This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D1CC3A6CC5711F0A152E18DDAE4EC9C.roa File: 1D1CC3A6CC5711F0A152E18DDAE4EC9C.roa (raw, json) Hash identifier: c6AzmXU1AmkQx8vDdOK7P903lnxu5DCHfvOZHeSX2lA= Subject key identifier: F2:B7:75:EB:49:77:D4:E0:9F:5D:37:E5:05:0A:E2:36:F8:D8:FC:83 Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Certificate serial: 018A67 Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D1CC3A6CC5711F0A152E18DDAE4EC9C.roa Signing time: Fri 28 Nov 2025 12:38:17 +0000 ROA not before: Fri 28 Nov 2025 12:38:09 +0000 ROA not after: Thu 18 Dec 2025 12:38:09 +0000 asID: 399077 IP address blocks: 156.240.192.0/24 maxlen: 24 156.240.193.0/24 maxlen: 24 156.240.194.0/24 maxlen: 24 156.240.195.0/24 maxlen: 24 156.240.196.0/24 maxlen: 24 156.240.197.0/24 maxlen: 24 156.240.198.0/24 maxlen: 24 156.240.199.0/24 maxlen: 24 156.240.200.0/24 maxlen: 24 156.240.201.0/24 maxlen: 24 156.240.202.0/24 maxlen: 24 156.240.203.0/24 maxlen: 24 156.240.204.0/24 maxlen: 24 156.240.205.0/24 maxlen: 24 156.240.206.0/24 maxlen: 24 156.240.207.0/24 maxlen: 24 156.240.208.0/24 maxlen: 24 156.240.209.0/24 maxlen: 24 156.240.210.0/24 maxlen: 24 156.240.211.0/24 maxlen: 24 156.240.212.0/24 maxlen: 24 156.240.213.0/24 maxlen: 24 156.240.214.0/24 maxlen: 24 156.240.215.0/24 maxlen: 24 156.240.216.0/24 maxlen: 24 156.240.217.0/24 maxlen: 24 156.240.218.0/24 maxlen: 24 156.240.219.0/24 maxlen: 24 156.240.220.0/24 maxlen: 24 156.240.221.0/24 maxlen: 24 156.240.222.0/24 maxlen: 24 156.240.223.0/24 maxlen: 24 156.240.224.0/24 maxlen: 24 156.240.225.0/24 maxlen: 24 156.240.226.0/24 maxlen: 24 156.240.227.0/24 maxlen: 24 156.240.228.0/24 maxlen: 24 156.240.229.0/24 maxlen: 24 156.240.230.0/24 maxlen: 24 156.240.231.0/24 maxlen: 24 156.240.232.0/24 maxlen: 24 156.240.233.0/24 maxlen: 24 156.240.234.0/24 maxlen: 24 156.240.235.0/24 maxlen: 24 156.240.236.0/24 maxlen: 24 156.240.237.0/24 maxlen: 24 156.240.238.0/24 maxlen: 24 156.240.239.0/24 maxlen: 24 156.240.240.0/24 maxlen: 24 156.240.241.0/24 maxlen: 24 156.240.242.0/24 maxlen: 24 156.240.243.0/24 maxlen: 24 156.240.244.0/24 maxlen: 24 156.240.245.0/24 maxlen: 24 156.240.246.0/24 maxlen: 24 156.240.247.0/24 maxlen: 24 156.240.248.0/24 maxlen: 24 156.240.249.0/24 maxlen: 24 156.240.250.0/24 maxlen: 24 156.240.251.0/24 maxlen: 24 156.240.252.0/24 maxlen: 24 156.240.253.0/24 maxlen: 24 156.240.254.0/24 maxlen: 24 156.240.255.0/24 maxlen: 24 156.251.0.0/24 maxlen: 24 156.251.1.0/24 maxlen: 24 156.251.2.0/24 maxlen: 24 156.251.3.0/24 maxlen: 24 156.251.4.0/24 maxlen: 24 156.251.5.0/24 maxlen: 24 156.251.6.0/24 maxlen: 24 156.251.7.0/24 maxlen: 24 156.251.8.0/24 maxlen: 24 156.251.9.0/24 maxlen: 24 156.251.10.0/24 maxlen: 24 156.251.11.0/24 maxlen: 24 156.251.12.0/24 maxlen: 24 156.251.13.0/24 maxlen: 24 156.251.14.0/24 maxlen: 24 156.251.15.0/24 maxlen: 24 156.251.16.0/24 maxlen: 24 156.251.17.0/24 maxlen: 24 156.251.18.0/24 maxlen: 24 156.251.19.0/24 maxlen: 24 156.251.20.0/24 maxlen: 24 156.251.21.0/24 maxlen: 24 156.251.22.0/24 maxlen: 24 156.251.23.0/24 maxlen: 24 156.251.24.0/24 maxlen: 24 156.251.25.0/24 maxlen: 24 156.251.26.0/24 maxlen: 24 156.251.27.0/24 maxlen: 24 156.251.28.0/24 maxlen: 24 156.251.29.0/24 maxlen: 24 156.251.30.0/24 maxlen: 24 156.251.31.0/24 maxlen: 24 156.251.32.0/24 maxlen: 24 156.251.33.0/24 maxlen: 24 156.251.34.0/24 maxlen: 24 156.251.35.0/24 maxlen: 24 156.251.36.0/24 maxlen: 24 156.251.37.0/24 maxlen: 24 156.251.38.0/24 maxlen: 24 156.251.39.0/24 maxlen: 24 156.251.40.0/24 maxlen: 24 156.251.41.0/24 maxlen: 24 156.251.42.0/24 maxlen: 24 156.251.43.0/24 maxlen: 24 156.251.44.0/24 maxlen: 24 156.251.45.0/24 maxlen: 24 156.251.46.0/24 maxlen: 24 156.251.47.0/24 maxlen: 24 156.251.48.0/23 maxlen: 24 156.251.48.0/24 maxlen: 24 156.251.49.0/24 maxlen: 24 156.251.50.0/24 maxlen: 24 156.251.51.0/24 maxlen: 24 156.251.52.0/24 maxlen: 24 156.251.53.0/24 maxlen: 24 156.251.54.0/24 maxlen: 24 156.251.55.0/24 maxlen: 24 156.251.56.0/24 maxlen: 24 156.251.57.0/24 maxlen: 24 156.251.58.0/24 maxlen: 24 156.251.59.0/24 maxlen: 24 156.251.60.0/24 maxlen: 24 156.251.61.0/24 maxlen: 24 156.251.62.0/24 maxlen: 24 156.251.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100967 (0x18a67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Validity Not Before: Nov 28 12:38:09 2025 GMT Not After : Dec 18 12:38:09 2025 GMT Subject: CN=692997b9-b35c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:32:62:b5:cb:aa:8a:02:01:e4:d0:b6:4a:1b: 31:31:c2:5d:2c:63:60:8d:e3:54:e7:6d:73:b7:02: 61:85:75:97:b7:92:f8:bb:86:33:92:43:10:25:f1: ed:34:a2:69:23:ec:92:b2:fc:1f:86:0a:1b:49:f4: b5:a1:c8:9c:4a:9b:55:1b:33:e6:04:d8:75:34:3f: 28:e9:1c:81:10:8b:c0:7e:36:5b:03:67:5c:48:13: 15:7f:2e:e9:0d:cc:d5:f3:3f:a8:56:94:5d:b1:05: 24:f1:48:4c:25:79:4f:fa:ac:b7:dc:8f:c3:50:0d: 7a:26:69:9b:73:47:ec:7d:fc:b7:ec:f0:ef:a4:25: dc:13:8c:42:63:d2:57:c3:04:69:ea:bd:50:b6:38: ce:e3:c8:5f:3e:01:75:f9:7c:22:4e:f8:64:d6:ed: f0:f8:8b:0c:d9:af:b6:21:35:14:b2:ca:aa:be:51: aa:f1:e9:e5:6b:e9:b0:34:37:42:22:a0:67:be:d3: 90:07:21:57:b4:7a:85:ab:b3:92:30:d2:45:36:41: 83:4b:5b:de:f7:56:3e:ac:7d:27:e3:85:41:cf:96: 06:b6:a2:37:e8:58:a3:68:c0:ef:6c:e2:84:95:1a: 59:e5:98:68:b9:6b:98:5a:2e:f8:0f:14:93:f0:d4: de:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B7:75:EB:49:77:D4:E0:9F:5D:37:E5:05:0A:E2:36:F8:D8:FC:83 X509v3 Authority Key Identifier: keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1D1CC3A6CC5711F0A152E18DDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 156.240.192.0/18 156.251.0.0/18 Signature Algorithm: sha256WithRSAEncryption bb:0c:e7:80:3a:ef:be:a2:7f:55:f6:a9:12:85:1e:f7:4c:da: 49:4d:32:b1:bf:b2:1b:ef:df:00:96:4e:ae:65:a6:ba:d2:40: 04:24:43:6a:75:10:31:13:9a:2f:ce:27:bb:6e:b7:25:60:17: a0:76:38:9b:25:35:f8:f6:b3:4c:f0:32:f6:cd:8e:40:07:a3: 6f:8c:ad:87:76:8c:cc:84:dc:11:7e:e8:a7:33:dd:c2:6f:5f: 75:98:0e:0f:07:c2:8d:82:01:9c:cf:a8:3d:dd:8e:a9:cc:58: c0:0c:1f:c8:2c:38:9b:f4:6c:13:cb:79:fc:7c:38:e0:b2:ed: f1:a6:ab:34:1d:a8:dd:54:07:a8:da:10:82:fe:bf:23:1d:ef: 68:d2:27:58:95:df:9a:ed:57:95:55:bb:9c:5e:ab:a4:cc:d9: 20:ac:f9:ad:e2:f1:6e:e6:27:a0:3a:95:f9:19:13:f9:03:f7: 33:0f:99:88:f0:d0:8a:20:dc:66:53:3d:97:84:53:ac:3f:c5: ab:a8:db:27:dc:aa:de:1e:23:99:cf:fa:22:d2:f3:c3:ac:fe: ce:11:ac:d0:97:35:50:94:ca:61:ac:ff:c6:49:34:10:b6:e1: 0a:04:d7:43:ea:83:7b:f8:c2:48:60:fb:28:c5:59:c2:a1:a9: 0e:0c:b9:35 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgIDAYpnMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5 QkFFQTZCRkQ2OUIwHhcNMjUxMTI4MTIzODA5WhcNMjUxMjE4MTIzODA5WjAYMRYw FAYDVQQDEw02OTI5OTdiOS1iMzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAyTJitcuqigIB5NC2ShsxMcJdLGNgjeNU521ztwJhhXWXt5L4u4YzkkMQ JfHtNKJpI+ySsvwfhgobSfS1ocicSptVGzPmBNh1ND8o6RyBEIvAfjZbA2dcSBMV fy7pDczV8z+oVpRdsQUk8UhMJXlP+qy33I/DUA16Jmmbc0fsffy37PDvpCXcE4xC Y9JXwwRp6r1QtjjO48hfPgF1+XwiTvhk1u3w+IsM2a+2ITUUssqqvlGq8enla+mw NDdCIqBnvtOQByFXtHqFq7OSMNJFNkGDS1ve91Y+rH0n44VBz5YGtqI36FijaMDv bOKElRpZ5ZhouWuYWi74DxST8NTe3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPK3 detJd9Tgn1035QUK4jb42PyDMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF QTIyOC8xRDFDQzNBNkNDNTcxMUYwQTE1MkUxOEREQUU0RUM5Qy5yb2EwNQYIKwYB BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGnPDAAwQGnPsAMA0GCSqGSIb3 DQEBCwUAA4IBAQC7DOeAOu++on9V9qkShR73TNpJTTKxv7Ib798Alk6uZaa60kAE JENqdRAxE5ovzie7brclYBegdjibJTX49rNM8DL2zY5AB6NvjK2HdozMhNwRfuin M93Cb191mA4PB8KNggGcz6g93Y6pzFjADB/ILDib9GwTy3n8fDjgsu3xpqs0Hajd VAeo2hCC/r8jHe9o0idYld+a7VeVVbucXqukzNkgrPmt4vFu5iegOpX5GRP5A/cz D5mI8NCKINxmUz2XhFOsP8WrqNsn3KreHiOZz/oi0vPDrP7OEazQlzVQlMphrP/G STQQtuEKBNdD6oN7+MJIYPsoxVnCoakODLk1 -----END CERTIFICATE-----Generated at Wed Dec 3 10:05:56 2025 by rpki-client