This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/574D58BEDA7C11F0A26E48BEDAE4EC9C.roa
File: 574D58BEDA7C11F0A26E48BEDAE4EC9C.roa (raw, json)
Hash identifier: l9ap9C6klcN6HrXbR5uqVEVXOzqxOmZFPdzsvqJvYUc=
Subject key identifier: CC:B4:55:69:AD:66:DD:50:E0:A9:2C:BB:DE:95:2F:6A:32:91:E0:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AEA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/574D58BEDA7C11F0A26E48BEDAE4EC9C.roa
Signing time: Tue 16 Dec 2025 12:40:03 +0000
ROA not before: Tue 16 Dec 2025 12:39:57 +0000
ROA not after: Sat 27 Dec 2025 12:39:57 +0000
asID: 54801
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110243 (0x1aea3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 12:39:57 2025 GMT
Not After : Dec 27 12:39:57 2025 GMT
Subject: CN=69415323-bb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e0:98:4a:80:22:8c:a6:db:3e:31:2b:1a:e9:
42:8e:ad:e7:ba:99:17:f1:52:13:0b:67:52:2d:8c:
df:56:f5:fa:15:54:c2:1b:14:cc:4b:4f:a6:67:65:
3d:c8:42:d6:14:cc:49:6d:a0:61:3d:36:18:74:66:
11:f2:1f:f9:6a:2f:94:eb:84:cb:f1:41:ac:85:0c:
b4:8e:86:74:fa:53:f7:81:f4:04:6c:5d:0d:fe:33:
12:bc:78:ff:f9:13:c2:a7:9b:81:be:29:60:73:03:
26:3f:92:48:40:e0:90:22:97:b2:be:c4:81:7c:82:
3f:b9:93:16:2a:42:12:59:5e:26:a4:8e:8d:e1:be:
3e:83:d4:f4:03:76:cb:ad:2e:11:cc:7f:7e:de:0f:
84:4c:96:e8:fb:23:54:1f:68:4b:83:5d:91:0c:92:
ca:3b:50:d6:75:43:0f:e4:df:9a:7c:a0:87:94:8f:
38:82:f2:3e:12:bc:c3:d7:96:b9:f3:3b:9d:e9:92:
00:f9:6b:d9:3c:8f:27:98:74:0f:a1:96:44:de:6f:
b2:e2:e1:34:eb:e0:f8:e1:fe:67:0f:92:80:0d:62:
87:43:43:62:7d:c7:15:ca:25:6f:0b:30:87:b1:ff:
2e:f0:c5:39:9c:06:86:79:78:3e:62:0f:20:03:aa:
38:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B4:55:69:AD:66:DD:50:E0:A9:2C:BB:DE:95:2F:6A:32:91:E0:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/574D58BEDA7C11F0A26E48BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:e7:b2:47:d5:e9:2e:80:b1:73:52:e2:fd:4e:43:05:b0:07:
1b:cc:49:90:35:06:0b:81:3f:fa:9c:a5:c6:5b:91:6b:b0:c3:
c6:63:a3:0f:db:d0:56:9e:89:ef:f6:df:fc:77:67:da:0b:6e:
bc:7e:8e:c1:d8:5a:26:29:d4:63:ab:e8:9b:d3:a4:53:36:cf:
12:65:cc:48:b6:44:56:53:6f:b6:9b:41:2a:97:84:36:f8:11:
cb:38:da:f1:e0:78:f9:82:22:06:55:69:62:ad:bd:d7:81:6b:
ee:43:7d:cc:50:1c:8f:d6:32:65:58:31:54:24:08:88:0b:dd:
64:b6:6c:4a:46:42:ec:63:3d:bd:ba:fd:1b:70:c0:eb:d8:ca:
b4:77:a0:23:30:0d:1b:42:2d:dd:13:00:e3:3b:d4:69:d5:b5:
a2:21:c3:30:b6:50:3a:f7:4d:4d:b6:71:ec:af:d2:65:d2:ac:
bd:ba:b9:99:23:d2:18:cd:c9:68:cd:d8:8d:74:0d:5a:85:c6:
f1:83:cb:3a:e4:0d:ef:66:20:c2:69:d3:01:4f:ab:1e:16:97:
09:fd:94:fa:2f:2a:6d:6a:a7:b3:93:e5:10:ac:c1:b7:8b:82:
01:1c:96:32:da:ef:eb:8e:79:c9:8d:cb:f8:f4:a6:f4:19:4b:
50:12:59:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:42 2025 by rpki-client