This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/324D2EACDB3711F0AB6B87D3DAE4EC9C.roa
File: 324D2EACDB3711F0AB6B87D3DAE4EC9C.roa (raw, json)
Hash identifier: ie8c818cgFGRWM5+nD//dOQPhuIU6tXbuP7J6GKtsgs=
Subject key identifier: 72:81:C1:62:69:1E:23:1E:24:F8:ED:C4:BF:16:45:FE:F9:3E:40:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AEE2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/324D2EACDB3711F0AB6B87D3DAE4EC9C.roa
Signing time: Wed 17 Dec 2025 10:57:36 +0000
ROA not before: Wed 17 Dec 2025 10:57:32 +0000
ROA not after: Sat 24 Jan 2026 10:57:32 +0000
asID: 395886
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110306 (0x1aee2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 17 10:57:32 2025 GMT
Not After : Jan 24 10:57:32 2026 GMT
Subject: CN=69428ca0-785f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:ef:4c:be:79:ea:69:3c:75:f3:b8:fd:7e:
50:c2:5d:c3:54:2d:4a:a2:6f:d8:4c:92:a9:b5:d7:
72:dd:60:f0:f8:3d:42:b5:d8:89:88:a8:9d:af:77:
6d:a4:95:06:1d:b3:e3:49:ed:22:da:16:9c:f3:9a:
fa:99:a9:b2:3a:9b:ff:8f:41:ec:f7:15:69:ff:03:
0c:18:a5:65:85:ba:2f:51:18:93:bb:e5:55:ac:1d:
9e:ee:70:0e:4d:95:9d:73:fb:73:fc:39:7a:b1:dd:
fc:83:17:fb:37:a8:1f:06:12:07:f8:f7:cf:f4:8e:
09:0f:a0:ce:5b:84:d6:c5:9f:ef:cb:05:70:d7:ae:
e1:eb:d9:0e:25:df:2e:82:cb:cf:a4:15:b4:c2:08:
72:8e:21:8e:86:8e:bc:fe:eb:20:f5:99:c1:0d:7a:
ea:6e:30:58:8d:4c:12:0f:ac:57:0c:94:8d:bd:f5:
10:6d:92:75:97:15:ca:ed:c3:a2:f1:d0:f3:54:2e:
09:74:8f:73:07:fa:9b:a5:47:38:6f:b0:fb:c7:9d:
41:a4:58:36:0a:71:70:cb:ef:1f:10:ca:e5:fc:23:
09:1a:c4:f6:30:f6:b5:a1:1f:b6:e2:97:c7:17:3e:
36:e9:d2:31:98:76:be:c0:04:a5:03:f5:04:34:e3:
2e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:81:C1:62:69:1E:23:1E:24:F8:ED:C4:BF:16:45:FE:F9:3E:40:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/324D2EACDB3711F0AB6B87D3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
Signature Algorithm: sha256WithRSAEncryption
86:14:00:db:83:bb:eb:36:61:17:8c:d7:bc:ae:13:c1:af:bf:
18:1a:da:06:ec:17:3a:ac:af:ef:ef:08:80:e4:b4:44:f2:55:
f3:cb:3e:1c:33:73:46:ae:b0:f3:11:13:e4:1c:64:4f:1c:67:
2c:c9:c9:85:e5:ea:88:83:6b:81:86:fd:55:e4:56:e5:a0:db:
3b:c2:bc:6c:9d:65:35:8e:75:c9:64:b0:f8:09:f5:62:c8:53:
a8:a1:5d:aa:a9:6e:41:cd:29:bb:36:05:5f:6e:5e:8c:74:9b:
ee:86:37:db:fc:a4:cc:72:71:31:88:32:b7:c3:2c:2e:6a:ac:
7b:16:2e:7d:bd:1b:aa:eb:44:ab:32:69:c9:59:f7:4e:02:0f:
f6:f9:cf:a7:f0:48:40:78:8c:18:11:46:27:ed:41:5a:f9:c2:
a9:ab:8e:4c:99:83:3a:11:5a:4b:9e:ba:8b:14:79:e2:8b:f3:
20:7d:a8:0d:85:38:73:c0:e9:1a:ae:49:90:20:ab:5a:da:a0:
2b:45:0e:69:23:25:4f:9c:49:91:3c:45:54:5e:53:b0:c8:34:
88:b2:a1:d4:46:e8:0a:ad:c7:fb:25:0b:3f:0b:ce:ed:b7:ca:
78:78:fc:ed:66:0e:27:24:2b:9d:10:f2:27:31:9d:5c:94:22:
22:af:b3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:05 2025 by rpki-client