This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDB9A310E0E611F087FE397DDAE4EC9C.roa
File: DDB9A310E0E611F087FE397DDAE4EC9C.roa (raw, json)
Hash identifier: +ZncAFOvoBeZe9tCdt+UURPo0FMdfPyoDRxmBTOQsTU=
Subject key identifier: 78:6F:69:CA:A5:68:36:37:4B:FC:D9:FB:8C:C8:82:31:5A:F9:48:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01B107
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDB9A310E0E611F087FE397DDAE4EC9C.roa
Signing time: Wed 24 Dec 2025 16:37:42 +0000
ROA not before: Wed 24 Dec 2025 16:37:37 +0000
ROA not after: Sat 31 Jan 2026 16:37:37 +0000
asID: 20326
IP address blocks: 154.82.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 26 Dec 2025 18:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110855 (0x1b107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 24 16:37:37 2025 GMT
Not After : Jan 31 16:37:37 2026 GMT
Subject: CN=694c16d6-2661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:28:95:f2:1c:79:6f:fa:90:d6:ad:05:c5:cb:
79:28:d0:fc:f6:97:03:95:e0:dd:16:d2:b4:96:78:
b8:31:c9:d0:35:4d:1e:da:bc:7b:ee:0f:a3:eb:53:
23:d1:04:8a:fb:00:58:f2:b6:3a:44:b8:96:11:9f:
37:df:60:8d:11:f2:24:ed:a1:ba:f8:b8:32:76:51:
dc:8d:e7:56:0e:eb:83:6e:d4:36:8a:bd:52:e5:4b:
ab:d5:45:ed:df:81:52:bb:a5:5f:d5:7a:d7:4b:ab:
a9:48:fd:8f:fd:42:22:9c:95:24:25:57:0b:04:11:
8d:d3:ff:de:01:e9:13:bb:1f:85:21:e9:12:7a:63:
fa:1b:4d:bc:48:fc:39:5d:91:4a:9f:2a:46:01:de:
f4:f6:5c:53:de:1c:b0:cf:08:00:a0:b6:21:30:17:
82:8d:5d:45:13:a0:5e:26:80:b3:2b:e3:e0:13:c6:
b5:78:c5:6b:cc:36:6b:f4:25:6c:07:71:d3:2f:e4:
bb:f0:0f:2c:22:51:e7:4a:97:bd:67:c5:40:bc:15:
a2:38:07:0e:61:56:05:b6:d4:50:bd:eb:d6:26:c3:
fc:12:08:78:1f:76:1f:9d:cf:21:17:88:e4:bb:38:
ab:5d:ed:ff:70:c8:82:68:ef:2b:52:18:93:b6:dd:
94:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6F:69:CA:A5:68:36:37:4B:FC:D9:FB:8C:C8:82:31:5A:F9:48:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DDB9A310E0E611F087FE397DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.193.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:69:0d:63:76:ec:c5:ed:11:b7:04:7c:b4:21:a6:18:5e:16:
55:35:11:1a:0e:7a:b5:34:c3:f0:bb:04:a3:ef:df:84:da:1f:
b1:b5:99:27:a7:f1:03:ca:a3:f9:c1:e0:0b:dd:d5:4d:37:e3:
41:6e:14:1f:49:dc:49:89:69:f2:4e:3e:b5:3f:e8:86:9f:e3:
e0:0e:72:67:69:23:3f:1a:95:49:ce:ec:92:2e:6e:1e:0e:c9:
f7:f5:5f:af:5f:0a:ce:6d:12:19:44:a6:0b:09:4a:c9:28:9b:
b2:b0:fc:71:36:7d:98:41:b6:85:c2:40:eb:a1:aa:74:2b:7b:
9c:e1:7b:ae:0f:07:71:5d:a7:85:8c:70:36:0d:64:29:5e:7a:
16:f5:2f:bd:c0:9e:4b:b6:54:16:a7:64:46:e1:25:47:6e:e3:
00:7f:e9:08:8f:2a:c9:64:6f:69:48:2d:f2:c9:b6:54:c7:55:
6b:77:e7:f7:eb:f4:6c:7e:fd:45:b7:4b:a7:3b:f1:0a:21:c1:
c1:75:c9:04:ed:3f:f0:13:12:1f:87:55:db:b4:8c:ba:e0:97:
a8:64:70:b1:38:56:9c:8a:0e:fc:2f:d0:22:ef:89:24:b8:80:
b8:a6:2c:9e:a1:8e:6d:6d:19:fa:25:1c:63:34:d2:45:6e:72:
d4:c2:11:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 24 20:19:59 2025 by rpki-client