This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDD10206C15A11F0ADA135DCDAE4EC9C.roa File: BDD10206C15A11F0ADA135DCDAE4EC9C.roa (raw, json) Hash identifier: gOkvm3ntag/yvQ8JPW2u8NQs8gW8rvkL/blYACiEi8I= Subject key identifier: 81:D5:AD:20:ED:C1:33:7E:A3:BA:CA:95:09:A6:02:E6:6C:F4:CE:58 Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Certificate serial: 01879D Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDD10206C15A11F0ADA135DCDAE4EC9C.roa Signing time: Fri 14 Nov 2025 13:06:33 +0000 ROA not before: Fri 14 Nov 2025 13:06:26 +0000 ROA not after: Fri 19 Dec 2025 13:06:26 +0000 asID: 11404 IP address blocks: 45.195.0.0/24 maxlen: 24 45.195.84.0/22 maxlen: 24 45.196.92.0/22 maxlen: 24 45.197.200.0/21 maxlen: 24 45.197.224.0/21 maxlen: 24 45.200.144.0/20 maxlen: 24 45.202.16.0/20 maxlen: 24 45.204.32.0/20 maxlen: 24 45.204.112.0/20 maxlen: 24 45.205.176.0/20 maxlen: 24 45.205.240.0/20 maxlen: 24 45.206.128.0/18 maxlen: 24 45.206.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100253 (0x1879d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Validity Not Before: Nov 14 13:06:26 2025 GMT Not After : Dec 19 13:06:26 2025 GMT Subject: CN=69172959-ca94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:98:dc:ef:e7:b2:22:b9:7e:9e:17:27:e7: 54:73:4d:1d:3d:70:9a:04:04:5a:39:6a:4e:c5:d3: 3b:29:3b:a7:8a:ee:12:09:17:4d:f7:3d:7f:66:c1: 5c:af:a4:a9:8b:b2:d9:41:b8:f2:d5:5b:35:41:7f: cb:f7:23:4d:ff:3e:39:b9:e6:80:63:53:2e:a2:21: 09:5b:e0:0f:a5:78:88:54:a8:c5:a0:73:30:bb:4e: c4:cc:05:46:7b:e1:58:80:54:84:c0:9b:29:79:52: 69:f9:b1:42:25:84:ad:ab:f3:04:14:b8:1c:e8:12: 10:58:c1:29:2f:0b:50:f0:73:b3:91:85:c6:44:fa: 00:6e:57:8f:db:4e:7f:5b:98:29:7b:9f:f8:9e:0d: 74:e5:dc:38:e3:08:05:b5:92:5f:6e:ce:99:b3:d3: 9d:69:91:85:e5:f1:3c:dc:d7:d6:f1:4d:35:60:a0: ef:41:3a:65:0c:74:2f:5b:90:b0:b0:75:87:1f:22: 55:29:ad:c6:7e:eb:ad:4c:67:e5:d6:61:d0:bd:72: 5a:ea:d3:2d:b4:d4:97:9f:5d:a2:f8:8e:f8:48:95: 5d:14:d3:3d:d2:f0:c7:3a:f5:db:71:58:5a:23:89: bd:a8:01:bf:fe:f7:0e:d5:63:d5:b1:f9:d0:17:dd: dd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D5:AD:20:ED:C1:33:7E:A3:BA:CA:95:09:A6:02:E6:6C:F4:CE:58 X509v3 Authority Key Identifier: keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDD10206C15A11F0ADA135DCDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.195.0.0/24 45.195.84.0/22 45.196.92.0/22 45.197.200.0/21 45.197.224.0/21 45.200.144.0/20 45.202.16.0/20 45.204.32.0/20 45.204.112.0/20 45.205.176.0/20 45.205.240.0/20 45.206.128.0/17 Signature Algorithm: sha256WithRSAEncryption a8:6d:04:5d:31:49:a5:04:ae:c7:68:47:26:9b:37:15:93:e7: 87:40:12:bd:bb:b3:c9:6c:59:cc:18:38:48:1c:30:df:ab:2b: 05:cd:6a:33:dd:fd:97:1e:c6:49:68:c7:fd:a2:ab:c7:46:64: ed:e4:a9:d6:83:7f:85:5d:65:e6:1b:56:e1:c3:1d:74:0f:56: 39:01:2a:6e:6c:11:25:e5:45:3f:49:82:8e:4c:af:68:aa:09: 4a:34:90:4e:a3:e8:e1:8a:28:ed:60:a0:5c:fa:77:1c:e5:32: 4d:2f:78:56:89:60:f6:fb:02:23:3d:a1:c2:a9:43:12:15:90: 18:87:27:6a:d9:b4:19:27:61:59:e8:f8:8c:2d:59:6b:dd:e1: ca:50:0a:d3:a4:ec:5c:9b:00:f8:1e:29:28:e1:f8:11:a9:7a: 9d:e8:02:d2:26:85:65:ac:b1:7f:45:a1:ec:44:99:70:21:f6: a9:84:47:a1:77:9e:56:f2:8c:19:a6:4c:70:97:28:1d:de:00: 0e:8a:8c:eb:ad:9d:25:56:90:a0:1c:51:1a:1b:f7:58:7e:40: 70:d7:3f:55:b2:47:6b:d3:29:76:8a:6b:08:f6:06:f3:c6:85: 11:81:58:7c:38:1c:18:a1:f5:4b:be:1f:a3:1e:fc:a9:d6:c1: 05:e9:2b:71 -----BEGIN CERTIFICATE----- MIIFwzCCBKugAwIBAgIDAYedMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5 QkFFQTZCRkQ2OUIwHhcNMjUxMTE0MTMwNjI2WhcNMjUxMjE5MTMwNjI2WjAYMRYw FAYDVQQDEw02OTE3Mjk1OS1jYTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAxj6Y3O/nsiK5fp4XJ+dUc00dPXCaBARaOWpOxdM7KTuniu4SCRdN9z1/ ZsFcr6Spi7LZQbjy1Vs1QX/L9yNN/z45ueaAY1MuoiEJW+APpXiIVKjFoHMwu07E zAVGe+FYgFSEwJspeVJp+bFCJYStq/MEFLgc6BIQWMEpLwtQ8HOzkYXGRPoAbleP 205/W5gpe5/4ng105dw44wgFtZJfbs6Zs9OdaZGF5fE83NfW8U01YKDvQTplDHQv W5CwsHWHHyJVKa3GfuutTGfl1mHQvXJa6tMttNSXn12i+I74SJVdFNM90vDHOvXb cVhaI4m9qAG//vcO1WPVsfnQF93dQwIDAQABo4IC5DCCAuAwHQYDVR0OBBYEFIHV rSDtwTN+o7rKlQmmAuZs9M5YMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF QTIyOC9CREQxMDIwNkMxNUExMUYwQURBMTM1RENEQUU0RUM5Qy5yb2EwNQYIKwYB BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s MGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQALcMAAwQCLcNUAwQCLcRcAwQD LcXIAwQDLcXgAwQELciQAwQELcoQAwQELcwgAwQELcxwAwQELc2wAwQELc3wAwQH Lc6AMA0GCSqGSIb3DQEBCwUAA4IBAQCobQRdMUmlBK7HaEcmmzcVk+eHQBK9u7PJ bFnMGDhIHDDfqysFzWoz3f2XHsZJaMf9oqvHRmTt5KnWg3+FXWXmG1bhwx10D1Y5 ASpubBEl5UU/SYKOTK9oqglKNJBOo+jhiijtYKBc+ncc5TJNL3hWiWD2+wIjPaHC qUMSFZAYhydq2bQZJ2FZ6PiMLVlr3eHKUArTpOxcmwD4Hiko4fgRqXqd6ALSJoVl rLF/RaHsRJlwIfaphEehd55W8owZpkxwlygd3gAOiozrrZ0lVpCgHFEaG/dYfkBw 1z9Vskdr0yl2imsI9gbzxoURgVh8OBwYofVLvh+jHvyp1sEF6Stx -----END CERTIFICATE-----Generated at Wed Dec 3 10:06:12 2025 by rpki-client