This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB4AD432DA5D11F0B9B52781DAE4EC9C.roa
File: BB4AD432DA5D11F0B9B52781DAE4EC9C.roa (raw, json)
Hash identifier: 4OnIuczQV53IwG1L4UAavw1ZdFgOnVm33s+SdXlHGMM=
Subject key identifier: B7:99:D1:36:C7:1B:C8:B9:AC:25:9C:E7:1E:06:C5:62:4D:69:64:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AE66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB4AD432DA5D11F0B9B52781DAE4EC9C.roa
Signing time: Tue 16 Dec 2025 09:00:56 +0000
ROA not before: Tue 16 Dec 2025 09:00:50 +0000
ROA not after: Fri 26 Dec 2025 09:00:50 +0000
asID: 138915
IP address blocks: 154.203.133.0/24 maxlen: 24
154.203.142.0/24 maxlen: 24
154.203.144.0/23 maxlen: 24
154.203.149.0/24 maxlen: 24
154.203.150.0/24 maxlen: 24
154.203.151.0/24 maxlen: 24
154.203.152.0/24 maxlen: 24
154.203.153.0/24 maxlen: 24
154.203.154.0/23 maxlen: 24
154.203.156.0/24 maxlen: 24
154.203.157.0/24 maxlen: 24
154.203.158.0/24 maxlen: 24
154.203.159.0/24 maxlen: 24
154.203.163.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.165.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.203.178.0/24 maxlen: 24
154.203.181.0/24 maxlen: 24
154.203.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110182 (0x1ae66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 09:00:50 2025 GMT
Not After : Dec 26 09:00:50 2025 GMT
Subject: CN=69411fc8-36d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:64:b7:cf:2e:cb:02:46:3a:01:5b:4d:49:56:
9c:55:b9:40:a3:12:e7:3a:ae:5d:f6:4f:49:18:1f:
d2:ba:3d:ae:bf:2c:87:b1:63:b8:c1:6a:7a:a0:6d:
e2:19:1a:82:03:04:f6:d8:02:c3:1f:85:88:ff:77:
f3:48:94:35:33:3f:dd:13:48:16:60:f6:a3:1a:ad:
fe:3e:28:30:e0:03:92:19:81:0c:49:2d:14:d3:f9:
e4:bf:1a:4d:6e:c4:c4:7a:07:4a:32:0a:98:b7:44:
a1:bd:7a:c6:7e:f8:06:ec:a6:bc:7e:58:df:04:ca:
49:e1:0c:bd:e1:02:a2:92:bb:09:82:34:3f:44:8a:
f9:1f:fd:51:98:83:c0:18:39:f5:5d:b7:c6:60:6f:
c5:e5:94:17:31:3d:58:23:ec:c8:25:45:df:84:ed:
06:eb:f6:08:11:01:02:1f:34:ab:96:65:3d:eb:f0:
b5:43:7e:54:ac:72:fb:3c:ee:9a:ea:c2:34:da:43:
9e:5c:63:a9:2e:ab:8a:e3:18:14:e4:38:b2:cd:1c:
56:98:a4:64:08:d8:c0:9e:6f:3c:a2:89:2d:b7:2f:
c5:fb:80:ba:2b:52:ae:ee:64:fa:40:17:11:d5:3b:
2c:09:b5:10:b5:39:7e:32:08:98:9f:90:a2:b4:d4:
16:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:99:D1:36:C7:1B:C8:B9:AC:25:9C:E7:1E:06:C5:62:4D:69:64:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/BB4AD432DA5D11F0B9B52781DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.133.0/24
154.203.142.0/24
154.203.144.0/23
154.203.149.0-154.203.159.255
154.203.163.0-154.203.166.255
154.203.178.0/24
154.203.181.0/24
154.203.191.0/24
Signature Algorithm: sha256WithRSAEncryption
26:90:69:b2:22:1c:d9:17:52:56:d3:cf:58:a7:63:01:d5:48:
8a:42:2e:06:30:6f:9e:f3:4a:4f:7d:00:8d:19:c1:84:a1:d1:
6b:3e:a2:54:e5:06:5e:72:8a:4d:9c:cf:1a:1e:80:22:f7:aa:
d3:c7:8e:cd:8a:f1:fc:57:d3:82:f5:01:9d:c6:ff:c0:9b:ee:
df:15:70:31:60:09:56:7c:78:0c:3e:e9:92:6b:ee:09:77:ed:
f4:7a:cb:9b:cd:06:65:3b:04:13:e3:4a:af:13:09:ca:55:1e:
a0:32:54:c1:22:0d:d7:a7:b9:e7:25:32:04:1d:e1:36:23:8f:
e6:35:1c:6d:b2:d2:e8:9d:1d:89:4b:0b:4f:82:53:2f:8f:a4:
8c:ce:54:fd:ac:de:03:34:85:e5:1a:19:8b:22:00:ab:05:a6:
0c:e9:51:ef:70:4c:80:11:b2:fa:87:68:4f:4e:46:16:a8:83:
04:5d:67:61:e3:b4:64:6c:24:96:0d:bc:63:40:71:12:22:0d:
1c:96:7e:4a:38:34:c2:3f:52:e4:e1:2d:f2:67:7a:dc:d5:26:
70:e9:ef:eb:58:da:bc:20:0d:4f:0b:94:c9:6c:9c:64:53:5b:
b9:d1:62:94:9c:b5:01:af:f9:79:81:00:f3:21:c9:74:c0:37:
26:b3:b4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:03:14 2025 by rpki-client