This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65008AA2DA6911F09CADAFC9DAE4EC9C.roa
File: 65008AA2DA6911F09CADAFC9DAE4EC9C.roa (raw, json)
Hash identifier: gj2R30nlH6GTDzeXgja8J+AfOeJ9JPhK/WHz3uSV0v8=
Subject key identifier: 1C:FB:BF:8A:82:2A:82:E9:98:F6:4F:94:50:7D:7E:B9:23:03:07:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AE81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65008AA2DA6911F09CADAFC9DAE4EC9C.roa
Signing time: Tue 16 Dec 2025 10:24:25 +0000
ROA not before: Tue 16 Dec 2025 10:24:20 +0000
ROA not after: Fri 26 Dec 2025 10:24:20 +0000
asID: 138915
IP address blocks: 154.223.46.0/24 maxlen: 24
154.223.47.0/24 maxlen: 24
154.223.48.0/24 maxlen: 24
154.223.49.0/24 maxlen: 24
154.223.51.0/24 maxlen: 24
154.223.52.0/23 maxlen: 24
154.223.54.0/23 maxlen: 24
154.223.56.0/23 maxlen: 24
154.223.58.0/23 maxlen: 24
154.223.60.0/23 maxlen: 24
154.223.62.0/23 maxlen: 24
154.223.64.0/24 maxlen: 24
154.223.65.0/24 maxlen: 24
154.223.66.0/23 maxlen: 24
154.223.68.0/23 maxlen: 24
154.223.70.0/23 maxlen: 24
154.223.72.0/23 maxlen: 24
154.223.74.0/23 maxlen: 24
154.223.76.0/23 maxlen: 24
154.223.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110209 (0x1ae81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 10:24:20 2025 GMT
Not After : Dec 26 10:24:20 2025 GMT
Subject: CN=69413359-37fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8a:5b:8e:2e:e3:c3:b3:e4:fc:1d:2f:10:77:
1e:a9:b7:c4:2a:b4:97:a3:8d:bc:08:f2:4e:0d:e8:
7b:fe:14:63:c3:1b:3b:f3:a9:f4:78:47:31:80:72:
df:a6:bc:fa:a9:0b:9f:00:cb:da:bb:15:3a:9b:49:
97:24:98:56:bd:ae:01:88:66:ae:cb:70:0a:8d:90:
5c:76:a4:bd:65:f0:51:40:2e:9e:79:17:b3:95:68:
3d:f9:9b:b7:c4:a7:da:03:09:db:12:df:19:a4:02:
94:21:c4:2b:a0:f5:8c:4b:22:2c:61:75:54:de:cd:
0f:97:68:80:83:70:84:0e:24:d8:e7:f0:77:1b:0a:
86:0e:4b:a8:b1:9d:cd:4d:82:e5:01:25:d0:cc:cf:
3f:16:0c:7a:aa:df:4c:7a:22:0d:c5:fe:f0:a8:4a:
b1:f8:80:4b:a2:d1:25:d4:b4:c0:50:5e:c3:79:c4:
5d:d9:11:4a:95:b8:49:66:48:d6:ee:54:be:7b:30:
8b:be:2b:87:4d:15:ae:13:b4:08:09:dc:8d:35:11:
49:f8:25:f4:1d:17:e4:56:42:56:0e:c9:ce:29:65:
82:80:35:89:28:65:da:e9:a4:61:86:f3:6a:98:d2:
74:fa:61:d8:b8:db:bf:ca:f3:22:23:85:c2:1f:0f:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FB:BF:8A:82:2A:82:E9:98:F6:4F:94:50:7D:7E:B9:23:03:07:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65008AA2DA6911F09CADAFC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.46.0-154.223.49.255
154.223.51.0-154.223.79.255
Signature Algorithm: sha256WithRSAEncryption
72:f9:b4:4e:c8:42:79:eb:0a:8c:bd:70:44:80:66:18:ae:46:
30:13:3c:e7:74:40:be:76:96:be:30:f7:c9:12:ab:b8:06:64:
51:b3:00:c3:98:83:17:ad:3d:b3:1b:11:4d:23:b4:4b:c8:24:
bf:3a:38:71:70:33:36:db:19:0d:d0:06:31:be:1b:86:12:6c:
80:29:0e:68:43:eb:3d:a3:eb:7b:30:9e:d3:62:01:3f:f9:ad:
ad:c7:ff:ae:c9:ac:6a:91:6f:d2:ba:73:6c:39:75:9b:80:b8:
8e:ab:8e:e0:0b:69:e8:3e:62:18:d7:f1:c7:c9:45:23:71:c0:
a2:8d:a6:19:68:d1:a9:b7:c1:f2:37:34:61:e2:18:73:61:91:
7a:90:67:c8:dc:c8:0d:cb:41:dc:2d:62:8d:2b:ab:53:2c:49:
a8:29:d3:37:c7:2d:f0:b6:80:78:81:05:ac:1e:ec:0a:3a:e0:
a5:d5:73:96:f6:2f:ca:07:d1:57:24:63:12:80:2c:ab:14:e7:
d0:59:63:5e:07:48:38:c9:84:62:39:16:54:99:22:ee:e2:b2:
8a:a5:d5:60:52:49:25:00:e1:47:5d:63:fa:f5:45:c2:99:f2:
58:87:74:92:5c:e7:a2:14:ac:b9:41:bf:87:fb:59:39:e3:b9:
c2:a4:25:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Dec 19 20:25:01 2025 by rpki-client