This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5A2496CDB7711F0B2620EE0DAE4EC9C.roa
File: D5A2496CDB7711F0B2620EE0DAE4EC9C.roa (raw, json)
Hash identifier: HNNBm2JlxAIWCo0xEvqdOrKQ2E1MpeXWGxgpNcbf9zs=
Subject key identifier: 92:F0:57:C4:83:72:3F:67:FC:DB:1B:41:A9:0C:B6:45:32:7E:24:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AF2B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5A2496CDB7711F0B2620EE0DAE4EC9C.roa
Signing time: Wed 17 Dec 2025 18:40:18 +0000
ROA not before: Wed 17 Dec 2025 18:40:14 +0000
ROA not after: Sat 27 Dec 2025 18:40:14 +0000
asID: 140227
IP address blocks: 154.205.192.0/24 maxlen: 24
154.205.193.0/24 maxlen: 24
154.205.194.0/24 maxlen: 24
154.205.195.0/24 maxlen: 24
154.205.196.0/24 maxlen: 24
154.205.197.0/24 maxlen: 24
154.205.198.0/24 maxlen: 24
154.205.199.0/24 maxlen: 24
154.205.200.0/24 maxlen: 24
154.205.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110379 (0x1af2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 17 18:40:14 2025 GMT
Not After : Dec 27 18:40:14 2025 GMT
Subject: CN=6942f912-d56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:24:57:dd:68:4b:8f:c9:e0:56:54:e0:fa:70:
eb:60:35:ac:a7:65:0c:61:d8:d8:c9:95:e2:7a:18:
59:f0:6a:84:a0:3c:40:8a:74:1a:4e:d1:70:1d:72:
4f:1d:09:f7:ae:2f:f3:82:02:a5:ef:bb:a5:0d:f6:
56:1d:56:4a:f9:9e:bc:40:22:d2:40:a3:2d:b4:46:
45:29:59:c6:20:b6:79:ae:cd:28:c1:21:b0:a5:be:
0a:c1:ad:72:b8:f4:61:ce:69:a2:79:53:08:2a:3d:
92:3b:18:95:b9:08:af:00:49:4e:aa:5b:d3:44:7a:
1c:37:cb:16:8a:6b:5b:c5:26:94:51:59:d9:34:a0:
a7:fd:73:36:80:f3:d0:18:20:84:64:5e:0e:d9:5b:
ce:c4:17:7a:75:0a:2a:ec:a2:bb:14:ca:fe:d2:7f:
12:ce:f3:82:5a:16:1b:f6:56:54:e2:ac:70:ba:90:
1e:43:57:f2:c4:68:8f:7f:7c:3a:de:8f:3f:d7:c9:
4a:2f:58:69:ce:6b:0e:0f:a6:19:ff:4d:dd:b5:31:
77:00:ea:35:ca:07:18:c2:14:0c:57:86:7c:92:ec:
63:f1:2e:6e:ce:78:5f:d6:26:37:43:ad:b2:57:60:
f3:39:43:bf:63:99:cd:c6:f3:3b:e7:7b:ce:89:f8:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:F0:57:C4:83:72:3F:67:FC:DB:1B:41:A9:0C:B6:45:32:7E:24:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5A2496CDB7711F0B2620EE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.192.0-154.205.200.255
154.205.223.0/24
Signature Algorithm: sha256WithRSAEncryption
25:91:2f:57:e9:c0:fe:e0:9b:8a:d9:40:d3:b2:9b:e1:18:5c:
bb:01:0a:8a:12:22:af:a3:5f:f2:96:e2:06:7e:f3:27:c2:0c:
c0:dd:39:ec:53:27:e1:e0:61:1c:72:bd:e7:ed:ea:9a:be:af:
c2:f1:cf:86:5d:22:e8:dd:57:bf:25:41:1a:d3:ea:68:75:bf:
a8:ac:73:97:e8:40:03:2c:ea:68:d8:46:f4:22:6e:7a:b2:a4:
58:f5:d6:f9:04:5f:99:ad:80:3a:5b:0f:3b:d1:2c:39:e1:88:
54:ba:fb:de:20:34:ac:38:07:28:f8:f4:5e:be:54:af:3c:db:
b2:8d:6c:54:d4:98:68:91:69:6d:9e:b7:9d:12:7d:fa:08:9e:
80:de:aa:81:54:af:f1:8c:df:3c:d8:03:59:8f:e5:4e:55:1f:
0b:76:be:bc:4e:c2:3b:fe:a8:96:5c:14:a8:75:02:ce:40:a8:
ef:1b:2c:36:48:24:bd:69:eb:60:a8:39:4c:b0:57:58:be:d6:
d8:0c:66:80:41:04:c6:22:0f:dd:e6:5c:db:1c:8f:53:37:64:
6e:05:0d:16:68:3e:30:86:59:d5:60:b1:da:2d:2c:7b:b8:77:
a7:32:7b:e0:4a:90:7b:62:ff:e8:e0:21:72:4c:61:4d:80:eb:
56:96:30:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:24:54 2025 by rpki-client