This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56796A3ACFA611F0B83BAAC2DAE4EC9C.roa File: 56796A3ACFA611F0B83BAAC2DAE4EC9C.roa (raw, json) Hash identifier: Hbbbf3Eoe7Bl5dw6jh8JPotdPu1KfNs6WwPt8vWD10I= Subject key identifier: 2A:E7:67:18:C5:F3:EE:EF:1E:F4:47:7D:79:07:13:7C:6A:54:C2:D9 Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Certificate serial: 018B32 Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56796A3ACFA611F0B83BAAC2DAE4EC9C.roa Signing time: Tue 02 Dec 2025 17:42:57 +0000 ROA not before: Tue 02 Dec 2025 17:42:53 +0000 ROA not after: Sun 19 Nov 2028 17:42:53 +0000 asID: 17561 IP address blocks: 156.252.143.0/24 maxlen: 24 156.252.176.0/24 maxlen: 24 156.252.177.0/24 maxlen: 24 156.252.178.0/24 maxlen: 24 156.252.179.0/24 maxlen: 24 156.252.180.0/24 maxlen: 24 156.252.181.0/24 maxlen: 24 156.252.182.0/24 maxlen: 24 156.252.183.0/24 maxlen: 24 156.252.184.0/24 maxlen: 24 156.252.185.0/24 maxlen: 24 156.252.186.0/24 maxlen: 24 156.252.187.0/24 maxlen: 24 156.252.188.0/24 maxlen: 24 156.252.189.0/24 maxlen: 24 156.252.190.0/24 maxlen: 24 156.252.191.0/24 maxlen: 24 156.252.192.0/24 maxlen: 24 156.252.193.0/24 maxlen: 24 156.252.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101170 (0x18b32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Validity Not Before: Dec 2 17:42:53 2025 GMT Not After : Nov 19 17:42:53 2028 GMT Subject: CN=692f2521-9121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:00:79:1b:11:ed:07:8e:14:e9:d9:33:e4:7e: cd:e4:49:12:70:fd:9b:b3:e2:5b:f7:66:6a:34:1c: 6a:00:30:f4:34:00:59:9b:aa:e8:fe:bf:cb:8a:44: 21:a4:29:9b:2d:96:4b:1d:c6:a7:d2:5b:0e:5b:8b: a9:cc:8d:83:d1:a3:bb:36:7f:8f:76:d3:7f:a1:dc: dd:4b:5c:ef:bc:c1:0d:16:27:43:7f:c1:fb:2c:d3: 1a:6c:ff:71:9d:2c:f1:78:04:56:c8:3e:c9:2b:fb: f4:5f:12:12:7b:c0:1f:a0:5e:c0:9a:7b:88:9c:ae: ac:10:64:1d:f0:c0:01:92:d5:33:44:40:b2:98:bb: f7:ef:4b:ed:bb:13:69:5f:45:98:69:62:09:6e:eb: 3f:68:a9:1a:83:2b:f1:23:b0:a9:85:5f:3d:b4:29: 5b:95:20:41:4d:0d:5e:97:6a:ff:7b:c4:f7:98:df: 88:3a:c8:55:09:23:d1:e0:a1:de:d9:b7:94:22:4c: 2b:43:2f:57:be:19:24:7e:73:7b:99:ae:49:c6:f8: 25:3a:d3:ae:7c:52:39:30:12:a5:a1:55:d8:58:ec: 56:98:af:b3:b3:52:f1:66:b4:a2:b6:57:59:e5:2e: a7:ad:ec:d8:99:ea:3b:32:db:1c:41:b9:05:7f:89: ff:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E7:67:18:C5:F3:EE:EF:1E:F4:47:7D:79:07:13:7C:6A:54:C2:D9 X509v3 Authority Key Identifier: keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/56796A3ACFA611F0B83BAAC2DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 156.252.143.0/24 156.252.176.0-156.252.194.255 Signature Algorithm: sha256WithRSAEncryption 8c:9c:e9:de:cb:cb:07:0c:85:b8:0e:e8:f1:cf:0a:e3:99:d1: e2:b8:19:55:cd:09:ae:eb:68:96:4b:b9:02:a9:f4:1e:3a:09: 00:d0:bb:13:85:8d:4c:98:24:75:45:cf:1a:26:99:41:da:8c: ce:c1:e5:46:b7:2c:d9:fb:bf:01:38:83:72:1a:86:e2:a6:f2: 80:27:61:9a:22:70:94:95:cd:3c:ed:53:4c:d8:a9:37:96:85: 43:ba:39:44:65:cd:23:2f:a5:79:36:83:88:e2:de:08:22:08: 11:bd:19:cf:f6:ba:fa:fb:fc:96:d5:03:7b:f5:6d:13:10:67: 91:e7:73:f9:7c:89:95:ad:66:67:77:1b:e4:86:39:3a:ef:ff: 81:bd:c3:a9:48:60:01:a9:16:02:eb:f6:5b:19:e6:15:6a:95: b3:e9:f3:d0:3b:8b:22:83:47:58:60:35:f5:fc:22:7e:7f:73: 9d:a1:14:70:e1:68:62:87:9e:86:72:15:95:57:02:95:24:2f: ff:01:27:a6:a3:4e:b8:0b:c3:54:e1:93:3b:e4:15:c0:97:38: 6f:19:5f:6f:2f:49:1d:02:93:f0:f5:d3:3b:32:f9:60:4c:8e: 70:ed:e4:c2:8b:c1:f5:1c:fb:d8:36:51:99:49:09:3f:07:94: 5c:e4:57:af -----BEGIN CERTIFICATE----- MIIFjzCCBHegAwIBAgIDAYsyMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5 QkFFQTZCRkQ2OUIwHhcNMjUxMjAyMTc0MjUzWhcNMjgxMTE5MTc0MjUzWjAYMRYw FAYDVQQDEw02OTJmMjUyMS05MTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEArQB5GxHtB44U6dkz5H7N5EkScP2bs+Jb92ZqNBxqADD0NABZm6ro/r/L ikQhpCmbLZZLHcan0lsOW4upzI2D0aO7Nn+PdtN/odzdS1zvvMENFidDf8H7LNMa bP9xnSzxeARWyD7JK/v0XxISe8AfoF7AmnuInK6sEGQd8MABktUzRECymLv370vt uxNpX0WYaWIJbus/aKkagyvxI7CphV89tClblSBBTQ1el2r/e8T3mN+IOshVCSPR 4KHe2beUIkwrQy9XvhkkfnN7ma5JxvglOtOufFI5MBKloVXYWOxWmK+zs1LxZrSi tldZ5S6nrezYmeo7MtscQbkFf4n/IQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFCrn ZxjF8+7vHvRHfXkHE3xqVMLZMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF QTIyOC81Njc5NkEzQUNGQTYxMUYwQjgzQkFBQzJEQUU0RUM5Qy5yb2EwNQYIKwYB BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAnPyPMAwDBASc/LADBACc/MIw DQYJKoZIhvcNAQELBQADggEBAIyc6d7LywcMhbgO6PHPCuOZ0eK4GVXNCa7raJZL uQKp9B46CQDQuxOFjUyYJHVFzxommUHajM7B5Ua3LNn7vwE4g3IahuKm8oAnYZoi cJSVzTztU0zYqTeWhUO6OURlzSMvpXk2g4ji3ggiCBG9Gc/2uvr7/JbVA3v1bRMQ Z5Hnc/l8iZWtZmd3G+SGOTrv/4G9w6lIYAGpFgLr9lsZ5hVqlbPp89A7iyKDR1hg NfX8In5/c52hFHDhaGKHnoZyFZVXApUkL/8BJ6ajTrgLw1ThkzvkFcCXOG8ZX28v SR0Ck/D10zsy+WBMjnDt5MKLwfUc+9g2UZlJCT8HlFzkV68= -----END CERTIFICATE-----Generated at Wed Dec 3 10:06:12 2025 by rpki-client