This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA5DD180C6D311F09EC44FD9DAE4EC9C.roa
File: FA5DD180C6D311F09EC44FD9DAE4EC9C.roa (raw, json)
Hash identifier: AHH4NZc0v7JaAjyBNK9KPkaUL5GoN/C8xPJeFnvOF+A=
Subject key identifier: 39:1D:B7:7C:28:D9:E7:72:35:8A:25:7B:A3:02:05:88:55:64:3B:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AA28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA5DD180C6D311F09EC44FD9DAE4EC9C.roa
Signing time: Fri 21 Nov 2025 12:16:59 +0000
ROA not before: Fri 21 Nov 2025 12:16:53 +0000
ROA not after: Sat 27 Dec 2025 12:16:53 +0000
asID: 3257
IP address blocks: 154.206.240.0/21 maxlen: 24
154.206.248.0/21 maxlen: 24
154.208.64.0/21 maxlen: 24
154.208.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:06:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109096 (0x1aa28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Nov 21 12:16:53 2025 GMT
Not After : Dec 27 12:16:53 2025 GMT
Subject: CN=6920583b-f192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:46:ea:4c:fc:09:46:33:4c:71:20:2c:2f:e6:
86:bb:a1:60:cc:e8:5e:d7:2e:b7:47:a7:1c:53:d7:
e8:e5:20:a8:2b:69:6f:74:f9:2a:c9:b8:cc:a5:78:
7c:13:17:e4:2f:21:e3:b8:64:c0:a8:02:b3:11:89:
fd:66:64:5d:71:e0:84:8d:97:db:1d:5d:ef:b0:81:
b5:e6:cb:0f:fe:bf:d9:8b:6c:f4:c3:c7:f7:18:0d:
b8:88:8f:99:42:c5:ea:42:38:cc:63:a2:63:8a:c4:
42:d9:f8:f3:be:a4:bb:12:b1:24:14:99:7e:9b:40:
c8:ad:f6:5d:8d:8d:72:c3:e2:68:40:ba:ea:14:0d:
43:bf:46:63:85:04:94:01:cb:3e:27:a9:cd:b7:c7:
d9:b4:21:bc:10:f9:25:7b:f8:2d:51:5e:50:da:9f:
96:14:ee:a4:09:1c:a9:c1:28:8a:d7:de:10:f8:37:
80:50:ef:cf:82:24:f9:66:f9:88:58:50:5a:23:fd:
a3:2c:19:22:d8:74:34:26:65:94:dd:1a:48:29:e5:
2a:74:8c:76:07:9e:58:7d:43:31:b2:34:99:a5:72:
ff:f3:20:56:1f:16:25:d2:f2:95:49:b1:e6:6f:81:
c6:a4:c1:86:f3:03:6e:f8:4e:46:cb:7f:a5:40:89:
9b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1D:B7:7C:28:D9:E7:72:35:8A:25:7B:A3:02:05:88:55:64:3B:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA5DD180C6D311F09EC44FD9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.240.0/20
154.208.64.0/21
154.208.112.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:d7:2c:72:1c:3c:b7:8a:26:3d:d7:4b:84:2d:f7:84:ab:83:
a9:f9:ea:99:d3:53:aa:c7:8d:f6:50:de:a3:47:f1:9b:c1:1b:
48:37:41:96:c3:a2:66:ab:c1:7f:dc:ef:d3:6b:16:8c:80:f4:
77:00:67:f4:75:ef:e5:1e:03:3d:d7:0f:75:5f:2c:73:39:f4:
30:fe:f8:d3:cb:db:bb:e2:60:50:78:58:17:16:9b:2e:6e:c5:
c6:a3:ee:f2:3d:fe:6b:d5:07:89:24:64:9f:bf:33:0f:9c:17:
01:ae:6a:95:0e:23:49:38:4d:a8:1f:da:83:55:13:a8:72:04:
33:60:a1:c3:95:8c:77:93:88:4c:3b:15:ec:96:af:c6:50:41:
9e:d4:11:72:57:2d:e1:11:73:50:68:b6:18:ae:ed:28:a3:7d:
48:c9:48:f0:d9:00:ff:bc:4d:bb:a2:63:f7:04:23:81:dc:d8:
7b:5b:44:50:6d:40:6b:c8:ae:d6:e3:1b:84:89:0e:3a:60:a5:
2d:3d:cc:a5:0e:16:d4:94:81:85:d9:c2:59:96:8d:0c:42:3a:
2f:cc:05:4b:d5:45:bc:05:b8:f1:c4:7f:a9:c4:13:b7:29:d6:
ae:eb:9f:63:16:e4:6a:40:e9:f1:ea:8a:d0:13:e2:56:0a:8e:
66:9b:9b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 11:06:34 2025 by rpki-client