This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D55EE496CA0C11F08B531FB4DAE4EC9C.roa
File: D55EE496CA0C11F08B531FB4DAE4EC9C.roa (raw, json)
Hash identifier: Rfpf2SOl4EbwuT4YTfYod15dfmLTo7K4sqxck3o4ULE=
Subject key identifier: 71:26:94:D1:6B:4D:30:91:F8:06:8C:83:4F:41:67:46:E1:C8:23:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0189AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D55EE496CA0C11F08B531FB4DAE4EC9C.roa
Signing time: Tue 25 Nov 2025 14:41:32 +0000
ROA not before: Tue 25 Nov 2025 14:41:27 +0000
ROA not after: Thu 15 Jan 2026 14:41:27 +0000
asID: 141109
IP address blocks: 45.196.133.0/24 maxlen: 24
45.198.232.0/23 maxlen: 24
45.198.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100780 (0x189ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 25 14:41:27 2025 GMT
Not After : Jan 15 14:41:27 2026 GMT
Subject: CN=6925c01c-ab2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:85:77:31:07:4a:42:f0:60:89:11:01:5c:
eb:bf:3d:b3:76:0d:ce:28:97:c0:2d:ed:fa:b7:1f:
df:57:1e:8a:46:07:f4:78:91:93:46:4a:63:dd:b7:
5e:1d:78:9e:10:5d:a0:53:61:ec:96:cb:41:60:2f:
b0:70:10:d5:fd:35:8f:fe:34:05:ee:e4:bc:fd:fc:
eb:32:2e:74:34:ad:e3:70:be:6c:4b:01:49:7c:39:
f6:1f:fe:7d:21:d9:1d:19:aa:38:fa:3a:f4:3f:79:
fe:38:7a:84:a2:38:49:0e:b4:cf:03:30:6e:99:0e:
d7:70:4d:1b:5c:ef:58:ed:f0:6f:8c:3f:ca:8e:9d:
96:e4:77:5c:25:6c:d3:67:63:df:cd:f4:e9:fd:8f:
d9:35:30:35:36:de:8f:52:de:4a:fa:44:88:9c:e5:
e1:f0:52:e7:b2:a7:4c:e5:81:e2:0d:f3:f4:25:d5:
4a:f9:82:55:09:85:f2:e6:9c:ee:f4:60:9c:27:41:
c3:df:af:0d:cd:07:c4:59:8a:10:66:8d:05:51:4f:
23:e8:f1:45:a7:53:c0:ee:fc:37:57:11:6c:91:30:
46:89:dc:68:2f:df:fd:9a:46:06:21:be:0d:37:b3:
8c:86:35:98:ae:33:a9:a0:fb:35:69:5a:39:37:fb:
77:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:26:94:D1:6B:4D:30:91:F8:06:8C:83:4F:41:67:46:E1:C8:23:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D55EE496CA0C11F08B531FB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.133.0/24
45.198.232.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:4d:a3:6e:bf:47:ee:ba:c9:08:73:81:84:59:87:41:7f:0a:
45:89:0d:70:23:bd:5a:ef:9c:6f:30:4b:b0:bd:d7:fd:8b:46:
0c:1e:9b:c2:ee:65:7c:6d:e2:0a:03:28:71:32:cf:23:91:27:
b5:d8:49:e3:9c:3f:a1:fb:ae:59:b8:f6:6d:aa:c0:5e:c4:98:
90:e5:bc:53:a6:f7:79:72:2d:3b:9e:41:78:12:a8:96:b1:3d:
88:0a:b8:35:66:93:3c:c0:b0:92:10:ad:10:c8:57:00:06:7f:
c2:89:15:89:96:91:38:93:7d:77:63:a2:a7:76:a8:1d:72:3d:
0c:cf:09:e7:b9:f5:83:87:3c:dd:26:17:0c:b3:43:05:b5:cb:
02:b1:9b:39:de:b5:0a:ff:7a:75:d2:35:b0:43:fe:ec:8a:6e:
57:81:57:69:d5:d7:b1:0c:00:2d:82:9f:8c:76:7f:06:03:b2:
df:5e:82:c0:00:ee:11:92:f5:f6:8d:02:81:b5:51:66:4a:32:
fa:d5:bd:d5:a1:9e:b0:d8:45:83:22:16:df:91:8b:60:d6:ca:
0b:b9:14:d7:43:39:65:57:19:36:57:02:10:a8:46:41:4f:eb:
b5:d8:40:e9:6e:ad:1d:ac:15:04:11:8f:68:1e:9d:19:d3:e4:
71:ef:00:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:57 2025 by rpki-client