYMRYw
FAYDVQQDEw02OTM5NjQzNC1lNWQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxMbeF478kJY9HG9n7s30BEywxrNMLZoYUUdgBGNzUNXbpgQPQZzq3nxs
jHoO/mfzoGhfaBo/abC1ObQsOdzFnNLsa6naYwMbtF1MxXuUCqLFd3Eyk9TEqNGR
+Kf17sG3RtaS1BnI/tjD6pkj+HNS/2I7TngPa7sv3KAkCflaC44kVD0ZHsZiuTQY
TQKqx19acoaypk3hCelMPZuUj0dtU/NJknAC/m5CUY37HLc03mRFq6beEgP/hs8I
YmVKEAazxXPOFjgJghwRC6uj/H+jU3lKJrPOquMAcUCPqwB4NOpfO6eS3dh/qW27
7WjFMppJeY8DI0FWkxBKcG7skekF9wIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFGM7
57FyxJuPhZ2TaLcxhcgXI6efMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9DRkNBQjc2QUQ1QzExMUYwOTYyRkYzOTZEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAms2MMA0GCSqGSIb3DQEB
CwUAA4IBAQDX2go2VeSuk0YoDiu74t1waqS1G6AM2VmHIvwLu7NB4J29CCunr056
kzg2ntO8QTpPZbC3jjVcq54KhmG3CNh5UkM735bj89rdSd+1gHM6tI8BcbDnvldp
myDtgqhSwBbdNxgyCCzJJKwFXmpks0KMxuckzEoB8VYtw4oLpfyBc4ePPIPhIFVa
fhIOIBfqzIGiB2g5s2abmF7UNVnqJQMUjhMlAOkOlt6RNEhOlCwTMpuABSL9x5Kv
6RE0GIwIB4jhDP/0zqQuUMw9wxQyCxOReYjeSM59qZRxM0Bg+NundNufhUustFtL
sQGEd0JbPdOoV7c52HYPc3pQYxO/hIX3
-----END CERTIFICATE-----
Generated at Fri Dec 12 13:00:48 2025 by rpki-client