This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB68C0A2D40A11F0ABD4E8D6DAE4EC9C.roa
File: DB68C0A2D40A11F0ABD4E8D6DAE4EC9C.roa (raw, json)
Hash identifier: Jz0m285bNcon2QZx8PfVwApO/L+6PK77MnblVJlkbL8=
Subject key identifier: 54:12:43:3D:54:A9:8E:B0:54:75:02:4A:BB:BD:17:EF:C5:94:60:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018CF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB68C0A2D40A11F0ABD4E8D6DAE4EC9C.roa
Signing time: Mon 08 Dec 2025 07:52:35 +0000
ROA not before: Mon 08 Dec 2025 07:52:30 +0000
ROA not after: Sun 14 Dec 2025 07:52:30 +0000
asID: 152705
IP address blocks: 156.239.254.0/24 maxlen: 24
156.239.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101618 (0x18cf2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 8 07:52:30 2025 GMT
Not After : Dec 14 07:52:30 2025 GMT
Subject: CN=693683c3-29c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:ce:eb:5d:88:52:45:b4:bc:f1:d1:57:e4:
e9:94:00:72:40:a9:47:39:fb:bc:39:bb:53:b2:70:
0f:89:f0:3e:d6:32:0b:4f:a4:30:fb:ad:d3:f2:76:
b6:13:c4:aa:9d:5a:bb:f4:51:d9:a3:f8:01:d6:f4:
aa:7e:cf:c0:7f:64:af:75:35:ee:37:ae:46:fd:f7:
23:92:01:34:58:f6:87:43:5e:d1:48:94:b1:24:70:
5a:c4:1c:87:df:f1:1b:e1:33:51:5c:ff:88:10:9e:
9c:4f:58:5c:4b:d6:7c:ce:4c:02:05:0b:8d:fd:9f:
e7:1e:8c:34:c2:a9:fd:a2:20:09:d5:c7:36:9a:e8:
73:98:2b:1b:75:9b:06:d7:9a:d0:d3:ae:b8:3d:9e:
4e:9e:03:4c:b8:ba:e7:d6:36:a0:a8:de:1a:5c:ae:
90:44:bf:1a:a3:66:fe:18:96:0c:d9:cd:a8:fb:db:
4e:63:17:2a:65:72:d0:f5:57:18:04:b4:be:d9:00:
1d:9a:09:da:12:47:2f:f9:18:6e:b2:16:9c:19:91:
44:c5:dc:f9:25:ce:2b:0c:49:2f:bb:99:2c:44:9e:
51:28:40:bb:07:1e:70:47:b7:5f:bd:19:30:bc:3a:
9c:dc:f2:5a:b1:3f:70:2a:2e:fd:35:79:bf:5b:db:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:12:43:3D:54:A9:8E:B0:54:75:02:4A:BB:BD:17:EF:C5:94:60:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB68C0A2D40A11F0ABD4E8D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.239.254.0/23
Signature Algorithm: sha256WithRSAEncryption
25:3c:b3:0d:7d:4e:12:a6:58:31:5a:b8:49:65:c5:d9:7d:d9:
59:b7:35:84:c4:ec:70:b8:99:d2:db:ba:34:49:d2:4a:7c:44:
ab:13:6c:8a:ff:f2:eb:4c:4e:6b:ab:7c:38:9d:6f:85:6c:af:
09:aa:15:79:f3:30:e3:c9:d7:d3:b3:85:d1:42:9a:71:d2:e2:
93:c7:5e:07:21:1b:44:83:e6:39:24:bb:d9:22:0e:67:32:a4:
34:b3:31:31:47:6f:ed:a2:e0:e3:f6:d4:50:ab:4b:05:9d:56:
39:61:30:48:13:34:cb:59:64:a1:1c:38:bf:40:b8:b5:d8:f0:
0a:ae:56:c6:b7:ed:80:9b:bb:c4:17:68:68:1e:bc:db:91:2a:
17:5d:b9:42:3e:26:f2:88:fe:9e:34:78:7c:0b:0e:79:06:76:
0e:08:67:58:e9:5a:e9:d2:4c:34:c3:18:3e:51:65:3b:e0:e1:
70:c0:98:a2:32:54:74:7e:f4:6f:af:af:42:b1:8e:f0:d4:27:
d4:f4:7d:e3:2d:9a:94:94:aa:45:e8:fd:9a:0e:fd:f3:ad:fd:
4c:8d:7b:47:dc:88:ed:8e:e7:4a:c7:98:c6:07:94:cc:6f:d6:
5e:77:5e:f9:ed:41:9f:fc:2f:02:d1:f0:0b:54:c0:da:c8:db:
49:b9:8d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 9 01:18:41 2025 by rpki-client