This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BDA906ACE8911F0A31AE0CDDAE4EC9C.roa
File: 2BDA906ACE8911F0A31AE0CDDAE4EC9C.roa (raw, json)
Hash identifier: l6e8pCLbOeF7Q4fAKFH36g5HiTjEFOR7e3IqTrPnUyQ=
Subject key identifier: E3:A6:C2:E9:42:44:D9:D5:2D:EA:00:75:A5:5D:3B:59:DA:44:92:41
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018A87
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BDA906ACE8911F0A31AE0CDDAE4EC9C.roa
Signing time: Mon 01 Dec 2025 07:41:39 +0000
ROA not before: Mon 01 Dec 2025 07:41:35 +0000
ROA not after: Wed 31 Dec 2025 07:41:35 +0000
asID: 44559
IP address blocks: 156.238.180.0/24 maxlen: 24
156.238.182.0/24 maxlen: 24
156.239.17.0/24 maxlen: 24
156.239.19.0/24 maxlen: 24
156.239.20.0/24 maxlen: 24
156.239.132.0/24 maxlen: 24
156.239.133.0/24 maxlen: 24
156.239.135.0/24 maxlen: 24
156.243.228.0/24 maxlen: 24
156.249.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100999 (0x18a87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 1 07:41:35 2025 GMT
Not After : Dec 31 07:41:35 2025 GMT
Subject: CN=692d46b3-b9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:0d:10:c9:36:03:96:5c:3f:e7:75:68:6b:
6f:4b:1a:24:8f:bd:e8:4b:80:fb:69:d9:2f:70:a1:
48:e4:d4:bd:fe:09:c6:b5:91:c9:29:87:56:4e:45:
6c:25:d2:c5:3d:6e:27:10:f3:c1:f1:dd:c7:3c:23:
cd:70:60:33:9c:3e:f6:61:42:cc:4c:76:97:8a:3c:
34:e2:75:1c:4e:c7:c0:14:ee:5d:db:6c:20:9e:d2:
a9:f8:43:47:21:4d:38:fe:92:d8:7f:43:81:d3:6b:
e8:f9:8a:bd:a6:55:82:d9:78:16:53:d2:68:f6:44:
8d:76:0e:56:dd:73:92:0d:c3:60:b1:9f:b4:51:13:
a9:e8:61:a5:18:3c:cf:fd:2f:56:f0:dc:55:e9:ee:
84:fb:ad:ce:c6:3f:01:4e:af:31:e4:9c:2a:f8:95:
98:7b:5c:88:b1:d0:fc:79:e7:11:e0:be:1b:69:44:
ff:67:10:4c:37:7c:b3:8e:92:78:10:75:2f:5b:6c:
47:bc:9e:21:e6:d0:e1:18:9c:e2:4e:99:59:3e:a6:
20:d7:8f:7e:72:0f:06:d4:a4:d4:f5:83:88:60:47:
ab:98:1d:d8:ba:10:4d:8d:f5:b6:27:43:ee:6a:90:
a8:80:8a:30:fd:76:da:47:0a:27:36:49:81:9b:3e:
85:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A6:C2:E9:42:44:D9:D5:2D:EA:00:75:A5:5D:3B:59:DA:44:92:41
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BDA906ACE8911F0A31AE0CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.180.0/24
156.238.182.0/24
156.239.17.0/24
156.239.19.0-156.239.20.255
156.239.132.0/23
156.239.135.0/24
156.243.228.0/24
156.249.102.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a5:66:3f:e5:1d:dc:57:37:05:66:8a:ba:14:cd:3a:1a:7f:
34:bc:d2:10:dd:80:79:16:a8:5a:31:4c:d5:68:5b:d3:a3:a7:
ca:07:ce:9d:36:01:d6:88:6c:6a:c3:15:89:df:8b:41:13:44:
1a:cc:6c:df:07:cd:12:b9:f2:9a:ec:33:53:7c:90:53:84:e4:
1a:92:a0:b8:45:f5:0c:a1:c6:b7:1d:dc:d5:ac:5e:b3:d2:89:
f7:d1:5e:17:06:a4:c1:18:45:ff:37:c7:f3:0b:88:64:44:4f:
e5:f1:b3:40:db:fa:0d:b2:e3:88:a1:23:b1:3a:e5:53:b7:ae:
1f:47:c4:d6:26:12:a5:13:bc:4f:7f:a5:fc:fe:10:c5:b4:64:
fc:7b:ec:77:4a:a6:09:f4:04:2d:6c:08:2f:47:7f:b9:b8:10:
1d:2c:ee:0f:73:11:d0:ab:8a:87:22:04:aa:0d:5e:47:b3:b2:
32:2d:a6:cd:c6:ac:6c:49:4d:e8:d5:17:71:ac:79:6b:96:6c:
d0:2f:8f:18:a4:98:71:4d:be:58:d3:18:74:8c:aa:39:9b:65:
27:5d:2f:55:55:da:58:26:36:f7:98:88:de:32:09:87:86:17:
07:39:9f:21:89:4f:3f:b4:6f:6b:fd:c0:47:33:59:87:88:6c:
72:1c:de:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:07 2025 by rpki-client