This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04689C96C45411F088B873AADAE4EC9C.roa
File: 04689C96C45411F088B873AADAE4EC9C.roa (raw, json)
Hash identifier: WQAFtFU0lkon3ywwFY5DzPoY06xlNtCg+egiX5G5oQc=
Subject key identifier: 4E:92:F5:5C:CC:68:F0:16:3F:1B:CF:EC:5B:86:3F:8D:D4:C5:F7:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018812
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04689C96C45411F088B873AADAE4EC9C.roa
Signing time: Tue 18 Nov 2025 07:55:58 +0000
ROA not before: Tue 18 Nov 2025 07:55:46 +0000
ROA not after: Tue 30 Dec 2025 07:55:46 +0000
asID: 137547
IP address blocks: 156.245.188.0/23 maxlen: 24
156.245.188.0/24 maxlen: 24
156.245.189.0/24 maxlen: 24
156.245.198.0/23 maxlen: 24
156.245.198.0/24 maxlen: 24
156.245.199.0/24 maxlen: 24
156.245.200.0/22 maxlen: 24
156.245.209.0/24 maxlen: 24
156.245.210.0/24 maxlen: 24
156.245.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100370 (0x18812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 18 07:55:46 2025 GMT
Not After : Dec 30 07:55:46 2025 GMT
Subject: CN=691c268e-d894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e8:8d:84:51:e9:7b:b0:c9:e7:e0:0e:9f:7a:
95:65:a1:6b:46:b3:cf:c5:f7:90:83:21:22:f6:b4:
82:dc:bf:d5:b4:1a:d1:01:d5:c0:4f:6a:61:90:1b:
b1:f2:03:43:23:ce:f7:c9:6c:a9:4f:19:1a:5e:89:
c4:4c:07:79:37:71:3f:03:4d:a2:43:05:c6:48:7e:
fd:ab:20:dc:49:50:eb:55:b3:3d:7b:50:e4:53:c2:
39:03:c2:9e:95:f0:13:86:8b:7b:78:a0:41:a1:c8:
0a:8e:54:54:9c:61:b1:4f:89:af:05:91:7b:a3:66:
e8:0b:c1:71:23:f4:33:1f:89:8a:fa:02:9e:bd:00:
4c:3c:24:0d:96:6d:71:31:58:2c:8a:10:49:45:d9:
be:ce:4e:59:44:3b:ac:c3:a2:94:55:de:78:5e:2e:
a2:47:37:ce:f6:42:db:f6:5c:b0:77:8d:e3:f5:c5:
1f:e1:91:f9:5e:5a:e3:d9:d4:81:2e:e7:fa:61:1d:
49:c8:c3:94:b3:5a:55:fc:16:2a:ee:3e:99:d7:2d:
85:28:7c:c6:d3:fe:c1:e6:5e:4f:80:4f:de:5c:40:
b2:5a:4e:c2:7c:e2:0c:98:d4:31:ed:a0:db:2d:1b:
5d:23:7d:7d:11:40:6b:ca:d3:37:68:ff:57:b1:24:
54:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:92:F5:5C:CC:68:F0:16:3F:1B:CF:EC:5B:86:3F:8D:D4:C5:F7:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04689C96C45411F088B873AADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.188.0/23
156.245.198.0-156.245.203.255
156.245.209.0-156.245.210.255
156.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:76:0a:a2:bd:e9:53:70:16:17:13:4f:f6:eb:b8:73:e6:6d:
0c:0d:3d:50:a8:e1:29:d6:1d:b3:3f:45:de:25:d6:7d:47:3b:
1e:25:6d:38:28:5f:a2:84:bd:72:18:be:3d:19:ed:2f:ef:6d:
45:0d:5b:67:10:03:11:72:ee:15:d7:7f:33:6e:0a:64:e3:31:
f7:a3:95:2c:5a:78:0d:c5:a2:e7:d0:d6:56:7e:10:4c:18:98:
70:e0:de:21:d0:ef:19:25:72:46:52:6c:fe:a4:e1:e7:1c:e1:
58:fd:63:37:f8:7a:9b:b1:f7:c4:f2:b7:99:d8:1c:76:4a:75:
4c:82:5b:6a:c8:3c:c0:67:36:20:ef:ba:8c:9f:d0:b5:28:6c:
36:2e:6f:1a:e0:2c:95:1c:b3:7a:5d:3e:b1:0b:16:7e:02:3e:
e1:f5:82:e4:c9:00:51:42:c6:66:15:7d:6f:78:c4:f3:f0:97:
b6:c3:a8:7d:74:42:75:d5:15:98:0d:0d:2c:f2:5e:da:3d:e7:
ac:b6:b8:ad:a3:c2:e5:28:7b:b8:e4:c1:c4:b8:0e:c5:05:7c:
8f:90:58:90:00:7b:92:b4:fe:eb:ec:f7:47:f9:ef:81:34:98:
78:d9:a9:a4:0c:5c:10:e9:f0:22:be:dd:88:76:53:58:83:2d:
73:3e:61:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:07:05 2025 by rpki-client