This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C205CD86C90511F08AA0B0AFDAE4EC9C.roa File: C205CD86C90511F08AA0B0AFDAE4EC9C.roa (raw, json) Hash identifier: KEPnZ/iACtFC3D8MVnFNdnjUy//jXwZYDfzFWbtQ9ZQ= Subject key identifier: 9E:7C:4A:58:F0:9B:ED:86:20:A2:29:5C:EA:D1:91:14:5A:D4:BB:6F Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Certificate serial: 018922 Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C205CD86C90511F08AA0B0AFDAE4EC9C.roa Signing time: Mon 24 Nov 2025 07:18:22 +0000 ROA not before: Mon 24 Nov 2025 07:18:17 +0000 ROA not after: Fri 26 Dec 2025 07:18:17 +0000 asID: 141167 IP address blocks: 156.225.0.0/23 maxlen: 24 156.225.12.0/23 maxlen: 24 156.228.3.0/24 maxlen: 24 156.238.2.0/23 maxlen: 24 156.254.120.0/22 maxlen: 24 156.254.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100642 (0x18922) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Validity Not Before: Nov 24 07:18:17 2025 GMT Not After : Dec 26 07:18:17 2025 GMT Subject: CN=692406be-3d83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c8:ab:c8:37:9a:0b:16:10:4e:37:1a:9f:91: 96:98:d6:62:0b:ae:35:9d:09:d6:90:a2:d0:f3:d5: 37:49:db:31:b3:a7:83:99:05:43:fa:6b:c2:f9:8a: 12:f7:9a:d6:23:b9:5a:7f:2a:36:21:13:65:03:6c: 1f:af:6c:28:28:ee:ad:ba:8e:43:aa:55:12:d0:d4: 07:84:fe:d7:1a:e1:50:7c:11:93:eb:68:13:2c:0d: 3c:09:4e:dc:4c:d6:f2:5e:74:00:27:f2:cf:40:77: fd:5b:14:51:e5:c8:65:be:5d:c9:e0:b2:f4:ac:ec: b7:4e:a7:1d:68:d3:3a:da:13:08:07:56:5f:c2:f2: 50:b4:a3:96:2c:0c:91:1a:af:8a:e2:a2:24:d5:83: de:30:9c:74:44:c0:f3:1f:71:25:73:f8:75:1f:16: 52:b8:b7:2e:b2:d8:28:4b:56:bb:57:e2:6b:87:61: 2e:41:41:f5:25:71:e5:0a:4e:60:95:ae:20:b6:e7: 8b:0f:59:b9:7f:11:1f:30:01:43:15:ac:94:75:3a: 97:c5:db:e9:32:e9:de:a5:86:5b:74:e0:b1:b1:2a: d6:37:18:12:ac:6d:86:08:da:63:6f:bc:05:e2:55: ce:c8:87:b1:3d:bf:c2:e1:94:b0:14:ce:85:2c:34: ec:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7C:4A:58:F0:9B:ED:86:20:A2:29:5C:EA:D1:91:14:5A:D4:BB:6F X509v3 Authority Key Identifier: keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C205CD86C90511F08AA0B0AFDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 156.225.0.0/23 156.225.12.0/23 156.228.3.0/24 156.238.2.0/23 156.254.120.0-156.254.125.255 Signature Algorithm: sha256WithRSAEncryption 44:f0:22:77:34:8d:6e:be:22:a2:40:3b:85:e4:23:dc:d7:b3: 4d:96:0f:55:1c:41:c1:dd:01:21:0a:ec:f8:ec:10:56:97:11: 76:aa:e5:4e:6a:d8:df:b0:c4:ec:b4:30:13:70:0f:9f:35:97: f4:18:1c:7c:74:13:f7:4e:4c:e7:59:af:22:8f:ce:e0:36:82: 28:0d:e1:da:7c:a2:a9:e0:ea:a0:ec:4a:b3:d3:10:35:31:1e: 87:04:6f:67:cf:ba:93:f3:34:83:1a:53:e7:ef:fd:e5:c9:41: f5:93:60:18:b2:19:37:45:6d:1c:a7:1c:e7:8c:a1:59:e3:c0: d2:5e:9c:8e:15:dd:34:ac:7e:e0:cb:80:fd:36:6e:8a:45:51: 52:cf:4a:76:a9:d3:01:fc:11:14:29:1e:d6:6c:2f:4f:ab:c7: 11:63:76:e4:26:ac:88:50:6c:70:0b:40:3c:1b:cd:80:6e:78: 14:88:ea:fc:09:73:13:ee:01:aa:56:a2:59:7f:f7:cc:a6:4a: b1:12:a9:56:1d:96:7e:fc:08:c7:5f:f5:82:36:e5:54:51:0c: de:7c:46:ac:2b:3e:c1:e7:41:97:44:70:d9:ea:b2:7c:71:a0: 76:9e:2f:8c:3c:f3:db:51:8d:08:5b:78:63:f8:51:30:84:78: c2:a4:14:e2 -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgIDAYkiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5 QkFFQTZCRkQ2OUIwHhcNMjUxMTI0MDcxODE3WhcNMjUxMjI2MDcxODE3WjAYMRYw FAYDVQQDEw02OTI0MDZiZS0zZDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAyMiryDeaCxYQTjcan5GWmNZiC641nQnWkKLQ89U3Sdsxs6eDmQVD+mvC +YoS95rWI7lafyo2IRNlA2wfr2woKO6tuo5DqlUS0NQHhP7XGuFQfBGT62gTLA08 CU7cTNbyXnQAJ/LPQHf9WxRR5chlvl3J4LL0rOy3TqcdaNM62hMIB1ZfwvJQtKOW LAyRGq+K4qIk1YPeMJx0RMDzH3Elc/h1HxZSuLcustgoS1a7V+Jrh2EuQUH1JXHl Ck5gla4gtueLD1m5fxEfMAFDFayUdTqXxdvpMunepYZbdOCxsSrWNxgSrG2GCNpj b7wF4lXOyIexPb/C4ZSwFM6FLDTsYwIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFJ58 Sljwm+2GIKIpXOrRkRRa1LtvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF QTIyOC9DMjA1Q0Q4NkM5MDUxMUYwOEFBMEIwQUZEQUU0RUM5Qy5yb2EwNQYIKwYB BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s MD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBnOEAAwQBnOEMAwQAnOQDAwQB nO4CMAwDBAOc/ngDBAGc/nwwDQYJKoZIhvcNAQELBQADggEBAETwInc0jW6+IqJA O4XkI9zXs02WD1UcQcHdASEK7PjsEFaXEXaq5U5q2N+wxOy0MBNwD581l/QYHHx0 E/dOTOdZryKPzuA2gigN4dp8oqng6qDsSrPTEDUxHocEb2fPupPzNIMaU+fv/eXJ QfWTYBiyGTdFbRynHOeMoVnjwNJenI4V3TSsfuDLgP02bopFUVLPSnap0wH8ERQp HtZsL0+rxxFjduQmrIhQbHALQDwbzYBueBSI6vwJcxPuAapWoll/98ymSrESqVYd ln78CMdf9YI25VRRDN58RqwrPsHnQZdEcNnqsnxxoHaeL4w889tRjQhbeGP4UTCE eMKkFOI= -----END CERTIFICATE-----Generated at Wed Dec 3 10:05:07 2025 by rpki-client