This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8D935AACC5011F0A73137E6DAE4EC9C.roa
File: C8D935AACC5011F0A73137E6DAE4EC9C.roa (raw, json)
Hash identifier: wUMbQdBSd6Zd6ZvOeVuRXg/dDRXneVI4IZ9g/LyOnz8=
Subject key identifier: 1E:28:DD:E7:27:05:41:21:BD:0A:C0:70:64:3E:E9:3B:53:F5:06:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018A65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8D935AACC5011F0A73137E6DAE4EC9C.roa
Signing time: Fri 28 Nov 2025 11:52:59 +0000
ROA not before: Fri 28 Nov 2025 11:52:54 +0000
ROA not after: Thu 18 Dec 2025 11:52:54 +0000
asID: 134548
IP address blocks: 156.240.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100965 (0x18a65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 28 11:52:54 2025 GMT
Not After : Dec 18 11:52:54 2025 GMT
Subject: CN=69298d1b-c39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:74:bf:66:04:42:ed:be:76:64:c0:43:cc:b9:
c7:3a:3b:6d:74:80:fc:b9:25:48:43:78:05:37:23:
5e:06:8a:5a:59:01:92:53:94:4b:85:da:2c:14:a3:
05:5b:00:76:8d:f6:e6:68:d4:63:b5:b5:5d:d0:f2:
43:b2:06:48:f2:92:4f:9c:97:ef:31:ee:d3:38:25:
73:ec:ba:b7:4e:64:76:00:c4:01:ba:9b:a5:bf:04:
f0:be:2d:8d:87:19:7f:e4:b9:f8:1e:15:35:a5:12:
02:54:08:62:63:5a:31:4f:63:6c:db:34:de:60:24:
7c:39:fe:04:af:4e:55:25:df:d8:3e:34:f2:a2:9e:
7a:24:d5:bd:e1:7c:b8:35:69:2d:d9:00:a5:47:d0:
f1:95:04:f1:52:a0:65:c4:f8:f2:8e:43:d1:6c:e5:
45:63:ee:ca:d4:3b:a3:c4:6a:79:48:b0:30:7e:18:
11:ac:44:f7:95:e0:0c:8e:5a:d0:29:6f:98:bf:d0:
ca:b3:8a:82:16:5f:38:f4:3e:55:02:01:40:a1:ba:
91:0f:43:3a:f7:fe:7a:0f:bc:91:cf:77:ca:68:50:
9c:bb:32:14:4d:5d:eb:83:83:b3:00:f3:ac:4e:59:
4a:13:3b:07:dd:6a:a7:e5:a4:57:01:c9:d5:6e:79:
02:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:28:DD:E7:27:05:41:21:BD:0A:C0:70:64:3E:E9:3B:53:F5:06:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8D935AACC5011F0A73137E6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.240.255.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a8:26:da:4b:74:b3:0c:ca:60:51:13:64:11:13:c8:ad:62:
b0:42:51:14:92:e2:38:91:1c:f1:71:0f:51:56:9d:1b:b1:07:
18:71:a6:4f:56:1f:33:49:0c:db:02:cd:96:4b:72:88:e9:c9:
15:35:7e:42:01:33:28:1d:dd:15:d7:e1:2a:c4:7c:8a:ca:c6:
54:26:75:57:75:9b:89:df:36:34:b3:c9:f2:a2:b1:66:6e:34:
43:c2:ac:d3:04:57:41:6b:b4:d1:e5:39:75:bb:55:de:2f:33:
28:67:b2:a0:6d:ff:91:39:d2:c8:88:ff:7d:1d:b8:07:ac:86:
5f:bc:bf:05:31:fb:e0:15:12:fc:cc:ce:72:97:ea:46:a3:6d:
d7:93:19:0e:74:fe:9d:d9:d2:ca:28:23:81:da:4c:98:2a:9c:
40:d0:7e:e4:14:56:e0:02:0f:02:f3:bc:99:14:de:b3:4e:f0:
d9:49:d2:04:6b:d7:3e:e5:e0:f1:8a:11:1b:8e:62:70:3e:72:
79:d9:3e:c8:b6:4f:a2:f8:db:2b:c1:bf:ba:c3:a9:89:f4:f9:
49:88:f0:ca:03:a2:a0:9f:89:bb:40:89:0b:60:05:83:ed:3d:
15:44:01:25:a8:07:03:78:74:da:30:46:3f:08:ea:de:8a:68:
8a:08:19:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:47:57 2025 by rpki-client