This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D94872B8CF7811F0AFF237ABDAE4EC9C.roa File: D94872B8CF7811F0AFF237ABDAE4EC9C.roa (raw, json) Hash identifier: oQBp/EjQ/5STocXoGsU4MRp3UxTM0HpngacV7qK3+YU= Subject key identifier: D2:25:A4:22:D6:7C:DF:DA:35:56:AB:94:EC:34:E0:3D:38:1B:2C:E1 Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Certificate serial: 018AC8 Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D94872B8CF7811F0AFF237ABDAE4EC9C.roa Signing time: Tue 02 Dec 2025 12:17:20 +0000 ROA not before: Tue 02 Dec 2025 12:17:15 +0000 ROA not after: Sun 20 Aug 2028 12:17:15 +0000 asID: 17561 IP address blocks: 156.224.80.0/24 maxlen: 24 156.224.90.0/24 maxlen: 24 156.226.2.0/24 maxlen: 24 156.226.129.0/24 maxlen: 24 156.227.7.0/24 maxlen: 24 156.227.128.0/24 maxlen: 24 156.227.131.0/24 maxlen: 24 156.227.134.0/24 maxlen: 24 156.227.135.0/24 maxlen: 24 156.227.137.0/24 maxlen: 24 156.227.138.0/24 maxlen: 24 156.227.141.0/24 maxlen: 24 156.227.157.0/24 maxlen: 24 156.227.216.0/24 maxlen: 24 156.235.62.0/24 maxlen: 24 156.235.85.0/24 maxlen: 24 156.235.95.0/24 maxlen: 24 156.240.62.0/24 maxlen: 24 156.240.98.0/24 maxlen: 24 156.240.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101064 (0x18ac8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Validity Not Before: Dec 2 12:17:15 2025 GMT Not After : Aug 20 12:17:15 2028 GMT Subject: CN=692ed8d0-dc18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:84:dd:14:a3:1b:2c:83:de:4f:d9:18:99:78: 5c:52:e9:c6:ed:01:9b:12:d9:f4:03:d0:93:ce:b7: 82:8a:5e:45:6d:77:45:cd:a0:18:19:90:cc:92:14: 72:da:7d:09:64:64:d1:cf:f8:50:23:83:f6:3c:ba: 65:3a:e9:09:56:ff:36:bd:06:5d:94:78:98:28:d6: 10:46:cf:8a:db:90:a9:8e:49:aa:14:ce:46:33:e1: 23:ea:c4:00:ee:08:ea:5e:aa:a3:06:b5:63:04:06: b5:ca:07:6e:9f:dc:2f:67:a1:98:5f:8c:db:4c:db: 98:ab:29:87:82:43:14:c0:21:64:f8:1e:88:b5:d6: c2:11:70:2a:68:0f:a4:d1:fc:15:9e:3f:d4:c3:71: 8c:24:27:d2:17:2f:42:9e:06:17:66:bc:e0:11:36: f7:75:c3:57:3d:e1:8c:27:a5:42:5f:d6:b9:a0:42: 15:b5:bb:05:57:e2:10:e4:9a:bd:f5:5d:03:6f:99: 0b:45:35:8d:a7:39:95:25:eb:59:9f:55:c8:40:85: 7a:1e:39:02:cd:52:9d:35:a2:d0:95:b0:c5:34:25: ad:92:77:6d:93:5f:96:67:9e:8c:48:32:49:df:e2: 7a:56:67:20:fd:2e:9f:d3:66:dd:88:8d:04:df:93: 71:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:25:A4:22:D6:7C:DF:DA:35:56:AB:94:EC:34:E0:3D:38:1B:2C:E1 X509v3 Authority Key Identifier: keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D94872B8CF7811F0AFF237ABDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 156.224.80.0/24 156.224.90.0/24 156.226.2.0/24 156.226.129.0/24 156.227.7.0/24 156.227.128.0/24 156.227.131.0/24 156.227.134.0/23 156.227.137.0-156.227.138.255 156.227.141.0/24 156.227.157.0/24 156.227.216.0/24 156.235.62.0/24 156.235.85.0/24 156.235.95.0/24 156.240.62.0/24 156.240.98.0/24 156.240.100.0/24 Signature Algorithm: sha256WithRSAEncryption b5:1d:92:b4:e0:f6:50:37:64:3d:2a:64:f5:38:a3:7f:e1:7b: d7:7b:84:10:a9:f2:61:2a:87:97:ce:5c:ad:1a:c3:12:0c:4d: 66:8a:4f:35:a2:94:df:3c:27:f6:ad:1f:42:c7:97:9d:c5:bc: 6d:7d:79:ac:d7:a7:98:c0:b3:3e:ff:18:58:da:0b:4c:0d:af: 11:9c:55:fa:e9:fc:7e:3b:1a:73:b8:1b:e8:73:9d:e0:23:ca: ba:74:db:09:bc:47:69:31:af:d4:2b:90:98:75:a4:93:c2:b6: 27:64:f4:82:bd:be:f6:ee:3f:38:7b:71:d9:e1:00:ca:3a:f1: f0:58:91:63:5f:96:b5:33:46:a0:26:36:aa:2c:f2:02:39:01: b2:bb:14:e8:60:88:4d:e1:f8:83:95:ea:b6:0b:c5:48:14:ac: 88:dd:c7:4f:9d:4a:51:cb:a1:9b:0c:0c:0c:ff:b7:20:d6:58: b3:d7:e5:9d:68:bd:e0:47:51:35:1e:09:c4:d2:2a:a8:bc:de: bd:7f:94:6a:ac:14:6e:9a:23:f4:d1:ba:e2:56:0b:16:f6:e5: 56:91:bb:bb:c9:6f:b3:66:ed:9c:b7:76:39:b5:32:74:78:26: 95:ba:e0:eb:f5:42:c9:85:76:2b:f9:dd:7b:ed:d0:1e:f7:3c: dd:a0:82:ba -----BEGIN CERTIFICATE----- MIIF8DCCBNigAwIBAgIDAYrIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5 QkFFQTZCRkQ2OUIwHhcNMjUxMjAyMTIxNzE1WhcNMjgwODIwMTIxNzE1WjAYMRYw FAYDVQQDEw02OTJlZDhkMC1kYzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEA2ITdFKMbLIPeT9kYmXhcUunG7QGbEtn0A9CTzreCil5FbXdFzaAYGZDM khRy2n0JZGTRz/hQI4P2PLplOukJVv82vQZdlHiYKNYQRs+K25CpjkmqFM5GM+Ej 6sQA7gjqXqqjBrVjBAa1ygdun9wvZ6GYX4zbTNuYqymHgkMUwCFk+B6ItdbCEXAq aA+k0fwVnj/Uw3GMJCfSFy9CngYXZrzgETb3dcNXPeGMJ6VCX9a5oEIVtbsFV+IQ 5Jq99V0Db5kLRTWNpzmVJetZn1XIQIV6HjkCzVKdNaLQlbDFNCWtkndtk1+WZ56M SDJJ3+J6Vmcg/S6f02bdiI0E35Nx8QIDAQABo4IDETCCAw0wHQYDVR0OBBYEFNIl pCLWfN/aNVarlOw04D04GyzhMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF QTIyOC9EOTQ4NzJCOENGNzgxMUYwQUZGMjM3QUJEQUU0RUM5Qy5yb2EwNQYIKwYB BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s MIGNBggrBgEFBQcBBwEB/wR+MHwwegQCAAEwdAMEAJzgUAMEAJzgWgMEAJziAgME AJzigQMEAJzjBwMEAJzjgAMEAJzjgwMEAZzjhjAMAwQAnOOJAwQAnOOKAwQAnOON AwQAnOOdAwQAnOPYAwQAnOs+AwQAnOtVAwQAnOtfAwQAnPA+AwQAnPBiAwQAnPBk MA0GCSqGSIb3DQEBCwUAA4IBAQC1HZK04PZQN2Q9KmT1OKN/4XvXe4QQqfJhKoeX zlytGsMSDE1mik81opTfPCf2rR9Cx5edxbxtfXms16eYwLM+/xhY2gtMDa8RnFX6 6fx+OxpzuBvoc53gI8q6dNsJvEdpMa/UK5CYdaSTwrYnZPSCvb727j84e3HZ4QDK OvHwWJFjX5a1M0agJjaqLPICOQGyuxToYIhN4fiDleq2C8VIFKyI3cdPnUpRy6Gb DAwM/7cg1liz1+WdaL3gR1E1HgnE0iqovN69f5RqrBRumiP00briVgsW9uVWkbu7 yW+zZu2ct3Y5tTJ0eCaVuuDr9ULJhXYr+d177dAe9zzdoIK6 -----END CERTIFICATE-----Generated at Wed Dec 3 10:06:06 2025 by rpki-client