This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0C8BDF6DBEB11F0926DE1C1DAE4EC9C.roa
File: F0C8BDF6DBEB11F0926DE1C1DAE4EC9C.roa (raw, json)
Hash identifier: OQYFJjFYfeemtnWj3Tw8fXSau3YO1/2C+G+XRrcd+rY=
Subject key identifier: 54:75:97:9E:1E:40:52:E2:5B:DE:C4:C0:CA:F6:6C:30:62:17:28:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01AF63
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0C8BDF6DBEB11F0926DE1C1DAE4EC9C.roa
Signing time: Thu 18 Dec 2025 08:31:26 +0000
ROA not before: Thu 18 Dec 2025 08:31:20 +0000
ROA not after: Mon 19 Jan 2026 08:31:20 +0000
asID: 136501
IP address blocks: 154.92.192.0/24 maxlen: 24
154.92.193.0/24 maxlen: 24
154.92.194.0/24 maxlen: 24
154.92.195.0/24 maxlen: 24
154.92.196.0/24 maxlen: 24
154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
154.92.199.0/24 maxlen: 24
154.92.206.0/24 maxlen: 24
154.92.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110435 (0x1af63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Dec 18 08:31:20 2025 GMT
Not After : Jan 19 08:31:20 2026 GMT
Subject: CN=6943bbdd-455b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7a:ac:c8:47:fa:e1:47:c9:c1:bb:88:4c:3f:
77:66:de:9b:a2:38:b7:36:7c:87:f1:ac:1f:05:a8:
64:ef:33:50:ec:42:8e:65:70:08:f5:bc:8d:c5:c2:
f6:5a:1f:1d:84:f8:cc:82:e4:8e:8b:12:6e:53:9c:
a3:6e:f1:5d:2a:55:aa:be:38:c3:9b:08:90:f9:00:
8c:21:b6:9f:d3:ff:b8:94:0f:f4:61:17:ec:d8:8e:
b1:01:15:61:ed:d3:e8:f8:6b:46:d8:97:74:07:29:
f9:21:c4:f1:60:05:e9:f6:ac:41:07:08:33:a3:e3:
3c:f1:2e:14:ca:e3:d3:b7:ca:0f:ff:f5:74:b3:6a:
a2:9f:f0:bb:fc:6e:ee:21:cb:e9:0f:b6:33:20:9c:
be:99:e5:1a:00:e3:33:75:bb:9a:fb:e7:84:4b:20:
68:e6:57:37:3c:da:5b:08:a4:34:e9:60:79:cf:af:
12:e7:63:95:ff:ba:df:f3:48:52:23:06:d5:e1:28:
91:4b:54:6a:ed:af:d6:43:38:fc:05:b1:92:7e:41:
a2:4d:c6:1d:7b:a3:55:d3:87:fa:61:06:a7:86:0d:
9f:f6:a1:5f:74:0c:93:f3:b6:42:ac:fb:3a:4e:f6:
74:28:50:91:93:f7:57:97:1a:e9:cd:18:7c:de:d2:
07:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:75:97:9E:1E:40:52:E2:5B:DE:C4:C0:CA:F6:6C:30:62:17:28:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0C8BDF6DBEB11F0926DE1C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.192.0/21
154.92.206.0/24
154.92.208.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:2e:84:be:0a:0e:15:c7:46:7c:f1:d6:84:80:80:dc:35:29:
85:e3:d5:f9:88:03:4d:d2:23:53:41:80:b1:11:9a:84:38:1e:
6c:6c:20:f2:36:56:51:60:5e:63:b6:de:e7:bb:55:e9:fd:87:
2e:22:28:91:fb:75:09:8d:b9:c5:15:53:1a:d3:b6:3a:95:3c:
32:6d:28:95:57:bc:49:cc:43:b0:16:9f:c2:26:42:f9:93:3d:
a6:25:db:9f:c8:d7:d2:a9:5a:c7:2f:80:e8:0f:c4:0a:d0:f0:
70:cb:d6:bf:d7:54:14:a1:97:e0:e8:52:76:75:87:d6:80:21:
a0:ee:45:b1:54:b7:34:c0:ec:d6:87:24:1d:9b:04:7d:2c:00:
8b:71:d8:10:5b:20:22:3b:69:c3:9b:0a:e4:e3:e8:6b:16:66:
eb:5f:4e:8b:73:e3:d0:00:e5:ae:d9:62:45:9a:7e:25:f3:9c:
f1:92:d7:5f:58:83:12:0a:fc:d8:17:00:5c:cf:70:09:8e:33:
bf:e6:5c:a1:36:40:a6:38:b9:ac:6a:30:70:8e:0e:36:8a:5e:
ca:db:24:9d:5f:fe:27:b6:f1:a5:41:82:3a:75:3a:98:a2:22:
1e:71:b0:88:f8:09:66:a8:dc:e0:c4:1e:12:b1:16:76:bd:05:
29:08:97:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 20:24:32 2025 by rpki-client