This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29E60176CFBB11F08A5EF5C3DAE4EC9C.roa File: 29E60176CFBB11F08A5EF5C3DAE4EC9C.roa (raw, json) Hash identifier: wr97+m9HeLbBq5rRAgW6nIlvojEB1qxuQBAnw+yCZ8c= Subject key identifier: AD:91:F7:1E:E2:22:D5:B4:77:1E:43:AB:07:66:77:10:55:38:D9:41 Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Certificate serial: 018B5D Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29E60176CFBB11F08A5EF5C3DAE4EC9C.roa Signing time: Tue 02 Dec 2025 20:12:02 +0000 ROA not before: Tue 02 Dec 2025 20:11:55 +0000 ROA not after: Mon 27 Nov 2028 20:11:55 +0000 asID: 17561 IP address blocks: 156.243.208.0/24 maxlen: 24 156.243.209.0/24 maxlen: 24 156.243.210.0/24 maxlen: 24 156.243.211.0/24 maxlen: 24 156.243.212.0/24 maxlen: 24 156.243.213.0/24 maxlen: 24 156.243.214.0/24 maxlen: 24 156.243.215.0/24 maxlen: 24 156.243.238.0/24 maxlen: 24 156.243.239.0/24 maxlen: 24 156.244.134.0/24 maxlen: 24 156.244.137.0/24 maxlen: 24 156.244.139.0/24 maxlen: 24 156.244.140.0/24 maxlen: 24 156.244.195.0/24 maxlen: 24 156.244.199.0/24 maxlen: 24 156.244.212.0/24 maxlen: 24 156.244.215.0/24 maxlen: 24 156.244.218.0/24 maxlen: 24 156.244.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101213 (0x18b5d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Validity Not Before: Dec 2 20:11:55 2025 GMT Not After : Nov 27 20:11:55 2028 GMT Subject: CN=692f4812-e665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a3:45:16:19:19:2c:be:49:8a:00:db:20:92: e4:d5:98:64:05:f6:ca:30:ec:d3:8b:01:ba:1a:5c: cd:3a:4a:31:2a:31:ee:02:72:91:1c:da:57:82:b0: 39:af:c6:1e:40:0c:17:98:aa:fe:01:b4:95:b3:38: d6:8a:19:a1:7f:27:50:33:03:ed:a9:b5:a2:ad:5a: 64:1c:fc:94:1d:e4:30:a0:b7:d1:bc:c4:e6:12:8e: df:5f:cc:4f:1f:f3:be:a4:24:68:e0:09:a6:7b:53: 0c:b7:21:51:71:f3:27:98:4c:07:a0:7c:d2:d3:a4: 81:35:9c:23:64:b7:a2:86:01:c4:e3:b2:8c:a9:d3: 3c:f4:db:46:1b:8c:91:26:ae:9d:f1:65:01:54:33: 34:54:ee:9d:23:28:e4:0d:d0:7e:bf:b5:f3:99:80: d7:97:bd:81:ab:95:5c:d1:1d:61:78:c2:c2:45:c2: 6a:70:7e:0a:a7:b3:b4:d1:a2:41:f2:ba:b5:5d:02: f1:1a:e0:5d:5c:25:3e:3e:76:6c:05:ab:71:8b:05: 92:43:d5:82:54:d0:37:f3:7b:d7:26:05:0e:d7:22: 04:0b:e3:86:9a:67:da:bb:cc:3a:c2:87:60:1f:1f: 97:bb:22:f7:e9:38:d7:75:23:53:6e:cc:73:65:8a: f2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:91:F7:1E:E2:22:D5:B4:77:1E:43:AB:07:66:77:10:55:38:D9:41 X509v3 Authority Key Identifier: keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/29E60176CFBB11F08A5EF5C3DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 156.243.208.0/21 156.243.238.0/23 156.244.134.0/24 156.244.137.0/24 156.244.139.0-156.244.140.255 156.244.195.0/24 156.244.199.0/24 156.244.212.0/24 156.244.215.0/24 156.244.218.0/24 156.244.220.0/24 Signature Algorithm: sha256WithRSAEncryption 55:d1:70:87:31:25:d5:fa:5c:1c:ba:53:eb:e4:42:e5:7f:27: b0:ec:9c:4a:a1:18:6d:14:4b:e0:84:c7:b9:dc:ca:e8:61:9c: 23:31:b3:ec:2e:e4:8e:6e:76:9b:c2:3e:ff:bb:1b:15:35:ea: fb:88:05:40:c3:5c:a2:50:87:2a:2a:7c:99:47:99:f5:9a:d7: 74:56:41:a1:24:27:0d:59:fe:4b:dd:2d:ec:7e:bb:3d:f3:45: f7:f4:ff:a6:fc:22:4e:a4:42:66:7d:17:03:ea:5c:4a:20:19: a8:d8:63:32:36:1c:96:88:6d:55:65:54:ad:ee:22:07:ef:03: 74:7a:55:a8:a3:8f:6f:c1:17:44:b7:e6:1d:2d:4c:0f:5c:14: 69:1f:77:fe:51:56:74:0e:be:cf:c0:82:af:d1:02:95:99:ea: a9:ba:a9:27:45:5a:ec:12:87:8a:8a:cc:7f:99:d6:0e:44:81: 3e:32:a8:4a:b1:ff:09:22:9a:f9:71:3d:d3:4f:03:82:31:aa: d8:1a:75:fb:2c:ad:ea:0f:11:45:77:01:96:8e:ac:7c:7b:00: 08:40:df:08:2e:7e:81:f8:67:70:06:84:97:cd:14:80:02:63: b5:50:a7:e0:d6:ba:65:b0:ef:f9:d6:5e:1c:a3:dc:34:87:20: 10:0b:56:c7 -----BEGIN CERTIFICATE----- MIIFxTCCBK2gAwIBAgIDAYtdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5 QkFFQTZCRkQ2OUIwHhcNMjUxMjAyMjAxMTU1WhcNMjgxMTI3MjAxMTU1WjAYMRYw FAYDVQQDEw02OTJmNDgxMi1lNjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEApaNFFhkZLL5JigDbIJLk1ZhkBfbKMOzTiwG6GlzNOkoxKjHuAnKRHNpX grA5r8YeQAwXmKr+AbSVszjWihmhfydQMwPtqbWirVpkHPyUHeQwoLfRvMTmEo7f X8xPH/O+pCRo4Amme1MMtyFRcfMnmEwHoHzS06SBNZwjZLeihgHE47KMqdM89NtG G4yRJq6d8WUBVDM0VO6dIyjkDdB+v7XzmYDXl72Bq5Vc0R1heMLCRcJqcH4Kp7O0 0aJB8rq1XQLxGuBdXCU+PnZsBatxiwWSQ9WCVNA383vXJgUO1yIEC+OGmmfau8w6 wodgHx+XuyL36TjXdSNTbsxzZYrybQIDAQABo4IC5jCCAuIwHQYDVR0OBBYEFK2R 9x7iItW0dx5DqwdmdxBVONlBMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF QTIyOC8yOUU2MDE3NkNGQkIxMUYwOEE1RUY1QzNEQUU0RUM5Qy5yb2EwNQYIKwYB BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s MGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKAwQDnPPQAwQBnPPuAwQAnPSGAwQA nPSJMAwDBACc9IsDBACc9IwDBACc9MMDBACc9McDBACc9NQDBACc9NcDBACc9NoD BACc9NwwDQYJKoZIhvcNAQELBQADggEBAFXRcIcxJdX6XBy6U+vkQuV/J7DsnEqh GG0US+CEx7ncyuhhnCMxs+wu5I5udpvCPv+7GxU16vuIBUDDXKJQhyoqfJlHmfWa 13RWQaEkJw1Z/kvdLex+uz3zRff0/6b8Ik6kQmZ9FwPqXEogGajYYzI2HJaIbVVl VK3uIgfvA3R6Vaijj2/BF0S35h0tTA9cFGkfd/5RVnQOvs/Agq/RApWZ6qm6qSdF WuwSh4qKzH+Z1g5EgT4yqEqx/wkimvlxPdNPA4IxqtgadfssreoPEUV3AZaOrHx7 AAhA3wgufoH4Z3AGhJfNFIACY7VQp+DWumWw7/nWXhyj3DSHIBALVsc= -----END CERTIFICATE-----Generated at Wed Dec 3 10:07:45 2025 by rpki-client