This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D68A52BCDA6311F08D59EEA7DAE4EC9C.roa
File: D68A52BCDA6311F08D59EEA7DAE4EC9C.roa (raw, json)
Hash identifier: aiF9Mf0LaZlZuciC0pSbVKZYnPyXLvSodPmHCXrB0uk=
Subject key identifier: E3:88:5B:6A:27:37:B7:DF:D1:25:B3:8D:8D:08:56:57:C3:32:EF:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AE72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D68A52BCDA6311F08D59EEA7DAE4EC9C.roa
Signing time: Tue 16 Dec 2025 09:44:39 +0000
ROA not before: Tue 16 Dec 2025 09:44:34 +0000
ROA not after: Sat 21 Mar 2026 09:44:34 +0000
asID: 209242
IP address blocks: 154.198.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110194 (0x1ae72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 16 09:44:34 2025 GMT
Not After : Mar 21 09:44:34 2026 GMT
Subject: CN=69412a07-453a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:d5:32:d2:fc:6f:36:bb:cf:82:72:94:b7:
42:c9:06:9a:3e:f1:fb:79:b4:ae:cf:52:49:8d:dd:
94:d0:e8:6e:31:11:3c:bd:34:1d:65:b1:4a:87:35:
69:d5:6a:37:cd:23:06:4d:ae:2f:da:cf:40:c5:af:
7b:e6:a4:a8:94:be:06:0f:64:38:b7:26:45:25:69:
89:f3:8a:76:73:3c:b7:b9:0e:3b:fc:f5:55:3b:71:
ba:18:ac:e7:9e:0d:78:d1:cd:27:3a:04:6f:c7:57:
49:ea:13:bf:33:b1:1f:9f:36:18:2a:6f:5f:bf:b1:
e6:4a:67:74:6c:98:66:a3:f6:ee:a9:9d:4a:27:80:
90:be:d3:fd:41:bf:d4:19:31:a1:91:da:37:a0:0a:
5b:8e:27:7e:35:5f:3e:31:58:4d:6c:07:f8:02:de:
31:f3:96:e1:77:b4:53:24:b0:78:ce:d8:93:9e:29:
da:fe:02:71:d7:45:ef:e4:24:e0:3b:43:ce:97:06:
60:b2:d3:d6:7b:df:7e:1f:39:e9:26:63:a1:49:0f:
f9:80:02:99:f7:a9:34:7b:a9:9b:84:27:5f:b7:f6:
28:5c:6e:73:c6:d5:9f:9f:c6:bd:8b:bf:dc:41:28:
4d:2e:7e:c4:4e:30:1b:e0:84:a3:49:f8:f7:3a:1c:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:88:5B:6A:27:37:B7:DF:D1:25:B3:8D:8D:08:56:57:C3:32:EF:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D68A52BCDA6311F08D59EEA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.173.0/24
Signature Algorithm: sha256WithRSAEncryption
57:0b:da:d1:1a:2e:c5:26:34:08:f9:db:ca:82:d0:40:17:a7:
b1:83:54:85:7f:bc:95:d7:95:22:11:8d:6d:9a:73:2d:d4:73:
d7:c6:12:38:07:12:2d:8b:9d:64:a5:90:7e:ea:c7:27:dd:f9:
d4:8b:ce:5e:2a:88:b5:63:2b:d1:4b:ab:ea:96:92:e1:0d:c1:
9c:d0:b0:eb:7a:ed:e7:a0:fb:b2:d2:12:54:b6:fd:b6:c5:0d:
34:05:44:b2:a3:06:e9:d3:fd:f2:e1:dd:5a:53:59:e8:48:04:
1b:da:9e:ba:02:4c:34:15:30:88:db:16:ab:ba:18:5e:83:22:
e3:fc:65:91:de:8b:47:46:fe:05:1e:af:01:4c:08:c1:87:80:
a1:8c:bc:5d:f0:c4:3b:91:74:38:7c:d3:13:e7:60:99:1b:9a:
6d:18:57:4e:88:ee:2f:05:82:61:c9:b4:6c:00:b9:c4:ac:60:
96:87:82:d1:cd:e9:f9:a7:a6:37:51:33:b1:18:ec:d1:58:08:
b8:23:42:ef:fe:be:36:72:e2:cf:c7:00:62:52:c4:96:24:7f:
38:a0:f1:c0:77:df:40:f1:46:ca:6c:f5:1d:28:d8:20:83:01:
d8:a1:73:32:ec:98:42:bc:7b:f3:5a:af:cf:52:b1:75:f3:f5:
9d:8d:da:a9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgIDAa5yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjUxMjE2MDk0NDM0WhcNMjYwMzIxMDk0NDM0WjAYMRYw
FAYDVQQDEw02OTQxMmEwNy00NTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwZ7VMtL8bza7z4JylLdCyQaaPvH7ebSuz1JJjd2U0OhuMRE8vTQdZbFK
hzVp1Wo3zSMGTa4v2s9Axa975qSolL4GD2Q4tyZFJWmJ84p2czy3uQ47/PVVO3G6
GKznng140c0nOgRvx1dJ6hO/M7EfnzYYKm9fv7HmSmd0bJhmo/buqZ1KJ4CQvtP9
Qb/UGTGhkdo3oApbjid+NV8+MVhNbAf4At4x85bhd7RTJLB4ztiTnina/gJx10Xv
5CTgO0POlwZgstPWe99+HznpJmOhSQ/5gAKZ96k0e6mbhCdft/YoXG5zxtWfn8a9
i7/cQShNLn7ETjAb4ISjSfj3OhxcxwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFOOI
W2onN7ff0SWzjY0IVlfDMu/sMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC9ENjhBNTJCQ0RBNjMxMUYwOEQ1OUVFQTdEQUU0RUM5Qy5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmsatMA0GCSqGSIb3DQEB
CwUAA4IBAQBXC9rRGi7FJjQI+dvKgtBAF6exg1SFf7yV15UiEY1tmnMt1HPXxhI4
BxIti51kpZB+6scn3fnUi85eKoi1YyvRS6vqlpLhDcGc0LDreu3noPuy0hJUtv22
xQ00BUSyowbp0/3y4d1aU1noSAQb2p66Akw0FTCI2xaruhhegyLj/GWR3otHRv4F
Hq8BTAjBh4ChjLxd8MQ7kXQ4fNMT52CZG5ptGFdOiO4vBYJhybRsALnErGCWh4LR
zen5p6Y3UTOxGOzRWAi4I0Lv/r42cuLPxwBiUsSWJH84oPHAd99A8UbKbPUdKNgg
gwHYoXMy7JhCvHvzWq/PUrF18/Wdjdqp
-----END CERTIFICATE-----
Generated at Fri Dec 19 16:48:59 2025 by rpki-client