This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3BBC890DB7311F086E810C7DAE4EC9C.roa
File: B3BBC890DB7311F086E810C7DAE4EC9C.roa (raw, json)
Hash identifier: 8mnNNmqeS6xjDoy9QnQU5ze8nvgAGCXAeZYJCmLnQjE=
Subject key identifier: D1:19:9D:11:22:D8:BD:29:75:1A:8B:0C:92:69:80:30:B8:2B:C9:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AF21
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3BBC890DB7311F086E810C7DAE4EC9C.roa
Signing time: Wed 17 Dec 2025 18:10:43 +0000
ROA not before: Wed 17 Dec 2025 18:10:38 +0000
ROA not after: Sat 27 Dec 2025 18:10:38 +0000
asID: 8796
IP address blocks: 154.205.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110369 (0x1af21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 17 18:10:38 2025 GMT
Not After : Dec 27 18:10:38 2025 GMT
Subject: CN=6942f223-71ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:04:d8:cb:5b:86:72:2b:72:00:6e:7d:7f:
32:d6:66:f9:0a:e2:10:a5:ed:ee:3d:23:32:8a:0a:
cf:03:b9:98:f4:0e:36:3b:2f:bd:12:8f:85:68:cf:
c3:08:9d:4e:2a:69:27:c1:05:46:6b:1e:b0:00:39:
1f:cc:32:89:69:7a:46:4c:44:1c:c4:4b:fe:42:fa:
cb:d4:7a:6f:5d:c8:46:e5:5b:59:c3:0b:bb:41:83:
da:2a:2b:bc:71:d6:6d:cc:ce:02:e4:7c:c8:86:d7:
64:14:ec:0d:ba:a9:6b:35:4a:59:2c:21:27:7a:4d:
29:73:b7:78:95:d3:2c:88:8b:88:8d:1d:3a:d2:8c:
b2:9b:41:a6:75:f2:72:11:49:52:f3:77:1f:82:bf:
c2:fd:5c:a6:bb:90:7d:b0:a3:8d:79:91:5f:7f:e3:
f1:91:6d:49:46:3d:0f:8d:b0:1f:a1:63:53:8d:98:
b0:a2:d2:0d:ed:d2:9a:c9:5b:66:06:c5:5e:10:37:
82:c0:0f:e1:92:fd:42:02:94:5d:d0:46:52:6a:56:
34:73:b0:0c:fe:31:c8:30:23:5c:7a:79:d8:b3:dd:
40:06:bd:e7:b7:d5:81:9a:cd:45:87:d1:eb:6e:1a:
20:76:e1:88:5c:20:82:01:a1:c0:e4:2d:b6:2f:54:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:19:9D:11:22:D8:BD:29:75:1A:8B:0C:92:69:80:30:B8:2B:C9:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3BBC890DB7311F086E810C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.192.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:84:6e:77:0a:d3:86:08:b5:9d:0d:90:9d:17:f9:02:db:e2:
41:72:fa:e3:0b:e4:8c:6a:f7:00:2f:58:bd:5d:e3:d0:11:48:
68:c5:89:b6:21:b8:4c:df:be:11:ee:2a:42:36:4f:7d:62:85:
f7:90:b8:80:53:14:ad:49:44:63:e4:81:3a:73:49:63:2d:68:
07:aa:31:64:85:16:bf:db:ed:01:b3:2d:9c:c1:51:7e:2f:e8:
30:97:b7:30:da:74:14:ef:ab:c8:fb:af:09:98:e6:e0:81:00:
24:21:dc:19:d6:4b:a4:45:88:f8:07:c4:39:39:e0:ce:ac:b5:
ba:bf:f1:b3:15:11:e7:98:e4:e1:73:8f:46:98:45:3b:f4:76:
be:30:f6:24:8b:a2:05:07:70:55:dc:e6:0c:b0:68:da:e5:60:
d4:7e:0f:c8:7f:1a:34:12:76:b3:85:0b:8a:53:4f:4a:6a:1b:
75:22:1f:18:ee:9c:72:9c:db:7c:7b:54:be:55:4f:f5:9f:aa:
a1:aa:cc:86:5d:7b:d1:a0:93:d3:f2:cd:31:9d:30:44:c1:8f:
81:47:df:50:ae:3c:e3:31:c3:cc:9d:0a:04:16:67:9d:1a:e1:
3b:c7:64:ba:1f:d6:1c:7d:0d:81:c0:6c:4b:d2:6b:48:9e:b9:
59:e9:b1:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:23:17 2025 by rpki-client