This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CB1D848CF7C11F0BD3B2DBEDAE4EC9C.roa File: 1CB1D848CF7C11F0BD3B2DBEDAE4EC9C.roa (raw, json) Hash identifier: mlXTmieRd+JJHBZ+UGO5XYKRMcqQ10O4UxQwudOAFSY= Subject key identifier: EF:B6:D5:00:0D:5F:9D:88:93:F2:50:67:6A:46:4D:98:D5:39:13:29 Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Certificate serial: 018ACE Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CB1D848CF7C11F0BD3B2DBEDAE4EC9C.roa Signing time: Tue 02 Dec 2025 12:40:42 +0000 ROA not before: Tue 02 Dec 2025 12:40:37 +0000 ROA not after: Tue 05 Sep 2028 12:40:37 +0000 asID: 17561 IP address blocks: 156.224.2.0/24 maxlen: 24 156.224.3.0/24 maxlen: 24 156.224.4.0/24 maxlen: 24 156.224.5.0/24 maxlen: 24 156.226.167.0/24 maxlen: 24 156.235.72.0/24 maxlen: 24 156.240.94.0/24 maxlen: 24 156.249.168.0/24 maxlen: 24 156.249.169.0/24 maxlen: 24 156.249.171.0/24 maxlen: 24 156.249.174.0/24 maxlen: 24 156.249.181.0/24 maxlen: 24 156.249.182.0/24 maxlen: 24 156.249.184.0/24 maxlen: 24 156.249.186.0/24 maxlen: 24 156.249.200.0/24 maxlen: 24 156.249.201.0/24 maxlen: 24 156.249.202.0/24 maxlen: 24 156.253.2.0/24 maxlen: 24 156.253.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101070 (0x18ace) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Validity Not Before: Dec 2 12:40:37 2025 GMT Not After : Sep 5 12:40:37 2028 GMT Subject: CN=692ede49-c3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:3c:88:e5:b1:0d:4c:f6:18:f2:37:7d:e8:5a: bd:a7:5b:5d:6a:18:c4:28:1e:de:03:f0:c9:5a:56: c1:35:71:0b:7a:b5:41:2b:26:a4:43:32:57:d9:99: ab:fb:0f:77:af:df:2e:81:e6:0e:da:14:cc:6c:da: 92:d2:5c:6c:d4:ca:a5:26:7b:5c:97:77:f7:47:f3: 67:3f:c4:91:4f:9d:31:8b:1a:a5:ad:5d:1c:6b:57: c5:5b:0c:8c:d8:06:dd:e2:11:19:83:13:34:9f:17: 2d:d0:0d:11:90:a9:f3:3d:27:a2:95:a1:7b:d4:a8: d4:da:f0:6e:b0:3d:cc:62:ae:ae:6a:98:cc:27:e7: 45:61:09:5d:df:28:b1:7c:21:f3:3b:d6:a5:47:ef: 07:33:89:4f:45:40:5d:8a:ae:ad:c9:9c:c7:f1:41: c0:4a:19:ab:bf:a4:83:15:29:d2:07:79:8f:76:47: 4c:68:5e:e7:87:b4:60:0e:fc:1c:b4:71:6e:2e:9e: 3d:7b:80:ee:ea:5a:88:aa:b1:c2:47:7b:95:76:9c: 0a:e1:8c:14:7e:37:65:17:4b:74:68:8a:19:be:54: 8e:29:e0:c2:ec:f6:af:05:77:ce:4e:58:b9:4b:7c: 8b:55:fc:33:32:4b:1f:1c:27:4b:f9:fa:ec:d8:52: c0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B6:D5:00:0D:5F:9D:88:93:F2:50:67:6A:46:4D:98:D5:39:13:29 X509v3 Authority Key Identifier: keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1CB1D848CF7C11F0BD3B2DBEDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 156.224.2.0-156.224.5.255 156.226.167.0/24 156.235.72.0/24 156.240.94.0/24 156.249.168.0/23 156.249.171.0/24 156.249.174.0/24 156.249.181.0-156.249.182.255 156.249.184.0/24 156.249.186.0/24 156.249.200.0-156.249.202.255 156.253.2.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:87:0b:91:c5:fc:23:bc:bd:53:1f:9e:a1:6c:4d:e6:de:2f: 87:cc:19:3d:71:c9:99:ba:47:58:94:5d:6e:31:a0:90:4e:e4: 66:13:4f:e2:22:54:29:55:98:32:49:89:42:18:33:a8:e3:ad: ed:97:3b:e2:77:98:fd:d1:4f:90:56:3c:27:9a:bf:07:7a:94: 92:95:42:ae:64:47:5f:fa:3c:69:e2:2e:24:4b:94:25:21:56: e8:6d:4e:a4:a2:02:33:59:79:e6:e5:72:dd:09:8a:49:58:5e: 2f:b5:3b:ca:9d:53:29:0d:74:e3:e4:1a:da:44:bb:c5:ef:28: 00:84:47:0a:26:d5:a8:81:db:60:30:45:90:b3:ba:9f:bc:03: 25:7f:31:ce:ba:f0:22:6b:86:af:97:eb:c0:e6:d3:08:43:71: 3b:81:b4:b5:05:b6:09:44:b1:56:a6:43:21:96:8d:b1:48:c7: f6:ea:ca:b4:7a:4b:02:9c:e1:44:f9:aa:4a:74:af:f1:20:e1: 55:42:e4:59:43:36:be:f6:44:e0:58:d2:c1:d9:8d:bd:25:e1: 99:93:ab:eb:f9:22:0e:c5:b2:21:6d:39:52:6c:7a:d9:e9:0b: fa:df:46:95:6d:33:86:dd:75:ce:02:c8:5e:a1:bf:6d:2f:2c: 93:9a:7a:f4 -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgIDAYrOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5 QkFFQTZCRkQ2OUIwHhcNMjUxMjAyMTI0MDM3WhcNMjgwOTA1MTI0MDM3WjAYMRYw FAYDVQQDEw02OTJlZGU0OS1jM2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA9zyI5bENTPYY8jd96Fq9p1tdahjEKB7eA/DJWlbBNXELerVBKyakQzJX 2Zmr+w93r98ugeYO2hTMbNqS0lxs1MqlJntcl3f3R/NnP8SRT50xixqlrV0ca1fF WwyM2Abd4hEZgxM0nxct0A0RkKnzPSeilaF71KjU2vBusD3MYq6uapjMJ+dFYQld 3yixfCHzO9alR+8HM4lPRUBdiq6tyZzH8UHAShmrv6SDFSnSB3mPdkdMaF7nh7Rg DvwctHFuLp49e4Du6lqIqrHCR3uVdpwK4YwUfjdlF0t0aIoZvlSOKeDC7PavBXfO Tli5S3yLVfwzMksfHCdL+frs2FLAHQIDAQABo4IC/DCCAvgwHQYDVR0OBBYEFO+2 1QANX52Ik/JQZ2pGTZjVORMpMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF QTIyOC8xQ0IxRDg0OENGN0MxMUYwQkQzQjJEQkVEQUU0RUM5Qy5yb2EwNQYIKwYB BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s MHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgMAwDBAGc4AIDBAGc4AQDBACc4qcD BACc60gDBACc8F4DBAGc+agDBACc+asDBACc+a4wDAMEAJz5tQMEAJz5tgMEAJz5 uAMEAJz5ujAMAwQDnPnIAwQAnPnKAwQBnP0CMA0GCSqGSIb3DQEBCwUAA4IBAQAd hwuRxfwjvL1TH56hbE3m3i+HzBk9ccmZukdYlF1uMaCQTuRmE0/iIlQpVZgySYlC GDOo463tlzvid5j90U+QVjwnmr8HepSSlUKuZEdf+jxp4i4kS5QlIVbobU6kogIz WXnm5XLdCYpJWF4vtTvKnVMpDXTj5BraRLvF7ygAhEcKJtWogdtgMEWQs7qfvAMl fzHOuvAia4avl+vA5tMIQ3E7gbS1BbYJRLFWpkMhlo2xSMf26sq0eksCnOFE+apK dK/xIOFVQuRZQza+9kTgWNLB2Y29JeGZk6vr+SIOxbIhbTlSbHrZ6Qv630aVbTOG 3XXOAsheob9tLyyTmnr0 -----END CERTIFICATE-----Generated at Wed Dec 3 10:06:16 2025 by rpki-client