This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DF23958DF4811F0B0667DCEDAE4EC9C.roa
File: 4DF23958DF4811F0B0667DCEDAE4EC9C.roa (raw, json)
Hash identifier: 7zhtX3N2WrIT9+BNHBiqvj6gwkvPgF9ek1mMfp5GTpI=
Subject key identifier: 5F:1E:F8:55:A9:43:50:14:B8:04:8C:98:22:12:FE:62:BD:00:DD:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019081
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DF23958DF4811F0B0667DCEDAE4EC9C.roa
Signing time: Mon 22 Dec 2025 15:10:09 +0000
ROA not before: Mon 22 Dec 2025 15:10:03 +0000
ROA not after: Wed 28 Jan 2026 15:10:03 +0000
asID: 62240
IP address blocks: 45.192.32.0/24 maxlen: 24
45.192.33.0/24 maxlen: 24
45.192.34.0/24 maxlen: 24
45.192.35.0/24 maxlen: 24
45.192.36.0/24 maxlen: 24
45.192.37.0/24 maxlen: 24
45.192.38.0/24 maxlen: 24
45.192.39.0/24 maxlen: 24
45.192.40.0/24 maxlen: 24
45.192.41.0/24 maxlen: 24
45.192.42.0/24 maxlen: 24
45.192.43.0/24 maxlen: 24
45.192.44.0/24 maxlen: 24
45.192.45.0/24 maxlen: 24
45.192.46.0/24 maxlen: 24
45.192.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Dec 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102529 (0x19081)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 22 15:10:03 2025 GMT
Not After : Jan 28 15:10:03 2026 GMT
Subject: CN=69495f51-99ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:26:1d:ec:69:d3:fe:c4:80:a9:47:bc:f2:b1:
1f:12:eb:41:f7:a6:68:0f:74:b1:9f:f4:44:c4:f6:
a5:58:47:fd:8e:8e:db:90:67:7a:37:78:c3:1b:da:
58:fd:6e:66:57:41:1c:3c:f2:2c:23:bf:ef:f1:2f:
1a:21:f5:99:44:62:88:14:b5:7f:1f:c5:e9:ab:99:
3e:56:37:d7:99:40:63:50:82:ba:f8:38:90:48:ee:
54:2f:d8:56:c9:65:a0:c2:86:54:9a:18:1c:10:71:
e3:80:5d:56:77:c5:e8:bd:e9:59:0e:db:01:72:4b:
1d:ad:41:26:c2:16:c6:8b:ac:51:b6:e7:a3:71:60:
97:03:76:70:54:70:e8:13:4f:a1:47:76:fb:5c:d6:
68:65:e3:8b:a6:7c:6d:bb:59:8c:9a:7e:a3:81:18:
59:4a:01:25:38:3d:61:d4:b5:27:eb:3d:32:cd:19:
98:47:da:d4:2a:7c:0e:4c:48:88:e9:b0:14:db:1b:
d8:39:fd:0d:cd:d6:19:da:34:61:63:00:9c:44:c8:
d8:6f:78:36:a4:21:26:8c:a9:9a:c6:8d:1e:b2:9d:
91:9f:4f:32:72:66:c9:0f:88:a0:a0:df:5e:be:24:
26:9e:5f:a1:8c:bf:a1:fd:42:f0:25:ad:7c:7f:96:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1E:F8:55:A9:43:50:14:B8:04:8C:98:22:12:FE:62:BD:00:DD:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4DF23958DF4811F0B0667DCEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.32.0/20
Signature Algorithm: sha256WithRSAEncryption
8b:b0:3f:25:3d:6b:74:88:ec:58:8f:23:bd:9e:7a:a4:85:37:
e5:59:36:14:04:b4:94:21:fd:47:35:c7:6f:96:03:d2:b6:0b:
88:a7:0f:81:f1:29:3a:09:2a:7c:dd:45:87:33:86:5e:45:ff:
b7:d0:0b:9e:b5:8d:8f:98:1d:11:2c:f4:4d:16:33:c0:44:38:
90:c3:2c:0d:da:75:b6:15:52:76:b1:40:c0:ef:d0:ec:d7:b5:
7f:54:00:80:c9:1d:1a:0c:cb:a5:d8:70:af:fd:37:1a:1a:c9:
bb:65:37:81:39:fc:08:04:0c:ef:f2:e9:11:99:24:33:b1:ef:
86:4e:9c:d9:8e:ed:3d:72:c7:66:c8:c0:eb:41:ec:2d:c8:96:
72:d9:44:ce:58:ea:da:d0:a9:37:ec:b4:00:cd:6c:23:f1:da:
a0:f0:c7:e6:4b:38:85:5e:5b:0a:29:ab:91:7d:f0:de:d8:b1:
d3:48:f9:07:fb:96:90:6e:8f:22:6e:99:9d:2b:c2:fe:97:af:
be:da:d2:e7:50:52:49:b3:67:9f:fb:aa:6e:cf:78:46:46:df:
8b:2b:4c:51:30:b9:1c:bf:83:4f:70:09:04:d9:a3:ed:10:46:
65:51:96:c5:63:3c:7f:2f:82:c7:61:fe:b2:0d:a3:35:6f:6f:
7c:ca:cd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 27 16:46:14 2025 by rpki-client