This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD6C7B5CC45511F0AA89FEB2DAE4EC9C.roa
File: CD6C7B5CC45511F0AA89FEB2DAE4EC9C.roa (raw, json)
Hash identifier: uwRZ40+/cAdHkl8+b2VgkN3choKAG8QBUK+xF00IjIo=
Subject key identifier: 55:87:F0:FF:E7:58:05:B6:AD:A7:99:0A:38:12:84:5C:D2:A7:0C:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018816
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD6C7B5CC45511F0AA89FEB2DAE4EC9C.roa
Signing time: Tue 18 Nov 2025 08:08:45 +0000
ROA not before: Tue 18 Nov 2025 08:08:39 +0000
ROA not after: Tue 30 Dec 2025 08:08:39 +0000
asID: 137547
IP address blocks: 156.245.128.0/24 maxlen: 24
156.245.129.0/24 maxlen: 24
156.245.130.0/24 maxlen: 24
156.245.131.0/24 maxlen: 24
156.245.132.0/24 maxlen: 24
156.245.133.0/24 maxlen: 24
156.245.134.0/24 maxlen: 24
156.245.135.0/24 maxlen: 24
156.245.242.0/24 maxlen: 24
156.245.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100374 (0x18816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 18 08:08:39 2025 GMT
Not After : Dec 30 08:08:39 2025 GMT
Subject: CN=691c298d-a9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:71:7c:4b:f6:26:83:e0:4b:fa:42:b2:1f:82:
65:c7:f7:59:c0:45:84:58:55:19:38:59:f8:bf:54:
18:a4:7f:68:73:4e:da:c0:cc:14:96:a5:85:cf:00:
b6:41:3f:1f:51:8e:5f:4f:fe:9f:f1:4a:f0:f7:82:
f3:3b:a5:49:5d:50:e8:7a:7f:26:c2:7a:d3:05:77:
0e:16:fa:70:ed:62:39:07:49:ff:64:bb:fa:e8:c6:
72:9b:47:7a:41:4e:16:cc:1a:50:16:05:24:d4:69:
54:e7:d0:8b:9f:ad:42:ba:58:34:3e:63:d3:6f:f2:
e0:e6:be:9e:3e:b0:9f:83:c0:59:0a:f2:03:83:7c:
0e:6b:d7:a2:44:eb:91:78:78:4b:4f:0b:f3:90:9c:
62:17:c6:8a:9b:a6:db:e2:5a:46:d1:12:10:d8:c9:
dc:44:df:07:e9:8a:44:3d:1f:25:8f:5c:85:c4:57:
c1:a8:e1:92:17:75:0c:93:79:76:d9:51:9d:b8:01:
ab:fb:1e:65:63:b7:0e:1e:20:77:ea:c5:a5:e3:dc:
50:5d:7a:59:7c:fd:b1:c4:3f:f7:2e:d0:6f:bc:0b:
b4:da:f2:88:fb:77:0d:56:a4:e4:c6:06:97:ce:6a:
38:c0:08:e4:31:7d:17:a8:2e:54:66:ba:ac:c4:fd:
f1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:87:F0:FF:E7:58:05:B6:AD:A7:99:0A:38:12:84:5C:D2:A7:0C:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD6C7B5CC45511F0AA89FEB2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
156.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
42:e7:ed:37:db:eb:06:c0:f0:6c:03:7b:6e:8f:30:c4:af:30:
f2:0d:36:fd:f5:1f:60:66:27:7b:45:67:2f:ef:d6:03:65:7d:
cf:01:ee:5d:bd:d5:40:5f:43:27:1f:9e:f7:3f:48:25:ca:37:
c1:65:4d:5f:06:90:f9:cf:a6:05:67:7f:34:3e:a2:ad:58:4c:
49:5a:80:29:37:3a:5f:54:fe:e4:68:11:b0:fa:c8:69:10:59:
10:99:b8:28:10:0c:2f:f2:58:f6:f3:be:d5:2e:0a:85:44:56:
4e:c7:3b:d1:50:21:26:64:a8:48:94:9e:ae:21:12:a3:e8:72:
a7:1f:cd:46:cb:9f:a1:55:86:3e:84:53:43:73:a4:5f:d9:19:
41:ca:4f:21:49:4b:d8:e9:2b:3c:51:b9:a6:79:c4:6d:ea:0b:
69:17:18:26:2e:35:62:f3:6d:57:c5:dc:c2:a0:04:aa:ed:85:
b5:6b:3c:df:64:7a:92:af:4b:f3:41:c5:3b:62:fd:85:29:9c:
0a:76:62:ab:91:f1:d4:ec:cc:86:a4:bd:90:60:b7:86:54:da:
60:7e:45:59:7b:92:ab:96:52:b8:c8:4d:e3:87:07:05:8d:3c:
ae:ce:3d:af:c5:3e:81:b8:79:c4:bc:d1:db:d6:54:89:b3:3f:
20:93:97:8c
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAYgWMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMTE4MDgwODM5WhcNMjUxMjMwMDgwODM5WjAYMRYw
FAYDVQQDEw02OTFjMjk4ZC1hOWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAnHF8S/Ymg+BL+kKyH4Jlx/dZwEWEWFUZOFn4v1QYpH9oc07awMwUlqWF
zwC2QT8fUY5fT/6f8Urw94LzO6VJXVDoen8mwnrTBXcOFvpw7WI5B0n/ZLv66MZy
m0d6QU4WzBpQFgUk1GlU59CLn61Culg0PmPTb/Lg5r6ePrCfg8BZCvIDg3wOa9ei
ROuReHhLTwvzkJxiF8aKm6bb4lpG0RIQ2MncRN8H6YpEPR8lj1yFxFfBqOGSF3UM
k3l22VGduAGr+x5lY7cOHiB36sWl49xQXXpZfP2xxD/3LtBvvAu02vKI+3cNVqTk
xgaXzmo4wAjkMX0XqC5UZrqsxP3xdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWH
8P/nWAW2raeZCjgShFzSpwzvMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRDZDN0I1Q0M0NTUxMUYwQUE4OUZFQjJEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDnPWAAwQBnPXyMA0GCSqGSIb3
DQEBCwUAA4IBAQBC5+032+sGwPBsA3tujzDErzDyDTb99R9gZid7RWcv79YDZX3P
Ae5dvdVAX0MnH573P0glyjfBZU1fBpD5z6YFZ380PqKtWExJWoApNzpfVP7kaBGw
+shpEFkQmbgoEAwv8lj2877VLgqFRFZOxzvRUCEmZKhIlJ6uIRKj6HKnH81Gy5+h
VYY+hFNDc6Rf2RlByk8hSUvY6Ss8UbmmecRt6gtpFxgmLjVi821XxdzCoASq7YW1
azzfZHqSr0vzQcU7Yv2FKZwKdmKrkfHU7MyGpL2QYLeGVNpgfkVZe5KrllK4yE3j
hwcFjTyuzj2vxT6BuHnEvNHb1lSJsz8gk5eM
-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:20 2025 by rpki-client