This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/399B0940DB3211F08C5639B6DAE4EC9C.roa
File: 399B0940DB3211F08C5639B6DAE4EC9C.roa (raw, json)
Hash identifier: 4vIJZsT6BZ/K+L/uBEtPL9nSigebfJTaPwmyh9oMn9o=
Subject key identifier: 21:B3:30:39:F2:85:96:C0:F9:11:12:73:3F:5A:80:D5:74:1A:A0:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AED6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/399B0940DB3211F08C5639B6DAE4EC9C.roa
Signing time: Wed 17 Dec 2025 10:22:01 +0000
ROA not before: Wed 17 Dec 2025 10:21:57 +0000
ROA not after: Sat 24 Jan 2026 10:21:57 +0000
asID: 61414
IP address blocks: 154.217.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110294 (0x1aed6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 17 10:21:57 2025 GMT
Not After : Jan 24 10:21:57 2026 GMT
Subject: CN=69428449-2c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2e:c1:72:a4:2d:51:d3:bc:4c:fb:c6:6f:38:
e8:48:54:b3:77:83:ae:42:6c:92:fd:6e:b4:2f:43:
f8:af:10:27:4a:82:a1:ad:32:7e:03:e5:ab:4a:fb:
70:5c:07:06:eb:31:52:e2:7b:1a:1d:63:27:d5:60:
0a:02:d6:6f:c4:5f:48:00:1c:3c:66:f9:21:6d:6f:
d0:29:2f:05:8f:ad:70:17:d9:00:4f:c9:d1:6b:7a:
3a:2b:62:61:6a:33:e1:52:87:a7:97:a6:69:71:10:
04:ac:8b:10:83:cd:5f:1c:87:6d:62:d8:41:35:1a:
47:ca:3a:7b:be:8a:6a:52:d7:d5:ef:0a:78:98:51:
68:d9:91:44:4e:26:05:bf:cc:d5:14:57:95:07:54:
56:4f:6a:5a:cd:a6:be:f1:c7:3f:62:b3:f0:04:72:
7e:6e:d8:9d:ae:38:86:3e:96:d0:23:6a:21:5c:f2:
b4:81:35:d1:a9:d5:33:32:10:60:7f:8f:78:ae:7a:
a1:e4:e9:b8:7a:e7:f9:52:06:b8:ba:2b:96:91:0f:
13:d4:4e:2e:24:9f:2b:96:58:89:22:8e:2c:94:92:
bc:91:25:2f:94:ca:c7:5a:e9:eb:f2:c2:a2:6a:30:
8e:69:22:0e:98:de:6a:31:78:6d:e3:5f:98:f4:10:
72:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B3:30:39:F2:85:96:C0:F9:11:12:73:3F:5A:80:D5:74:1A:A0:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/399B0940DB3211F08C5639B6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.248.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:bc:7d:76:a3:98:f1:83:5e:30:a2:89:cf:f4:eb:31:1c:c3:
fb:33:1e:c8:23:67:00:48:1b:0f:59:46:be:11:78:74:87:e8:
aa:e1:27:94:59:2d:41:0b:9a:a7:03:f4:c6:4a:87:ac:57:f5:
5b:c7:b8:bf:88:73:78:ad:20:ea:42:75:a2:fb:3e:38:47:16:
72:89:3a:25:92:41:86:95:5e:77:26:8f:66:c6:6d:bd:da:0b:
51:d9:d6:50:6c:a2:7d:34:51:98:c8:89:e6:1a:83:e2:ba:0f:
6d:e5:9e:14:7d:d0:47:3d:15:bc:26:3a:95:c6:f4:bd:ea:e2:
59:48:cb:97:fd:58:55:f1:07:92:09:13:6b:e7:df:f1:6d:0a:
90:a8:1e:7c:c6:5f:7e:27:79:76:54:f6:9b:39:82:c2:b0:5b:
2f:38:56:10:4c:53:d0:ee:8e:0a:69:96:ec:6d:b6:cd:8e:1d:
74:84:fd:e1:9c:dd:66:9d:2f:a4:26:63:d7:95:0c:90:71:9c:
a0:d2:b0:5a:d3:01:92:f1:57:11:1f:de:2a:06:ba:91:6f:83:
dd:9f:a4:4d:b9:ed:9d:1c:03:b6:5c:66:13:15:57:c8:af:9c:
fb:9e:89:35:46:aa:84:b8:e2:0f:6c:e5:41:da:0a:94:57:57:
da:68:9f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:24:59 2025 by rpki-client