This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2097AD2DF0A11F0A28B64D4DAE4EC9C.roa
File: D2097AD2DF0A11F0A28B64D4DAE4EC9C.roa (raw, json)
Hash identifier: KIiXfKAla5Jnu/YCvEeiUEtAR39xKWpM+t51nCQmftQ=
Subject key identifier: ED:B1:1D:98:FC:92:E9:C4:04:B1:AE:B0:90:69:39:CC:FF:E1:E0:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AFC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2097AD2DF0A11F0A28B64D4DAE4EC9C.roa
Signing time: Mon 22 Dec 2025 07:50:02 +0000
ROA not before: Mon 22 Dec 2025 07:49:57 +0000
ROA not after: Mon 26 Jan 2026 07:49:57 +0000
asID: 150698
IP address blocks: 154.197.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Dec 2025 00:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110536 (0x1afc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 22 07:49:57 2025 GMT
Not After : Jan 26 07:49:57 2026 GMT
Subject: CN=6948f82a-a83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:7a:a7:05:38:47:a6:8d:fe:07:02:2e:51:
de:52:80:6c:d7:04:1d:77:b7:26:32:68:c8:c7:3e:
03:44:83:05:c6:35:a7:09:57:b6:6e:80:94:f1:ac:
c9:c4:54:d1:98:6d:d8:ec:2c:f4:66:3c:01:66:93:
16:39:20:cb:39:57:2c:12:31:06:45:93:a0:3e:d7:
f1:0e:ac:12:21:bb:0b:17:3a:d9:6c:21:84:24:79:
c2:00:a1:50:a3:cb:b5:2f:29:3c:a6:c2:25:3d:8d:
dc:3d:8d:1b:ab:d0:4a:01:1b:26:44:62:ed:6a:49:
26:3c:37:67:35:ce:40:70:16:7f:8d:c3:c9:d2:52:
32:e7:fc:47:d0:a5:64:e2:bc:75:f5:53:90:22:85:
4c:7b:72:29:5c:14:18:32:d6:f8:33:91:cf:39:12:
60:c0:75:5e:46:41:16:a8:1c:b3:29:8b:5f:a7:ad:
af:be:e4:8a:59:d5:aa:d8:a8:f3:36:2f:37:db:d4:
70:55:48:66:b0:9d:9e:42:21:22:10:31:04:18:a6:
42:3c:97:5f:e8:16:cb:3c:70:ef:bc:88:cc:8b:70:
38:26:42:a5:88:45:0a:00:18:56:3f:2c:d0:89:33:
9a:e1:b3:a0:44:38:59:8c:49:4f:88:ff:1b:0b:f9:
3c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B1:1D:98:FC:92:E9:C4:04:B1:AE:B0:90:69:39:CC:FF:E1:E0:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2097AD2DF0A11F0A28B64D4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.119.0/24
Signature Algorithm: sha256WithRSAEncryption
59:8d:e5:c4:71:d9:de:d3:d8:19:55:21:25:0e:1b:33:d2:cf:
2c:78:76:c9:fe:fd:a8:58:2a:a1:10:c9:16:10:c2:3a:e9:58:
1d:18:af:4f:1f:23:fc:6e:f8:76:60:30:08:95:58:60:23:70:
1d:e7:2e:cb:f7:98:3a:c2:62:5b:73:1e:30:29:a5:6a:21:ad:
1b:ba:8e:de:cb:0c:27:7b:a6:17:d9:14:8b:be:b1:34:78:a7:
8f:ee:32:66:2b:16:a3:02:6d:4f:6b:7f:46:c6:6d:cd:7c:b4:
f0:b3:4c:c8:65:ce:86:5a:a5:44:79:c1:4a:21:79:63:f2:d8:
c5:2f:c1:a1:33:3c:a6:94:07:c1:49:02:b3:14:c6:8b:b6:9c:
17:87:07:60:96:ca:cc:d8:ce:44:9e:80:ba:23:d4:76:a3:8d:
d5:b9:2c:25:66:db:64:3e:f0:dd:b2:5f:63:bf:11:dd:e2:06:
fa:ab:37:bf:35:b9:43:ba:e7:76:4f:d7:c9:50:48:c9:ae:78:
d7:85:dc:81:b0:ff:41:c4:5b:d2:d5:62:3c:8f:cb:38:05:53:
8a:46:93:fb:eb:a3:3a:c5:ac:39:08:45:45:4e:b4:d6:c5:0f:
56:0a:44:80:52:80:c3:b9:c3:59:f8:5a:50:2b:52:0b:4b:5e:
35:bc:31:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 23 09:37:59 2025 by rpki-client