This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C61AE472D9AB11F0818E5C9FDAE4EC9C.roa
File: C61AE472D9AB11F0818E5C9FDAE4EC9C.roa (raw, json)
Hash identifier: froGONNO7uRwtsdiEOs4Hm/ugC3zxUdYdnYKNp1JBwo=
Subject key identifier: CC:E0:B9:8A:54:90:06:A7:1A:B9:70:CA:83:62:89:DB:70:1F:60:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AE2F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C61AE472D9AB11F0818E5C9FDAE4EC9C.roa
Signing time: Mon 15 Dec 2025 11:47:04 +0000
ROA not before: Mon 15 Dec 2025 11:46:59 +0000
ROA not after: Sat 17 Jan 2026 11:46:59 +0000
asID: 22773
IP address blocks: 154.85.4.0/22 maxlen: 24
154.85.121.0/24 maxlen: 24
154.85.122.0/24 maxlen: 24
154.94.32.0/24 maxlen: 24
154.94.36.0/23 maxlen: 24
154.94.44.0/24 maxlen: 24
154.94.47.0/24 maxlen: 24
154.94.51.0/24 maxlen: 24
154.94.52.0/23 maxlen: 24
154.94.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110127 (0x1ae2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 15 11:46:59 2025 GMT
Not After : Jan 17 11:46:59 2026 GMT
Subject: CN=693ff538-177d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c4:fd:1a:31:c7:87:8b:8d:58:b6:50:fb:a3:
b5:62:0f:5c:01:c9:e7:70:2e:4b:15:86:74:f5:25:
37:38:7c:9e:e8:a0:f6:f0:7f:a2:8e:9d:45:58:3d:
c9:2f:94:37:6a:fd:61:33:e6:5a:d7:3e:d6:7e:8b:
ed:76:f3:b9:e6:52:2f:e4:12:4e:98:50:ff:70:f2:
1b:56:94:b6:d5:59:fb:7a:83:35:23:c8:0a:69:b8:
ca:a2:83:fa:0b:da:9e:ce:1d:47:1e:e5:16:0a:28:
6f:fe:50:60:88:38:17:ec:5e:eb:26:a0:ac:b4:7a:
ef:5c:fc:b2:62:b5:d4:03:45:9b:1b:5b:66:80:27:
c1:46:94:32:c5:c3:7b:e0:d0:41:a0:06:a7:e8:ba:
00:ea:b9:b9:0b:0a:f9:0f:31:68:79:e6:5e:8e:03:
a1:1d:ba:a9:5d:94:46:d8:e6:f7:df:bd:ba:aa:51:
eb:b0:0e:53:0f:d4:2a:f4:2c:c8:ac:89:b4:50:c9:
a6:4a:66:87:18:6d:1d:d6:83:6a:cb:86:c2:40:49:
ce:ec:4c:53:fb:8f:5f:c1:17:44:7e:e9:45:b6:71:
02:de:bb:fb:c4:5c:46:c1:9d:39:8a:66:40:46:e6:
4c:91:7b:0b:9c:23:81:23:2b:21:7e:0a:c9:f0:60:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E0:B9:8A:54:90:06:A7:1A:B9:70:CA:83:62:89:DB:70:1F:60:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C61AE472D9AB11F0818E5C9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.4.0/22
154.85.121.0-154.85.122.255
154.94.32.0/24
154.94.36.0/23
154.94.44.0/24
154.94.47.0/24
154.94.51.0-154.94.53.255
154.94.56.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c7:40:01:74:95:39:3c:3e:18:4d:78:3b:71:31:1c:b2:94:
99:da:b9:c8:87:a2:9e:01:c5:97:53:e2:c9:58:1a:c3:56:1d:
54:e0:fe:26:d0:15:27:f4:55:6b:ed:b6:d1:e5:e9:86:1e:ba:
e0:a7:d7:27:c3:1c:4d:0b:82:db:a7:81:01:7b:a7:97:3c:35:
ca:f3:fd:0a:61:52:74:69:8c:71:95:6d:66:40:9f:24:d7:82:
28:3b:b9:c6:53:30:83:2c:bc:da:95:13:04:5e:4f:83:a1:e3:
64:23:32:ec:16:14:58:1b:5b:85:51:f2:00:2e:a6:54:f1:50:
d1:7c:75:89:b1:9c:b8:11:c8:d9:ad:08:b1:76:71:a9:7a:d0:
b0:6c:7e:68:f3:60:dc:23:2c:54:6b:aa:b4:0d:2d:b5:b1:ee:
a6:63:83:b0:ac:bd:dc:4b:c5:8f:b3:fd:a8:76:9d:ec:5f:ca:
31:30:a4:06:e3:fa:c5:39:d6:73:a3:a4:23:79:1f:d2:d1:7d:
7b:cb:27:34:f3:a4:bb:53:f4:94:59:dc:11:10:44:61:47:54:
81:34:26:ac:0e:f5:6e:a9:a6:85:c3:ed:dd:0f:83:ca:b2:3e:
1e:67:42:a5:67:41:40:dc:d3:79:e5:e7:73:86:e8:06:79:8c:
c2:35:da:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 22:02:41 2025 by rpki-client