This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA1160F0B58D11F0A83562F5DAE4EC9C.roa
File: EA1160F0B58D11F0A83562F5DAE4EC9C.roa (raw, json)
Hash identifier: 9gT+jmATuILhGYgNVBeyPhPurHxeI2l/EX7FJKGko5M=
Subject key identifier: 33:72:2F:A1:95:01:49:A6:78:67:DF:CE:29:DA:F3:0C:8C:C3:7A:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01A6B1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA1160F0B58D11F0A83562F5DAE4EC9C.roa
Signing time: Thu 30 Oct 2025 12:42:37 +0000
ROA not before: Thu 30 Oct 2025 12:42:29 +0000
ROA not after: Fri 01 May 2026 12:42:29 +0000
asID: 328608
IP address blocks: 154.209.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108209 (0x1a6b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Oct 30 12:42:29 2025 GMT
Not After : May 1 12:42:29 2026 GMT
Subject: CN=69035d3d-edd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:98:14:66:25:21:e3:ec:bd:12:f5:b8:90:
5d:3a:d2:ee:f7:d3:dd:9e:eb:a5:b6:f9:07:3d:39:
25:cf:ef:61:40:ba:1f:66:46:8e:e7:46:90:55:84:
37:60:16:42:23:71:7b:b3:8a:2e:cb:51:6d:fa:24:
b5:c2:65:b1:a6:c6:4b:e0:1d:d7:f8:8b:2b:29:74:
0f:56:47:6c:39:3a:9a:6d:fa:d7:26:f5:21:21:a7:
c7:6b:dc:24:50:74:4d:d4:fa:55:15:70:09:5a:55:
77:97:bc:e7:0a:cf:78:c3:1c:a5:b1:72:79:e7:74:
56:09:cc:ed:7e:dc:98:90:42:57:c9:77:d2:1f:dc:
03:8f:d5:8b:99:c1:7b:ff:f1:64:eb:d8:7c:68:44:
b6:58:14:c0:16:09:8d:86:90:9e:04:04:ef:7f:b4:
da:16:8a:01:41:ae:e8:c3:e1:9a:90:fb:53:74:09:
51:53:86:8a:d9:48:23:47:11:2a:23:e1:b4:f9:d3:
47:fb:c1:e2:c8:14:69:7e:c5:59:bb:b9:64:16:b7:
df:ef:a5:25:ee:b7:ef:57:c8:6e:62:4b:17:33:a8:
47:be:4d:61:11:b2:9e:6f:d9:84:77:b5:8e:89:35:
26:e9:03:b5:d9:31:f3:5b:a0:01:b0:20:32:5c:bf:
fc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:72:2F:A1:95:01:49:A6:78:67:DF:CE:29:DA:F3:0C:8C:C3:7A:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA1160F0B58D11F0A83562F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.128.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:6f:70:7e:94:0f:fd:10:f3:33:47:5f:19:83:90:50:46:8f:
0d:a6:2f:eb:9f:49:05:d0:c5:2b:c7:57:2b:64:10:08:1c:43:
f9:14:a9:51:54:cd:08:f0:57:b3:0e:3a:9a:13:5f:2b:84:d6:
17:29:78:1e:dc:8a:37:f9:09:54:b3:04:e1:85:45:38:a7:3f:
9f:b7:3f:a9:37:b4:92:1b:aa:05:ad:c4:4f:5f:a3:61:be:9e:
61:9d:94:ef:2e:7f:c6:8e:36:99:c1:15:6c:f3:a5:4b:c5:32:
d1:62:ca:f8:77:0f:20:b9:03:b8:58:2f:1e:20:4b:aa:b8:74:
d0:39:7f:25:07:47:de:04:eb:7f:04:ac:36:dc:a0:49:36:78:
8a:2d:18:91:6a:ba:31:5e:cd:93:e0:14:9e:c2:45:19:c3:c0:
27:87:5d:49:49:20:62:fe:60:47:91:f1:ba:e0:d1:44:f6:3a:
16:ec:06:39:d3:f8:b8:ef:76:c1:08:91:c0:ac:5a:3b:1a:86:
0e:14:ea:26:5f:7d:74:e3:20:18:0a:f2:6d:6e:68:90:99:98:
45:4a:59:98:91:6e:f3:c1:06:de:87:63:bf:46:5e:f0:a9:24:
68:16:4f:2f:f2:88:10:a2:09:ad:6f:04:16:0f:c8:c7:17:d2:
04:c6:39:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:26:08 2025 by rpki-client