This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCC687FEC6D111F0B5EF92CCDAE4EC9C.roa
File: DCC687FEC6D111F0B5EF92CCDAE4EC9C.roa (raw, json)
Hash identifier: ORAe/QHzKG3B1T3L/9tVhd4cI5tCG4k6RC6AyL4tJwQ=
Subject key identifier: AA:1B:07:71:DB:5C:0E:F0:57:5B:78:3D:BB:06:68:10:52:F7:03:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AA1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCC687FEC6D111F0B5EF92CCDAE4EC9C.roa
Signing time: Fri 21 Nov 2025 12:01:51 +0000
ROA not before: Fri 21 Nov 2025 12:01:45 +0000
ROA not after: Sat 27 Dec 2025 12:01:45 +0000
asID: 395793
IP address blocks: 154.83.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109086 (0x1aa1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 21 12:01:45 2025 GMT
Not After : Dec 27 12:01:45 2025 GMT
Subject: CN=692054ae-dd73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:67:a4:75:26:7a:d2:79:68:df:9c:67:59:86:
ef:4d:45:38:fe:0a:23:90:ac:27:50:29:68:bc:6b:
09:d9:b2:00:40:33:fd:db:f4:3e:2b:40:f2:8b:1b:
f8:05:28:25:fa:cb:2c:14:6f:7e:66:1d:35:f3:58:
65:77:b0:b4:94:48:f5:98:81:46:48:51:02:70:0f:
a7:7e:26:06:67:0f:c0:59:51:30:87:03:85:58:f7:
76:a9:54:5a:0c:89:9c:d7:29:9f:3a:5c:9a:25:6d:
af:69:5c:68:de:d6:5b:ec:6a:72:54:b5:a9:2f:f1:
65:9b:96:c2:dd:a7:e9:fd:45:22:4a:16:9a:fe:0b:
7f:5d:c0:90:1d:42:8a:1a:57:2a:ee:3b:a5:9e:8e:
56:ad:64:c3:83:4f:57:cf:d1:a3:35:06:44:49:51:
ec:2f:11:22:79:b7:e3:7d:74:33:da:fc:8a:2f:8f:
df:0e:f8:96:a4:2d:21:ec:0a:2f:e5:c7:52:88:34:
54:6d:ea:6f:9b:96:6d:fa:81:b3:3d:f0:7c:dd:c1:
0e:11:a1:e3:ed:69:99:d0:22:19:33:19:0a:2a:a9:
ae:b9:33:e2:84:b3:02:cc:55:18:81:af:87:ae:ae:
96:40:93:13:d5:b0:b2:57:55:e1:01:a2:9b:25:e5:
ab:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1B:07:71:DB:5C:0E:F0:57:5B:78:3D:BB:06:68:10:52:F7:03:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DCC687FEC6D111F0B5EF92CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.104.0/21
Signature Algorithm: sha256WithRSAEncryption
c5:17:48:a6:87:55:20:b3:8e:c0:db:87:a0:01:14:00:4f:1d:
36:68:41:6f:f0:a3:a4:21:54:fe:a4:59:66:f2:49:2d:cb:59:
b4:cb:b9:2e:b6:ef:9c:5b:70:27:a0:90:e0:c1:f8:29:94:59:
df:d6:d1:65:6e:61:13:e1:a7:49:2c:fa:ba:ae:19:4d:30:0d:
83:1e:71:bb:e6:b5:09:bb:50:60:98:d5:4e:04:1b:da:87:ec:
56:16:cc:b2:b7:7f:d1:bf:50:78:ca:d7:1e:de:6c:fa:97:67:
e9:21:9c:77:ac:dd:cf:cc:d5:0d:21:74:5e:64:b8:3c:a5:b2:
5e:a4:9b:c5:bf:2f:c8:e1:5a:50:01:13:6a:78:81:f7:4c:0d:
ca:d8:81:09:84:3b:d6:7a:ff:63:03:2e:e2:ae:94:03:98:69:
b3:9f:37:d8:af:cb:84:26:33:96:77:4e:ca:c1:a7:a1:eb:ac:
db:a0:31:9b:c8:d6:b8:3e:b5:ce:3b:29:c2:e4:40:40:3a:5a:
29:0a:db:c6:b8:4e:4a:f1:47:8f:16:a0:02:e3:3a:bf:b5:c8:
f9:65:f2:88:ed:94:25:c7:3a:33:78:b1:6b:4e:04:d7:95:9b:
7e:c6:70:32:d9:e0:4a:e0:0a:3c:1f:d1:f2:7e:5a:73:73:33:
d2:6b:3d:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAaoeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMTIxMTIwMTQ1WhcNMjUxMjI3MTIwMTQ1WjAYMRYw
FAYDVQQDEw02OTIwNTRhZS1kZDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8WekdSZ60nlo35xnWYbvTUU4/gojkKwnUClovGsJ2bIAQDP92/Q+K0Dy
ixv4BSgl+sssFG9+Zh0181hld7C0lEj1mIFGSFECcA+nfiYGZw/AWVEwhwOFWPd2
qVRaDImc1ymfOlyaJW2vaVxo3tZb7GpyVLWpL/Flm5bC3afp/UUiShaa/gt/XcCQ
HUKKGlcq7julno5WrWTDg09Xz9GjNQZESVHsLxEiebfjfXQz2vyKL4/fDviWpC0h
7Aov5cdSiDRUbepvm5Zt+oGzPfB83cEOEaHj7WmZ0CIZMxkKKqmuuTPihLMCzFUY
ga+Hrq6WQJMT1bCyV1XhAaKbJeWreQIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFKob
B3HbXA7wV1t4PbsGaBBS9wP0MB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9EQ0M2ODdGRUM2RDExMUYwQjVFRjkyQ0NEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmlNoMA0GCSqGSIb3DQEB
CwUAA4IBAQDFF0imh1Ugs47A24egARQATx02aEFv8KOkIVT+pFlm8kkty1m0y7ku
tu+cW3AnoJDgwfgplFnf1tFlbmET4adJLPq6rhlNMA2DHnG75rUJu1BgmNVOBBva
h+xWFsyyt3/Rv1B4ytce3mz6l2fpIZx3rN3PzNUNIXReZLg8pbJepJvFvy/I4VpQ
ARNqeIH3TA3K2IEJhDvWev9jAy7irpQDmGmznzfYr8uEJjOWd07Kwaeh66zboDGb
yNa4PrXOOynC5EBAOlopCtvGuE5K8UePFqAC4zq/tcj5ZfKI7ZQlxzozeLFrTgTX
lZt+xnAy2eBK4Ao8H9HyflpzczPSaz3z
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:25:20 2025 by rpki-client