This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/035FB43ACC4A11F097400CBDDAE4EC9C.roa
File: 035FB43ACC4A11F097400CBDDAE4EC9C.roa (raw, json)
Hash identifier: Y4tl6IRYC0JIuLU2EKHqD3gtRrrA6NCddWZV9BZnjwU=
Subject key identifier: 6E:1D:F7:70:A0:33:22:EC:80:48:3E:37:D2:DA:74:43:9A:1D:9B:68
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018A5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/035FB43ACC4A11F097400CBDDAE4EC9C.roa
Signing time: Fri 28 Nov 2025 11:04:31 +0000
ROA not before: Fri 28 Nov 2025 11:04:23 +0000
ROA not after: Sun 28 Dec 2025 11:04:23 +0000
asID: 44559
IP address blocks: 45.192.52.0/24 maxlen: 24
45.192.53.0/24 maxlen: 24
45.195.162.0/24 maxlen: 24
45.195.163.0/24 maxlen: 24
45.195.164.0/24 maxlen: 24
45.195.165.0/24 maxlen: 24
45.195.167.0/24 maxlen: 24
45.195.168.0/24 maxlen: 24
45.195.170.0/24 maxlen: 24
45.195.174.0/24 maxlen: 24
45.195.175.0/24 maxlen: 24
45.195.176.0/24 maxlen: 24
45.195.177.0/24 maxlen: 24
45.195.179.0/24 maxlen: 24
45.195.181.0/24 maxlen: 24
45.195.186.0/24 maxlen: 24
45.195.189.0/24 maxlen: 24
45.195.190.0/24 maxlen: 24
45.199.207.0/24 maxlen: 24
45.199.208.0/24 maxlen: 24
45.199.209.0/24 maxlen: 24
45.199.210.0/24 maxlen: 24
45.199.211.0/24 maxlen: 24
45.199.212.0/24 maxlen: 24
45.199.213.0/24 maxlen: 24
45.199.214.0/24 maxlen: 24
45.199.215.0/24 maxlen: 24
45.199.216.0/24 maxlen: 24
45.199.217.0/24 maxlen: 24
45.199.218.0/24 maxlen: 24
45.199.219.0/24 maxlen: 24
45.199.220.0/24 maxlen: 24
45.199.231.0/24 maxlen: 24
45.199.232.0/24 maxlen: 24
45.199.233.0/24 maxlen: 24
45.199.234.0/24 maxlen: 24
45.199.235.0/24 maxlen: 24
45.199.236.0/24 maxlen: 24
45.199.237.0/24 maxlen: 24
45.199.238.0/24 maxlen: 24
45.199.239.0/24 maxlen: 24
45.199.240.0/24 maxlen: 24
45.199.246.0/24 maxlen: 24
45.199.247.0/24 maxlen: 24
45.199.248.0/24 maxlen: 24
45.199.251.0/24 maxlen: 24
45.199.253.0/24 maxlen: 24
45.199.254.0/24 maxlen: 24
45.200.179.0/24 maxlen: 24
45.200.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100955 (0x18a5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 28 11:04:23 2025 GMT
Not After : Dec 28 11:04:23 2025 GMT
Subject: CN=692981bf-ebe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:c0:f9:97:71:30:a0:64:2f:b9:9b:a5:3b:
5e:35:8f:35:5f:cd:1f:4f:37:de:a2:b0:39:95:cc:
1f:6a:81:92:e4:9f:b4:5a:c6:d4:fb:b1:26:c2:a5:
dc:f1:47:9d:5f:8f:5a:44:98:24:05:78:50:1c:0a:
a4:31:e3:80:b8:13:e3:b7:5a:37:25:16:0e:c8:bf:
8a:56:cf:59:e4:27:59:7e:75:b2:1c:d1:2a:54:26:
8c:48:02:a8:f5:cd:44:b6:57:11:c3:85:2d:61:3b:
8f:87:1a:21:db:5f:5b:b1:65:cc:d9:b5:6d:2e:21:
8c:cd:4f:4f:5e:cf:4e:89:e1:20:b9:73:9d:67:0c:
f9:3c:68:4a:9e:3a:c4:6b:a5:72:21:2b:6d:33:d1:
3d:94:7b:2d:ae:c0:ee:5e:c7:f2:7a:30:39:b2:87:
a8:5e:a9:94:9e:4a:31:75:86:fb:41:f6:84:a3:57:
bb:9b:98:fc:c9:07:2a:01:2e:36:7a:25:68:cf:cc:
f5:63:bb:9c:21:7a:d0:13:b0:2a:bd:a7:2b:74:c5:
a7:6d:28:2b:b8:ae:b3:4d:c4:ff:6a:17:2d:75:ae:
66:e6:f2:62:a5:1f:b4:54:d1:73:a9:1b:01:f4:ea:
e2:b7:25:1c:c1:f4:10:89:26:56:65:3b:ae:4d:8f:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1D:F7:70:A0:33:22:EC:80:48:3E:37:D2:DA:74:43:9A:1D:9B:68
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/035FB43ACC4A11F097400CBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.52.0/23
45.195.162.0-45.195.165.255
45.195.167.0-45.195.168.255
45.195.170.0/24
45.195.174.0-45.195.177.255
45.195.179.0/24
45.195.181.0/24
45.195.186.0/24
45.195.189.0-45.195.190.255
45.199.207.0-45.199.220.255
45.199.231.0-45.199.240.255
45.199.246.0-45.199.248.255
45.199.251.0/24
45.199.253.0-45.199.254.255
45.200.179.0-45.200.180.255
Signature Algorithm: sha256WithRSAEncryption
68:20:14:df:12:b2:42:2e:73:cf:8c:68:39:b5:9f:31:b4:34:
21:7b:1c:be:c1:df:8e:75:7d:5e:c7:0e:d7:e4:90:be:8a:22:
0e:42:d5:55:06:73:8a:c5:d2:5b:95:9c:5c:df:6a:33:33:ed:
9d:d5:3f:95:7b:1d:35:81:82:6c:69:cb:21:20:ef:b2:1c:c6:
ae:a2:db:4e:e0:e2:da:50:cb:37:45:0f:0e:62:da:ea:e4:36:
9c:8f:dd:b6:53:e7:92:85:02:c6:90:43:7f:42:80:4f:2a:f0:
7a:5c:db:5c:8a:68:f5:b0:aa:9a:52:ef:eb:7d:f2:df:33:45:
0b:c9:74:ae:2d:b9:6e:0e:18:9e:47:55:6b:cf:95:33:43:b0:
16:05:aa:a3:0b:d0:81:d8:66:de:03:58:1e:f8:86:33:a7:81:
8f:93:3b:f5:5b:51:21:85:fc:22:33:a0:6d:de:9d:f9:13:05:
f4:26:05:18:0b:fe:13:ac:55:aa:02:d2:55:c7:e5:e1:90:48:
ba:8d:4f:2e:1f:0b:b5:e2:58:5c:6f:dd:be:4a:11:1d:25:03:
29:a4:d7:83:10:b0:90:ac:c0:f7:da:16:0c:87:38:83:b6:9c:
d1:5b:03:5b:63:15:7c:24:25:4c:97:88:51:7c:0f:84:db:35:
04:9a:9b:97
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIDAYpbMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTI4MTEwNDIzWhcNMjUxMjI4MTEwNDIzWjAYMRYw
FAYDVQQDEw02OTI5ODFiZi1lYmU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA0nrA+ZdxMKBkL7mbpTteNY81X80fTzfeorA5lcwfaoGS5J+0WsbU+7Em
wqXc8UedX49aRJgkBXhQHAqkMeOAuBPjt1o3JRYOyL+KVs9Z5CdZfnWyHNEqVCaM
SAKo9c1EtlcRw4UtYTuPhxoh219bsWXM2bVtLiGMzU9PXs9OieEguXOdZwz5PGhK
njrEa6VyISttM9E9lHstrsDuXsfyejA5soeoXqmUnkoxdYb7QfaEo1e7m5j8yQcq
AS42eiVoz8z1Y7ucIXrQE7AqvacrdMWnbSgruK6zTcT/ahctda5m5vJipR+0VNFz
qRsB9OrityUcwfQQiSZWZTuuTY//DQIDAQABo4IDQzCCAz8wHQYDVR0OBBYEFG4d
93CgMyLsgEg+N9LadEOaHZtoMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMzVGQjQzQUNDNEExMUYwOTc0MDBDQkREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MIG/BggrBgEFBQcBBwEB/wSBrzCBrDCBqQQCAAEwgaIDBAEtwDQwDAMEAS3DogME
AS3DpDAMAwQALcOnAwQALcOoAwQALcOqMAwDBAEtw64DBAEtw7ADBAAtw7MDBAAt
w7UDBAAtw7owDAMEAC3DvQMEAC3DvjAMAwQALcfPAwQALcfcMAwDBAAtx+cDBAAt
x/AwDAMEAS3H9gMEAC3H+AMEAC3H+zAMAwQALcf9AwQALcf+MAwDBAAtyLMDBAAt
yLQwDQYJKoZIhvcNAQELBQADggEBAGggFN8SskIuc8+MaDm1nzG0NCF7HL7B3451
fV7HDtfkkL6KIg5C1VUGc4rF0luVnFzfajMz7Z3VP5V7HTWBgmxpyyEg77Icxq6i
207g4tpQyzdFDw5i2urkNpyP3bZT55KFAsaQQ39CgE8q8Hpc21yKaPWwqppS7+t9
8t8zRQvJdK4tuW4OGJ5HVWvPlTNDsBYFqqML0IHYZt4DWB74hjOngY+TO/VbUSGF
/CIzoG3enfkTBfQmBRgL/hOsVaoC0lXH5eGQSLqNTy4fC7XiWFxv3b5KER0lAymk
14MQsJCswPfaFgyHOIO2nNFbA1tjFXwkJUyXiFF8D4TbNQSam5c=
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:12 2025 by rpki-client