This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/158541E8DA7811F0A583FDA4DAE4EC9C.roa
File: 158541E8DA7811F0A583FDA4DAE4EC9C.roa (raw, json)
Hash identifier: xNe2Q0FhM2IBjABwWXoBb0j1eJYE3AzDVLLsuDK5rGU=
Subject key identifier: A2:FD:4D:5F:1D:BA:ED:B8:63:70:AF:0A:DA:6D:5A:DB:C8:FF:C0:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AE9F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/158541E8DA7811F0A583FDA4DAE4EC9C.roa
Signing time: Tue 16 Dec 2025 12:09:34 +0000
ROA not before: Tue 16 Dec 2025 12:09:29 +0000
ROA not after: Mon 05 Jan 2026 12:09:29 +0000
asID: 273937
IP address blocks: 154.88.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110239 (0x1ae9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 12:09:29 2025 GMT
Not After : Jan 5 12:09:29 2026 GMT
Subject: CN=69414bfe-3993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0f:12:62:65:e6:9a:eb:fa:14:80:ed:fd:98:
fb:4e:d7:3c:77:c4:24:85:d5:c3:52:e8:1f:88:62:
c2:aa:dd:c0:80:5c:f5:3b:0e:a5:fe:85:40:07:df:
86:78:df:7f:4c:b0:5f:0f:94:36:3e:e8:fd:1a:f0:
61:3a:0c:d7:c2:0c:65:09:d1:12:63:8f:58:cb:79:
c6:72:98:84:1b:cd:8a:02:09:6d:9c:aa:b4:26:27:
93:4e:29:a2:f5:bc:59:2a:8f:96:28:b1:93:03:d2:
a7:8e:75:19:cf:2c:38:f6:94:25:a6:a4:10:98:89:
72:e3:0e:0a:8a:6c:09:3b:c0:43:64:d7:55:51:d0:
68:65:6b:1d:96:5f:b5:a6:8c:09:ba:83:a4:fb:c5:
04:ab:95:66:c8:72:99:78:68:43:e7:d3:b9:01:58:
32:45:5b:ed:33:54:35:bd:e7:54:40:08:f7:85:41:
db:e5:6f:1c:ab:52:5e:fa:4e:86:b5:0f:b9:36:c7:
bd:98:fe:33:11:d4:c1:4c:42:ba:ad:d3:8d:b3:36:
da:16:7e:79:1d:31:bd:60:1d:92:53:ee:f2:b8:4e:
07:65:0e:92:1f:c4:d2:8e:f5:57:77:e6:92:ea:84:
7d:2b:df:1a:7e:6b:1e:99:62:34:5a:be:a8:3e:63:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FD:4D:5F:1D:BA:ED:B8:63:70:AF:0A:DA:6D:5A:DB:C8:FF:C0:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/158541E8DA7811F0A583FDA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.186.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:e4:45:b7:57:7f:6a:5b:8d:e7:0b:a9:07:e6:67:0a:95:b3:
49:e8:64:c7:72:28:80:d6:c7:35:f1:1e:8e:66:b3:42:07:21:
67:cf:26:1a:a6:10:42:8f:9a:08:5b:71:b7:59:4c:c9:82:37:
a5:d3:36:3f:20:0e:80:3d:c4:d1:61:5a:bc:74:c8:cc:a9:db:
51:bd:2f:61:f7:a1:40:89:54:81:7e:eb:97:f7:8c:db:0f:b9:
3e:ef:3a:bc:8a:be:96:74:c7:25:c8:9a:a2:0a:d3:8f:37:ce:
36:cc:e7:2b:3b:50:83:2a:f2:b9:a9:54:b2:27:6c:d7:e7:53:
01:1c:4d:60:77:ed:1a:3b:e3:64:43:32:9d:7d:be:99:a1:3d:
0f:5a:fb:97:23:73:42:dd:ff:c8:9b:89:42:f0:c3:b9:83:c8:
e1:69:16:b8:a0:5e:6b:20:3c:a2:21:20:61:d2:0f:01:71:13:
b9:3a:5e:8f:d2:ed:3d:2b:43:4f:54:4b:fc:5a:f1:f0:2a:85:
47:1a:3b:04:94:4e:93:7f:ef:fb:8c:43:2b:d5:b9:dc:3c:e8:
f8:49:b5:82:c1:d2:92:79:98:59:0d:98:3e:dd:54:6f:35:18:
48:e5:84:54:2a:05:53:c7:82:fc:78:08:b7:11:d2:67:48:b7:
6a:aa:8a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:25:02 2025 by rpki-client