This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A86B832AD02611F0A5EFA3F1DAE4EC9C.roa
File: A86B832AD02611F0A5EFA3F1DAE4EC9C.roa (raw, json)
Hash identifier: fPlc5P+FETlvqhZ4qNSJVx1HPd3d5EGZRYsY2IdlTjs=
Subject key identifier: D4:A1:5F:D9:6E:B6:59:28:B0:0D:C5:8B:67:B8:5A:47:FE:AC:8B:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018B85
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A86B832AD02611F0A5EFA3F1DAE4EC9C.roa
Signing time: Wed 03 Dec 2025 09:01:30 +0000
ROA not before: Wed 03 Dec 2025 09:01:26 +0000
ROA not after: Fri 06 Nov 2026 09:01:26 +0000
asID: 328608
IP address blocks: 156.253.207.0/24 maxlen: 24
156.253.208.0/24 maxlen: 24
156.253.209.0/24 maxlen: 24
156.253.210.0/24 maxlen: 24
156.253.211.0/24 maxlen: 24
156.253.212.0/24 maxlen: 24
156.253.213.0/24 maxlen: 24
156.253.214.0/24 maxlen: 24
156.253.215.0/24 maxlen: 24
156.253.216.0/24 maxlen: 24
156.253.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Dec 2025 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101253 (0x18b85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 3 09:01:26 2025 GMT
Not After : Nov 6 09:01:26 2026 GMT
Subject: CN=692ffc6a-fa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b3:af:37:67:ac:63:86:f3:be:03:f7:8f:1a:
ab:bb:ba:5b:14:85:ff:28:44:18:23:28:7c:4b:8d:
0d:21:a5:fd:e8:6e:27:ac:75:b4:e8:c2:82:f4:e5:
b9:95:98:69:48:4c:45:56:c5:81:c8:90:da:5c:2d:
07:bb:f1:5c:3e:1a:ed:10:76:82:ed:81:9e:ce:0f:
bf:37:55:3e:93:2a:3c:0d:e1:1e:95:a3:73:3d:eb:
38:4e:8b:c9:c6:3a:65:f6:1e:a6:3a:d1:40:4c:b9:
2b:a4:b2:9a:e8:31:06:99:19:33:86:04:3b:06:f1:
f7:07:dd:5c:f0:9c:a6:d0:bf:1b:18:79:52:fe:51:
4f:bd:79:6a:4f:7b:59:48:e5:d9:ff:38:cd:4d:da:
32:4b:84:bd:76:04:c2:e5:78:8c:05:62:c0:59:34:
5a:7d:2c:f8:b4:5a:e5:c1:e5:5b:d5:8e:1d:aa:5e:
cc:31:01:e6:7b:86:ca:1c:b2:af:f4:bb:36:4c:89:
2a:55:ad:d9:8d:0d:07:8c:ed:47:0b:95:c5:84:52:
3b:f5:1f:19:9d:28:e2:5d:86:9a:26:38:c1:ea:81:
b8:8d:58:0d:7a:91:63:00:69:2c:c6:ef:41:a1:4f:
57:1a:ea:1b:7f:2f:cc:ea:8f:2e:dd:8e:e5:e6:cf:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A1:5F:D9:6E:B6:59:28:B0:0D:C5:8B:67:B8:5A:47:FE:AC:8B:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A86B832AD02611F0A5EFA3F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.253.207.0-156.253.217.255
Signature Algorithm: sha256WithRSAEncryption
00:f2:9a:5e:ab:89:61:a4:e7:a3:e1:6a:84:fd:d7:60:9e:11:
cf:2d:e2:dc:58:aa:93:de:cf:ce:c3:6f:85:bc:6e:81:e2:a3:
c3:9c:8f:a1:45:72:af:40:36:58:19:f4:c8:2a:59:39:6e:c7:
03:fc:3e:e2:e3:31:27:b4:4d:b4:53:75:30:10:ee:d6:5e:ab:
9a:90:c0:50:d9:79:89:a3:fa:21:e2:22:9f:3e:9d:9f:84:7c:
a9:00:ce:9d:a6:04:ac:d6:93:cf:03:27:69:a7:cb:eb:3d:ec:
f3:bb:f0:b9:ee:12:d1:93:f6:ea:4c:1b:51:c9:b0:ed:84:50:
9e:d4:ef:dd:8b:c8:19:c5:51:a1:d3:22:09:58:ac:f6:0e:c5:
48:cf:a6:5b:08:3a:76:69:d1:04:d6:d9:b2:59:15:80:29:05:
f9:1d:a2:f5:89:6f:15:80:c6:cb:35:f6:58:9d:91:31:14:08:
02:17:ed:57:1e:27:d7:d5:dd:6f:2f:1f:61:a3:3e:55:df:5d:
4d:d5:b3:4e:b3:7f:d1:6e:16:d9:1b:4f:56:44:8b:22:57:24:
79:0e:be:41:75:ef:1e:13:b4:e2:e4:5f:c4:b6:4c:05:ee:4b:
32:37:78:26:a6:5b:b7:dc:0c:40:af:0e:6e:2c:bc:b0:44:22:
d9:3d:43:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 12:44:05 2025 by rpki-client