This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6DE4702DB2E11F0B7E23BA1DAE4EC9C.roa
File: D6DE4702DB2E11F0B7E23BA1DAE4EC9C.roa (raw, json)
Hash identifier: /dFlq1GK4R2nWAQUmnC1pMHqErn5z5gR9odWnWhAkY8=
Subject key identifier: 57:68:96:85:DB:5A:1E:43:1D:CF:05:EE:CE:EA:1D:D5:B5:FF:F5:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AECE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6DE4702DB2E11F0B7E23BA1DAE4EC9C.roa
Signing time: Wed 17 Dec 2025 09:57:47 +0000
ROA not before: Wed 17 Dec 2025 09:57:42 +0000
ROA not after: Sat 24 Jan 2026 09:57:42 +0000
asID: 153706
IP address blocks: 154.89.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110286 (0x1aece)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 17 09:57:42 2025 GMT
Not After : Jan 24 09:57:42 2026 GMT
Subject: CN=69427e9b-3ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:48:ca:a5:25:01:34:84:40:3c:85:fb:37:59:
0e:dc:b5:00:71:67:6d:d7:d5:ab:49:ab:63:54:86:
ac:43:28:99:81:ef:f4:c7:b0:3f:8d:a2:96:2a:07:
03:21:84:1b:29:8d:3b:5b:f3:da:c0:ae:d9:4b:84:
44:bf:d3:63:17:22:a6:f9:aa:06:e7:6b:04:f3:e4:
50:3c:37:a8:16:67:db:db:93:2a:0b:d8:16:a1:e3:
98:34:af:bc:6d:4f:e0:01:b7:43:71:c4:99:9a:16:
0a:3c:cb:f9:0a:36:31:b2:58:12:d7:ce:27:ad:af:
b0:5e:30:a9:b1:99:b8:f0:b1:63:dd:c4:d2:86:05:
77:9e:23:d6:3a:11:e7:82:36:46:f0:32:45:24:b9:
a4:65:a5:b3:d7:83:a6:14:a2:bc:a1:c4:e8:c6:bf:
a2:20:11:91:9a:07:1e:01:f2:92:ad:19:51:8c:8a:
36:c8:fe:1f:36:a1:e4:9c:2b:2e:97:b5:ba:6b:7e:
b3:9e:33:3e:80:b7:4e:58:25:06:b5:cd:c6:7b:b3:
1b:0d:8d:58:8a:21:2d:ba:f6:6a:a4:ea:6a:f6:a0:
b9:20:68:6a:7b:a1:89:2f:bd:13:e3:f7:4d:cb:96:
d0:8d:56:75:2f:2f:54:bf:42:18:ca:0d:0e:8b:bd:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:68:96:85:DB:5A:1E:43:1D:CF:05:EE:CE:EA:1D:D5:B5:FF:F5:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6DE4702DB2E11F0B7E23BA1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.194.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d7:81:a1:27:0b:dc:6f:35:b7:ce:40:75:97:53:41:0f:ee:
98:92:99:9e:3c:50:ba:01:62:3e:85:a1:77:df:f2:10:cf:4d:
63:8c:a8:6d:fc:4b:5e:04:31:70:d2:a8:bd:d3:1d:bf:9f:0e:
e8:b2:b4:db:58:2f:d7:14:09:52:0f:d7:4b:5a:a8:a7:ab:cb:
36:92:f3:1d:ba:0b:06:bb:c7:d1:77:e1:f2:9b:58:7c:fa:89:
47:c8:9b:ae:56:d5:5f:16:da:9f:13:79:2f:8f:7c:03:19:3e:
de:93:14:74:5f:2b:18:48:7c:ba:37:05:a6:8c:9e:fa:83:78:
5e:94:aa:c4:8d:e6:60:f7:f2:3e:e1:e4:73:b8:12:bf:00:44:
70:6a:59:56:ee:41:7c:80:20:3b:15:bf:4e:e4:eb:06:85:d0:
76:d6:8e:e0:07:78:a3:9f:e3:50:b7:89:52:87:96:c7:b5:b5:
c1:2e:61:64:6a:39:c1:d5:1a:a0:2e:cf:f9:67:d3:c8:8c:d8:
6f:5f:cd:6b:01:88:d5:71:2e:bd:99:14:bb:9a:32:4a:30:e8:
69:64:07:22:7d:8b:86:a6:13:af:6f:20:29:d6:fc:0f:21:8e:
8a:91:6b:6c:a4:d0:51:f6:90:b5:ba:57:9e:79:bf:df:9e:2f:
c8:8c:4f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:25:00 2025 by rpki-client