This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F6A12F0CFA911F0B42ADFD5DAE4EC9C.roa
File: 9F6A12F0CFA911F0B42ADFD5DAE4EC9C.roa (raw, json)
Hash identifier: iHurrGW6bgeJgiDyICVxZjJbvsmxlsZz9SvlPmWy98M=
Subject key identifier: 69:4D:2F:B4:7A:22:88:80:08:5B:6B:29:2D:6D:9E:56:D8:D1:09:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018B3D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F6A12F0CFA911F0B42ADFD5DAE4EC9C.roa
Signing time: Tue 02 Dec 2025 18:06:28 +0000
ROA not before: Tue 02 Dec 2025 18:06:23 +0000
ROA not after: Sun 19 Nov 2028 18:06:23 +0000
asID: 17561
IP address blocks: 156.252.235.0/24 maxlen: 24
156.252.236.0/24 maxlen: 24
156.252.237.0/24 maxlen: 24
156.252.238.0/24 maxlen: 24
156.252.239.0/24 maxlen: 24
156.252.240.0/24 maxlen: 24
156.252.241.0/24 maxlen: 24
156.252.242.0/24 maxlen: 24
156.252.243.0/24 maxlen: 24
156.252.244.0/24 maxlen: 24
156.252.245.0/24 maxlen: 24
156.252.246.0/24 maxlen: 24
156.252.247.0/24 maxlen: 24
156.252.248.0/24 maxlen: 24
156.252.249.0/24 maxlen: 24
156.252.250.0/24 maxlen: 24
156.252.251.0/24 maxlen: 24
156.252.252.0/24 maxlen: 24
156.252.253.0/24 maxlen: 24
156.252.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101181 (0x18b3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 2 18:06:23 2025 GMT
Not After : Nov 19 18:06:23 2028 GMT
Subject: CN=692f2aa4-3ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:47:8a:c3:41:12:10:eb:7b:6a:ae:26:67:0e:
12:23:dc:bc:a4:92:8c:d6:e7:56:62:15:52:13:06:
6a:1d:a7:f8:2a:5b:d0:be:53:5f:30:f7:55:f8:c9:
f9:cd:ca:8d:56:c3:9d:82:c2:82:ba:a9:ce:e9:c2:
6d:74:94:37:91:96:23:e0:d2:ba:99:4d:3e:c5:4f:
8c:8e:3e:39:1d:49:c9:6b:71:8c:c6:6f:0e:91:90:
36:c3:fc:14:6f:c9:20:26:31:d2:07:f8:ce:ce:94:
c5:d7:0a:3f:83:16:9e:13:e7:64:d4:20:36:26:ed:
98:03:0e:2a:65:ca:ec:5f:e6:f9:f4:37:35:b8:80:
be:4e:9c:bf:4b:71:6c:1b:60:bf:9b:39:01:b0:fe:
71:e7:67:21:e5:a7:c6:15:a1:b9:1f:ad:ae:6c:95:
34:da:e5:94:b8:92:fd:4e:11:48:01:64:d0:17:14:
b8:46:90:ef:ba:e5:5f:14:b6:b9:33:34:bc:96:98:
6a:62:26:75:a6:cf:cb:55:30:e9:10:72:ae:a4:24:
c3:2d:7d:47:a4:50:5d:42:d9:bb:65:13:20:24:f1:
57:1f:08:77:a4:a5:b3:08:db:39:0a:75:15:de:93:
95:c6:82:77:89:5c:d6:f8:fa:76:63:dd:68:8a:89:
02:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:4D:2F:B4:7A:22:88:80:08:5B:6B:29:2D:6D:9E:56:D8:D1:09:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F6A12F0CFA911F0B42ADFD5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.252.235.0-156.252.254.255
Signature Algorithm: sha256WithRSAEncryption
6b:83:70:d6:d9:ea:be:0b:d8:2b:79:45:ed:35:5e:f1:95:6a:
b6:9b:0d:10:f1:26:86:30:1a:f5:de:a5:95:40:4e:2f:17:bb:
46:59:16:db:b2:ce:9f:a7:1d:73:3b:f6:65:4c:c1:83:d9:2a:
8d:38:ae:73:a2:2f:55:ab:6f:d7:b1:cf:b0:32:8a:d0:49:b2:
1b:6b:25:7e:8b:ca:77:40:2d:e7:11:4e:72:39:da:06:37:27:
c8:6f:1f:3b:9b:2f:bf:dc:f2:4d:9f:fb:a7:24:22:19:2c:3e:
81:0c:c3:a2:56:a6:42:a4:d5:15:b4:07:65:79:f7:00:ec:1a:
b1:44:6f:43:4c:46:95:9f:d3:e0:ec:4c:c3:e0:d8:1e:d6:2b:
c1:de:35:14:08:80:66:2c:7e:3d:36:e6:7f:b2:f2:71:de:03:
b8:54:2c:ac:7d:8a:5a:45:a4:1b:db:f7:00:cb:34:a2:86:c1:
21:55:77:81:8d:a8:f3:3e:9b:52:c3:f7:43:8d:ce:18:e1:33:
bc:9f:01:b5:f4:4f:c7:ba:9f:55:52:6c:5a:23:b9:16:90:4b:
c2:21:fa:d3:0c:72:b2:87:9e:9c:7f:12:2e:a4:be:33:d8:ef:
42:c4:77:23:8b:b4:9d:12:a4:bf:14:8d:62:05:a7:98:ed:70:
42:5f:93:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:49:15 2025 by rpki-client