This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C86E3824E05811F0A06682F3DAE4EC9C.roa
File: C86E3824E05811F0A06682F3DAE4EC9C.roa (raw, json)
Hash identifier: BSweyrD7TKQWqHjoWilEf1NNjMY8lbjW4SxmjF5qyVE=
Subject key identifier: 93:AC:68:5D:E1:6D:DB:03:31:37:F5:41:FC:ED:BE:07:B8:03:1C:26
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B095
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C86E3824E05811F0A06682F3DAE4EC9C.roa
Signing time: Tue 23 Dec 2025 23:40:38 +0000
ROA not before: Tue 23 Dec 2025 23:40:33 +0000
ROA not after: Tue 27 Jan 2026 23:40:33 +0000
asID: 395793
IP address blocks: 154.81.50.0/24 maxlen: 24
154.82.162.0/23 maxlen: 24
154.82.164.0/22 maxlen: 24
154.83.8.0/24 maxlen: 24
154.83.9.0/24 maxlen: 24
154.83.10.0/24 maxlen: 24
154.83.11.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
154.83.104.0/21 maxlen: 24
154.91.152.0/24 maxlen: 24
154.91.153.0/24 maxlen: 24
154.91.154.0/24 maxlen: 24
154.91.155.0/24 maxlen: 24
154.91.156.0/24 maxlen: 24
154.93.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Dec 2025 18:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110741 (0x1b095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 23 23:40:33 2025 GMT
Not After : Jan 27 23:40:33 2026 GMT
Subject: CN=694b2875-7354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:d2:af:25:83:3c:68:23:5e:b5:1e:48:9d:
49:8d:5f:1b:53:84:fb:e7:47:4d:db:f3:c7:0e:b4:
a5:fe:33:82:39:db:6d:14:e8:57:71:0d:96:e1:4f:
d4:03:bd:81:06:d0:65:2e:32:e8:83:60:81:82:09:
7f:d3:df:d7:25:0a:29:c2:f0:9c:fc:37:39:c7:0d:
19:ee:c3:b4:9c:99:5a:5f:ea:c3:e2:e3:80:2e:3e:
b3:41:79:ab:91:16:ee:38:7e:2c:b7:34:3d:33:78:
5a:82:53:dd:a3:20:53:b3:f5:60:14:8b:5e:e2:e1:
61:c6:ce:64:89:6b:29:4a:75:5d:fb:0f:5f:42:37:
1d:38:7b:b4:fc:57:69:02:fa:a6:ad:e2:b1:9c:6e:
60:53:55:bc:be:6a:57:45:9c:79:d9:a7:4f:78:40:
b2:41:0b:f8:79:23:e9:48:62:f6:35:61:d9:c2:89:
00:05:d1:c1:07:b7:a7:d8:86:fc:59:6d:c8:fd:4b:
46:67:fd:e8:a9:73:ff:66:f5:73:a0:9c:ef:0e:2d:
4e:85:cf:93:08:b1:b6:ee:8f:b9:e7:9f:59:fd:f0:
6c:11:12:fd:f0:68:42:29:70:27:81:09:7e:97:ab:
60:6d:84:13:b1:33:11:e1:09:b7:34:a4:27:87:90:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AC:68:5D:E1:6D:DB:03:31:37:F5:41:FC:ED:BE:07:B8:03:1C:26
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C86E3824E05811F0A06682F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
154.82.162.0-154.82.167.255
154.83.8.0/22
154.83.24.0/24
154.83.104.0/21
154.91.152.0-154.91.156.255
154.93.0.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:72:46:26:86:0a:3f:cc:2d:4a:c7:8c:ef:b3:eb:11:9f:c5:
e9:5d:78:bc:1d:87:56:2c:9b:72:ea:0d:65:7d:51:2b:cc:36:
98:8c:ad:33:0c:3a:30:cc:bc:a9:87:79:e9:82:25:83:be:e9:
18:5a:19:50:41:f2:98:ac:1c:1d:36:42:02:f8:36:42:37:94:
5b:09:73:29:a3:0f:ae:9f:34:44:8b:4c:d3:36:13:d1:77:f2:
75:17:40:a2:bb:70:6b:5e:94:35:31:25:f5:10:b4:74:0a:08:
6a:71:36:b3:5e:d8:54:fe:0a:9e:0e:ee:ac:1f:0b:fa:48:6c:
11:e9:0a:12:97:ab:cf:0c:b0:f9:b5:bc:74:fe:1d:04:6d:5e:
4c:5f:80:6b:8b:3b:94:f5:a0:75:07:e4:c6:06:8d:d1:87:4d:
61:3f:db:8d:71:86:02:c4:f9:a7:e7:8e:32:50:be:f0:a2:69:
bd:56:78:a9:fa:ac:3a:d1:89:03:58:d3:40:94:6a:86:b2:97:
c9:3e:04:47:86:99:59:d6:61:b0:bb:a0:39:24:f9:8b:25:93:
a3:32:c9:6b:a0:1c:1c:fc:43:04:0e:12:36:67:6a:64:ad:32:
d5:e2:b2:cd:7a:44:9b:a2:4b:ba:a9:3f:ce:c3:d4:35:78:34:
ac:b3:3d:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 23:25:37 2025 by rpki-client