This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D978F1A4C47911F09C5A3695DAE4EC9C.roa
File: D978F1A4C47911F09C5A3695DAE4EC9C.roa (raw, json)
Hash identifier: VJ2UZ+2Kqoyu2FDahTulzlvl5E+rZ0eEB/kz3J9XcZc=
Subject key identifier: 88:F8:4A:B1:6F:25:67:BB:97:34:CB:40:FF:1A:E7:A2:34:07:28:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A9A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D978F1A4C47911F09C5A3695DAE4EC9C.roa
Signing time: Tue 18 Nov 2025 12:26:47 +0000
ROA not before: Tue 18 Nov 2025 12:26:42 +0000
ROA not after: Sun 28 Dec 2025 12:26:42 +0000
asID: 211826
IP address blocks: 154.194.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108968 (0x1a9a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 18 12:26:42 2025 GMT
Not After : Dec 28 12:26:42 2025 GMT
Subject: CN=691c6607-34ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:b0:7c:e0:cb:09:ca:b8:0e:5e:11:6b:01:
a6:85:f3:cb:5b:19:20:dc:04:6e:85:a4:9a:c6:96:
05:37:68:f2:a9:dc:f3:c3:5b:4a:27:2c:30:19:35:
42:ca:1a:68:a9:5b:09:d6:9b:20:f7:9d:11:42:3b:
aa:4e:8f:fb:6c:30:d6:94:ef:65:3b:06:7f:89:91:
61:76:0f:1a:55:1f:4c:be:18:4d:b7:c4:54:73:6c:
23:74:92:ad:01:bf:56:6e:5d:0a:d7:c2:e8:23:c0:
0f:d7:ec:01:2f:60:49:73:1d:38:25:7b:8f:fb:9d:
ee:20:98:79:b9:8f:4e:85:18:74:39:fe:69:4a:36:
c3:49:5f:bc:3a:b2:4b:be:9c:75:53:f3:ac:a6:83:
6c:5c:0e:db:6e:33:8d:67:5a:ce:18:7d:12:c5:20:
8f:31:2d:4f:e4:9b:99:e0:22:8e:16:17:79:c0:01:
96:9a:3f:ec:78:d1:b6:ec:af:9c:aa:23:08:f7:10:
a9:b6:4f:d2:8e:a3:88:33:40:42:fe:67:32:e8:36:
9a:2b:f5:62:b8:c8:3d:5a:16:76:8f:66:32:de:bf:
5a:45:bf:38:81:4e:9c:82:44:78:a2:d5:02:37:2e:
69:50:e9:84:71:16:5c:48:99:3a:3b:00:38:12:38:
56:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F8:4A:B1:6F:25:67:BB:97:34:CB:40:FF:1A:E7:A2:34:07:28:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D978F1A4C47911F09C5A3695DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.55.0/24
Signature Algorithm: sha256WithRSAEncryption
38:72:c5:d5:15:ea:c2:2b:dd:ca:6d:9d:1e:d3:72:a1:fe:da:
d9:ef:c6:44:41:fa:05:23:ed:3c:d5:10:a0:af:7a:f9:51:82:
13:0a:7f:fa:95:ef:67:52:b7:39:6d:c1:58:45:61:fc:38:72:
fa:74:83:44:2c:d9:ae:58:b9:7d:1c:dd:b5:c6:56:a2:2b:6a:
14:8c:c9:cb:4a:6f:c6:ca:bf:75:a1:9d:47:bd:8b:8b:44:04:
3c:96:55:98:b2:5c:f9:09:db:c0:38:0c:2e:a8:7a:43:fd:5b:
2f:e7:6a:fa:76:b5:2e:65:1a:91:4c:1b:de:ba:0a:4c:97:b4:
ce:cd:8e:33:be:1c:9e:a1:be:30:94:b2:42:4b:5f:b0:b7:fe:
91:57:f1:17:70:9d:98:05:24:2d:a3:c9:84:c7:a3:ed:3d:3c:
13:17:03:4a:23:c4:36:c3:04:3f:d2:41:6c:86:e3:58:e9:3e:
44:8b:24:e5:fe:72:08:e0:ff:3c:d8:27:66:eb:82:a1:ed:cf:
ea:45:60:17:a3:e5:61:b7:ec:ae:7d:b4:32:b0:58:b8:19:d4:
89:9d:e5:2b:fd:6a:35:73:d7:ff:b7:fb:19:08:50:14:d4:f2:
75:eb:14:93:67:b6:97:1d:c8:dc:59:7d:06:71:76:4e:5c:30:
15:9e:c2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:06:34 2025 by rpki-client