This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/954B18AAC3BF11F08C6395F5DAE4EC9C.roa
File: 954B18AAC3BF11F08C6395F5DAE4EC9C.roa (raw, json)
Hash identifier: td4QzHPxqvHvi+N8KR8Fgln/2OaWKaTnRctPqZoNAd8=
Subject key identifier: 04:87:1C:3D:A0:11:2B:18:FE:CB:CD:DA:36:A9:30:9B:08:C8:A3:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0187F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/954B18AAC3BF11F08C6395F5DAE4EC9C.roa
Signing time: Mon 17 Nov 2025 14:13:26 +0000
ROA not before: Mon 17 Nov 2025 14:13:18 +0000
ROA not after: Wed 24 Dec 2025 14:13:18 +0000
asID: 395886
IP address blocks: 156.239.24.0/21 maxlen: 24
156.239.32.0/20 maxlen: 24
156.239.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100337 (0x187f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 17 14:13:18 2025 GMT
Not After : Dec 24 14:13:18 2025 GMT
Subject: CN=691b2d86-98d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c6:4b:3e:37:9a:74:11:01:b0:ad:27:55:20:
76:70:2c:71:82:53:9f:52:e5:11:cd:2a:a1:56:6d:
2d:2c:6d:ed:8b:d1:a1:ac:bf:41:d9:83:ce:79:ef:
0b:87:c4:fb:5c:dc:a5:43:84:e9:3c:de:d4:2e:f6:
9c:ff:67:37:01:1d:60:ba:4d:09:40:06:f5:55:f1:
81:29:1d:37:23:01:ff:9f:7e:27:e1:5e:9b:f2:12:
1d:9d:79:6b:f1:ba:be:80:7f:7d:d9:8c:d6:4c:71:
72:21:c2:79:96:1e:66:53:de:fb:06:bb:2a:43:f0:
fd:e7:f1:00:76:3f:e5:06:00:6c:a5:e5:8e:31:d7:
69:7b:20:1d:75:83:af:21:ea:62:b8:f9:31:fb:a1:
4d:ce:ca:04:e5:3a:8c:e0:87:ce:56:4f:19:44:3e:
ed:41:52:d3:a3:84:b3:60:6c:39:2b:f5:04:86:d0:
5b:56:cc:27:90:2c:f8:63:50:b1:81:eb:c8:84:b7:
f3:61:62:7c:59:2e:92:5f:35:f8:d5:ff:ab:aa:fa:
fe:a1:e8:f8:9b:f6:40:35:06:3f:c3:c8:d4:b9:ae:
cc:d3:35:a6:13:74:07:a7:f1:47:c5:ad:06:57:96:
3c:5a:1a:01:e1:d6:86:d3:99:fa:73:a3:bc:72:80:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:87:1C:3D:A0:11:2B:18:FE:CB:CD:DA:36:A9:30:9B:08:C8:A3:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/954B18AAC3BF11F08C6395F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.24.0-156.239.51.255
Signature Algorithm: sha256WithRSAEncryption
05:c3:a3:56:f9:80:d3:ab:b0:16:69:88:b5:3e:45:59:93:1f:
4e:a6:41:b6:ea:f3:93:5f:9e:93:df:e1:86:42:5c:b9:9a:77:
89:28:9a:c4:92:2d:14:18:19:5d:a5:09:b9:68:af:48:48:f9:
8f:57:32:e5:b3:12:13:7b:c3:bd:fb:b1:f8:7a:28:23:1d:a6:
d9:fa:f8:9f:4c:54:b1:74:e0:23:77:81:4c:4b:57:9f:2b:12:
19:6e:be:7f:13:5e:9f:1f:1b:7c:cb:6a:1e:17:2b:25:e1:08:
d7:8e:64:a3:69:e6:83:2c:a7:bc:82:7f:f8:2f:45:d6:57:34:
25:b6:83:49:c2:ae:32:44:00:72:8a:a1:8d:01:30:8f:de:26:
f2:f8:96:b8:af:ba:8a:92:c5:01:bc:37:67:e9:a2:38:7a:2d:
59:1e:39:85:e9:44:08:c9:d3:00:72:0b:95:3a:4f:d4:f4:bd:
25:68:69:5c:b6:2a:af:bd:ce:3b:22:b3:bc:ef:23:1d:81:6b:
2a:3b:18:89:13:b7:07:89:79:13:9c:c3:66:09:3f:7d:76:76:
32:e6:d3:71:9a:5f:8d:47:85:ac:c8:e5:10:93:de:3b:86:e1:
11:51:0c:d7:08:8b:e5:f4:5f:54:75:af:1e:6e:d3:6f:d6:5b:
1b:a5:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:06:57 2025 by rpki-client