This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A21CE44CF79411F0B2F861CBDAE4EC9C.roa
File: A21CE44CF79411F0B2F861CBDAE4EC9C.roa (raw, json)
Hash identifier: 70fO3HZNnG6tsC5vN+pDQH7i/OM6Ua9vNHyL4pa+t6M=
Subject key identifier: 88:B0:CF:4A:EC:94:F8:78:34:1F:8A:82:EE:E7:A2:75:A2:A1:BA:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01985D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A21CE44CF79411F0B2F861CBDAE4EC9C.roa
Signing time: Thu 22 Jan 2026 13:17:00 +0000
ROA not before: Thu 22 Jan 2026 13:16:54 +0000
ROA not after: Sun 01 Feb 2026 13:16:54 +0000
asID: 154321
IP address blocks: 156.239.0.0/20 maxlen: 24
156.239.224.0/20 maxlen: 24
156.239.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104541 (0x1985d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 22 13:16:54 2026 GMT
Not After : Feb 1 13:16:54 2026 GMT
Subject: CN=6972234c-742e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c7:93:15:5d:73:64:74:59:95:e1:3d:94:d0:
ee:e8:8e:2e:2f:1e:44:9f:f6:c5:78:91:5f:40:54:
65:f3:24:c7:b3:10:c1:ad:6a:0c:fe:3b:33:5d:f3:
ee:bb:c3:e3:1b:59:c1:e2:2d:b6:62:97:7a:63:26:
14:89:23:9e:a5:18:a0:3d:9b:ab:4a:af:31:ed:97:
3a:4d:67:5b:7d:97:bd:ce:1b:f8:be:ec:33:5a:10:
13:d3:d0:a7:3e:80:19:25:60:ff:23:74:da:56:a7:
f2:44:ed:c9:e9:2f:ab:13:8d:55:4e:8f:49:3a:8a:
07:72:5f:c4:90:3b:2b:98:8d:22:e6:1a:c3:e6:6c:
2a:6e:54:a0:e4:b4:71:6b:60:40:02:b3:24:e7:6f:
be:18:44:6b:99:a5:80:09:e2:77:0b:62:da:77:b6:
18:c6:70:97:30:46:d3:05:92:cc:01:0a:b8:65:1d:
a4:11:6b:e5:18:e8:38:10:cc:59:40:57:9b:94:5e:
fd:ef:d1:f1:bd:0c:1c:ee:29:64:eb:45:b1:6c:94:
19:a4:98:28:cc:5c:7f:80:56:b8:d8:e7:86:18:06:
da:98:aa:6b:3b:41:e2:63:b0:98:31:33:ed:95:32:
52:21:e2:3c:ee:5a:cd:ad:46:e9:74:6c:8f:e5:3a:
9e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B0:CF:4A:EC:94:F8:78:34:1F:8A:82:EE:E7:A2:75:A2:A1:BA:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A21CE44CF79411F0B2F861CBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.0.0/20
156.239.224.0/19
Signature Algorithm: sha256WithRSAEncryption
02:4e:94:2e:cc:bb:0e:5a:8e:be:71:5d:20:24:90:c0:05:b1:
f0:1c:99:8c:ce:5e:6e:05:af:3b:96:7e:fb:de:be:6c:91:78:
ae:a5:1b:01:0b:14:c0:ac:17:b7:76:cd:ec:fa:f9:19:b1:41:
b8:7c:09:de:60:7a:19:db:1f:52:20:8f:54:31:84:ae:81:1e:
1a:2e:40:e2:13:52:5e:99:12:9a:6e:da:24:ab:83:7c:22:b3:
2a:7f:43:76:85:86:cf:93:2c:30:03:b4:4f:ed:33:f5:a1:30:
27:a4:3c:df:49:63:7b:86:bf:a8:61:12:87:c3:96:4b:0c:db:
80:b3:8d:c5:be:54:dc:02:de:5c:fc:5d:8f:f1:c0:21:3f:c4:
ac:04:77:94:55:bb:78:69:e3:a7:cd:5c:4e:b2:81:51:13:ad:
78:af:1f:4d:9a:d0:6d:52:db:cd:e5:16:99:d8:a4:f7:8f:1b:
8c:2c:47:9f:15:d7:b2:1d:cc:ef:ef:a6:c0:85:57:eb:d9:9e:
96:f6:9f:51:0f:f9:e5:c8:6a:83:f2:10:f8:f7:24:1f:4f:60:
b4:6d:c7:d8:a6:14:1a:55:71:7a:37:b3:3f:57:55:89:79:22:
e6:a5:86:d7:fa:0b:f0:3e:6f:bb:c0:73:47:7f:f0:ac:ab:a7:
2c:b4:3c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:13:48 2026 by rpki-client