This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECC29630D5BC11F0A1CC6DF6DAE4EC9C.roa
File: ECC29630D5BC11F0A1CC6DF6DAE4EC9C.roa (raw, json)
Hash identifier: szhvca4D0I4ZShEnKCXHQgCsVhKUg/88p+KI/WEdsmo=
Subject key identifier: D7:89:BB:87:4E:4E:48:D8:E1:E3:AD:32:A0:05:1B:0C:03:E1:66:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01ADB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECC29630D5BC11F0A1CC6DF6DAE4EC9C.roa
Signing time: Wed 10 Dec 2025 11:39:45 +0000
ROA not before: Wed 10 Dec 2025 11:39:40 +0000
ROA not after: Fri 19 Dec 2025 11:39:40 +0000
asID: 63139
IP address blocks: 154.203.161.0/24 maxlen: 24
154.203.171.0/24 maxlen: 24
154.203.173.0/24 maxlen: 24
154.203.174.0/24 maxlen: 24
154.203.175.0/24 maxlen: 24
154.203.176.0/24 maxlen: 24
154.203.177.0/24 maxlen: 24
154.203.178.0/24 maxlen: 24
154.203.180.0/24 maxlen: 24
154.203.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Dec 2025 00:06:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110002 (0x1adb2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 10 11:39:40 2025 GMT
Not After : Dec 19 11:39:40 2025 GMT
Subject: CN=69395c01-60b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d8:b5:22:5d:52:cf:30:49:e5:9b:d4:a5:70:
8c:04:6d:c5:e2:87:56:b4:38:59:42:bc:b0:ca:8a:
76:22:53:a2:1f:b5:35:03:a2:61:5b:11:ac:16:38:
a1:fd:da:6c:d0:7d:48:df:89:6d:bd:1e:57:40:0c:
97:62:c9:36:8d:af:ee:1e:be:d6:e9:4a:ce:88:79:
04:27:76:8c:22:51:62:56:ef:b1:fc:0c:88:10:30:
2d:b5:52:86:d2:a4:05:2d:6c:a0:41:da:50:b3:87:
90:18:30:9a:40:66:b9:84:5b:88:c3:14:03:f9:5d:
54:df:77:79:43:2d:68:a5:b5:3f:5f:9c:3e:a3:7c:
89:5b:3d:e2:39:c3:9a:58:69:4e:00:26:60:1d:0c:
ef:02:f7:c4:5c:46:8d:a3:e4:38:3a:01:ba:96:bc:
78:c8:11:21:89:ee:48:eb:31:61:d7:85:30:18:94:
47:22:9b:5d:ed:65:35:4c:28:3f:4b:32:ec:04:9c:
22:f5:3a:41:d6:54:e8:37:e3:14:6c:5e:24:34:39:
a9:23:55:e2:40:2b:64:01:44:74:8f:7d:ad:27:7d:
20:c7:3c:cb:32:5a:eb:06:bc:3e:d4:72:ba:b4:53:
c8:f3:99:6f:e7:20:9d:10:97:fb:78:d3:77:5a:03:
d1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:89:BB:87:4E:4E:48:D8:E1:E3:AD:32:A0:05:1B:0C:03:E1:66:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ECC29630D5BC11F0A1CC6DF6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.161.0/24
154.203.171.0/24
154.203.173.0-154.203.178.255
154.203.180.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:d1:37:1e:c1:b4:e7:7b:3b:de:6b:8f:aa:5c:68:f5:e6:b6:
bf:d3:91:0d:d2:85:2c:6b:42:3f:9a:f4:76:af:2d:64:e7:4c:
9d:43:45:7a:7f:9d:2f:99:ad:56:f7:3e:6f:4a:88:d1:5b:34:
c2:66:07:d5:2a:6b:e9:8f:2b:59:3c:ba:c6:4a:3e:f7:07:80:
4f:b5:4f:b8:6c:27:28:8b:2c:73:29:8c:f5:98:07:fc:36:0e:
53:87:a6:0f:17:67:80:33:06:36:07:3a:01:60:cc:ee:a0:a8:
26:28:ef:0e:00:d8:fc:b6:b7:dd:d6:e9:31:54:62:50:f6:8f:
30:84:06:8b:2b:38:90:45:f5:87:4c:04:ae:01:df:1d:7e:d2:
51:0f:21:2b:15:3a:0f:b5:52:84:08:1e:9f:51:f2:c3:03:c6:
f1:6e:6f:ff:78:48:ac:33:03:e4:2d:55:54:03:8d:b3:a5:0b:
65:3d:a6:83:e8:dc:be:6c:e5:fe:4a:93:e0:5a:cb:c4:9c:db:
3d:d1:57:28:2c:bc:a5:ac:04:95:d0:ba:26:3f:ac:56:1b:fb:
c9:df:bf:c7:a7:6e:07:70:75:52:96:43:90:98:dd:ff:0c:68:
87:22:65:67:83:87:63:5d:09:81:6d:7d:3b:0e:48:0a:b8:a4:
dd:68:9f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 12 13:00:47 2025 by rpki-client