This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00B2A98CC93811F08BEA37E5DAE4EC9C.roa
File: 00B2A98CC93811F08BEA37E5DAE4EC9C.roa (raw, json)
Hash identifier: s/a8JEiOurbafHBzG4YZSB2FjhAIf8QgbO0eEiTDJbw=
Subject key identifier: B1:99:E9:F9:8E:FA:5E:6E:2F:A4:75:E4:E1:14:3C:BE:93:D8:99:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01895D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00B2A98CC93811F08BEA37E5DAE4EC9C.roa
Signing time: Mon 24 Nov 2025 13:18:02 +0000
ROA not before: Mon 24 Nov 2025 13:17:54 +0000
ROA not after: Tue 30 Dec 2025 13:17:54 +0000
asID: 398443
IP address blocks: 45.192.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100701 (0x1895d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 24 13:17:54 2025 GMT
Not After : Dec 30 13:17:54 2025 GMT
Subject: CN=69245b0a-c608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:98:7d:66:e9:56:b7:fe:82:3e:c4:8f:9a:
ff:56:de:40:c8:51:ae:3d:d6:a8:e3:2c:71:1c:90:
fd:3b:d1:58:ec:c0:ef:a9:d7:fc:04:66:7c:b1:e5:
10:9d:fa:c2:33:41:30:1d:19:cb:67:d9:1a:bc:c1:
96:cf:63:5a:74:bb:06:2d:ad:a2:2b:a5:38:d7:41:
2f:9e:0c:2c:03:a0:35:b4:fd:20:9f:39:54:df:19:
0f:04:7b:d8:32:f6:3b:45:95:82:fd:84:1f:e1:c7:
d4:33:f1:01:c1:15:86:25:3e:b3:ab:01:29:ae:0a:
48:76:37:73:08:2f:ca:c0:d1:7a:6a:27:58:4d:a0:
f8:84:04:47:0c:19:28:36:59:de:77:6f:b6:9d:21:
96:7a:46:72:b2:d4:37:ac:11:bc:77:56:c5:e2:53:
cd:7d:1f:f0:35:85:c7:d8:40:c8:fa:7e:5c:2b:8d:
ca:c8:42:1c:32:50:bc:ee:7f:41:f9:d7:a5:e5:5a:
25:f1:a1:96:ee:9e:aa:91:20:51:e0:ca:32:d5:68:
d0:bd:45:9d:5f:11:f8:8f:4e:68:ad:4b:35:3b:7c:
40:38:75:64:32:8f:b6:e7:19:3e:37:4a:0a:40:2a:
2b:be:d9:58:c4:01:78:81:5f:0e:49:7a:3f:38:a9:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:99:E9:F9:8E:FA:5E:6E:2F:A4:75:E4:E1:14:3C:BE:93:D8:99:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00B2A98CC93811F08BEA37E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.192.0/20
Signature Algorithm: sha256WithRSAEncryption
ae:d0:62:37:7f:79:7d:75:16:aa:c7:73:fe:8a:c7:ca:f5:44:
3e:2d:f2:77:ee:b3:8b:f5:de:1b:44:46:a7:8c:35:f8:e6:5b:
66:1c:a0:8a:aa:30:54:20:b4:2f:5b:b9:34:05:eb:ff:b9:fb:
d8:3b:e7:58:e8:9e:6b:23:c3:bd:6d:bc:e9:ee:9c:fe:8c:d3:
25:b2:23:4d:e6:ff:01:5e:5d:c9:9f:f8:1f:db:28:bd:db:9a:
11:03:27:f8:3d:b6:be:ed:23:b2:58:ad:2b:4f:3d:97:61:ee:
5c:5e:75:b3:f7:bd:89:39:27:c5:9d:05:3f:ae:79:2c:3c:12:
d6:2c:09:59:c2:43:ca:13:0d:77:19:fb:9f:a5:a2:e4:9b:8d:
3a:1e:f5:33:7b:92:8f:9a:b5:67:33:aa:d2:c0:e2:52:0c:be:
91:bb:30:5d:37:ae:53:fb:85:35:c5:2d:cb:68:44:4c:62:07:
2d:b0:a3:5d:73:88:44:05:06:75:bf:60:f6:1c:90:9b:e8:f2:
85:a2:c5:26:45:e0:6c:51:aa:86:89:0a:62:e7:5b:65:70:cb:
17:ba:15:20:33:92:a0:c3:e0:26:3a:e2:b3:df:78:93:83:6f:
a6:77:1f:41:72:9e:f6:a6:03:26:73:a9:2f:c7:f9:05:e0:83:
b4:3a:dd:24
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYldMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTI0MTMxNzU0WhcNMjUxMjMwMTMxNzU0WjAYMRYw
FAYDVQQDEw02OTI0NWIwYS1jNjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtYCYfWbpVrf+gj7Ej5r/Vt5AyFGuPdao4yxxHJD9O9FY7MDvqdf8BGZ8
seUQnfrCM0EwHRnLZ9kavMGWz2NadLsGLa2iK6U410EvngwsA6A1tP0gnzlU3xkP
BHvYMvY7RZWC/YQf4cfUM/EBwRWGJT6zqwEprgpIdjdzCC/KwNF6aidYTaD4hARH
DBkoNlned2+2nSGWekZystQ3rBG8d1bF4lPNfR/wNYXH2EDI+n5cK43KyEIcMlC8
7n9B+del5Vol8aGW7p6qkSBR4Moy1WjQvUWdXxH4j05orUs1O3xAOHVkMo+25xk+
N0oKQCorvtlYxAF4gV8OSXo/OKmsfwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLGZ
6fmO+l5uL6R15OEUPL6T2JkzMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMEIyQTk4Q0M5MzgxMUYwOEJFQTM3RTVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcDAMA0GCSqGSIb3DQEBCwUA
A4IBAQCu0GI3f3l9dRaqx3P+isfK9UQ+LfJ37rOL9d4bREanjDX45ltmHKCKqjBU
ILQvW7k0Bev/ufvYO+dY6J5rI8O9bbzp7pz+jNMlsiNN5v8BXl3Jn/gf2yi925oR
Ayf4Pba+7SOyWK0rTz2XYe5cXnWz972JOSfFnQU/rnksPBLWLAlZwkPKEw13Gfuf
paLkm406HvUze5KPmrVnM6rSwOJSDL6RuzBdN65T+4U1xS3LaERMYgctsKNdc4hE
BQZ1v2D2HJCb6PKFosUmReBsUaqGiQpi51tlcMsXuhUgM5Kgw+AmOuKz33iTg2+m
dx9Bcp72pgMmc6kvx/kF4IO0Ot0k
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:54 2025 by rpki-client