This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E552C18CCFB711F0B0ABCDB0DAE4EC9C.roa
File: E552C18CCFB711F0B0ABCDB0DAE4EC9C.roa (raw, json)
Hash identifier: 3zVATBJMNUHBlEbEFfta1IkCACs0rrESW75nEiTcym8=
Subject key identifier: 0C:56:AC:1D:57:79:E6:5B:AD:52:07:9F:46:96:1A:AD:7D:94:D5:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018B57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E552C18CCFB711F0B0ABCDB0DAE4EC9C.roa
Signing time: Tue 02 Dec 2025 19:48:39 +0000
ROA not before: Tue 02 Dec 2025 19:48:34 +0000
ROA not after: Mon 27 Nov 2028 19:48:34 +0000
asID: 17561
IP address blocks: 156.243.42.0/24 maxlen: 24
156.243.45.0/24 maxlen: 24
156.243.88.0/24 maxlen: 24
156.243.89.0/24 maxlen: 24
156.243.90.0/24 maxlen: 24
156.243.91.0/24 maxlen: 24
156.243.92.0/24 maxlen: 24
156.243.93.0/24 maxlen: 24
156.243.94.0/24 maxlen: 24
156.243.95.0/24 maxlen: 24
156.243.120.0/24 maxlen: 24
156.243.121.0/24 maxlen: 24
156.243.122.0/24 maxlen: 24
156.243.123.0/24 maxlen: 24
156.243.124.0/24 maxlen: 24
156.243.125.0/24 maxlen: 24
156.249.116.0/24 maxlen: 24
156.249.117.0/24 maxlen: 24
156.249.118.0/24 maxlen: 24
156.249.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101207 (0x18b57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 2 19:48:34 2025 GMT
Not After : Nov 27 19:48:34 2028 GMT
Subject: CN=692f4296-e1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1b:8e:c6:67:be:7c:47:94:15:bc:a2:9c:fd:
09:b9:6b:d4:7b:44:fb:5c:b7:c3:6a:58:b0:a1:92:
3c:ee:cf:40:e1:52:51:98:1c:af:8b:96:2d:c2:4a:
0e:fe:fa:66:96:ef:e3:e7:77:53:24:3e:e6:f6:44:
a9:9e:b9:ef:39:09:b0:3c:92:b9:e8:56:aa:33:ce:
38:2f:d6:c9:84:99:06:eb:7f:cb:7d:4c:0d:7e:0c:
aa:39:09:21:80:52:60:84:2d:d2:7f:0a:19:0f:06:
fb:75:38:1b:7b:f5:fa:16:94:a9:67:2a:b4:8e:1f:
91:a1:41:56:ca:20:88:8e:4a:ca:01:ba:1a:99:cb:
0d:ea:db:b3:77:0f:a6:bc:76:86:d4:81:e9:cb:38:
47:8b:82:15:7a:91:85:12:33:fb:40:93:de:78:e1:
af:b6:2a:86:5e:6e:91:02:e8:b0:c0:b2:6b:6c:8b:
43:7e:fe:c5:25:b2:80:7a:85:d9:44:d8:bc:22:25:
82:22:c1:10:0a:ca:66:88:0e:52:d3:86:0f:bd:50:
68:80:5c:e7:2a:09:6b:9a:46:b7:0b:d5:5c:e1:03:
d5:d0:36:88:82:55:09:cd:aa:eb:3e:21:09:ca:a5:
f4:ab:81:1e:a7:b5:44:2a:c7:8d:6c:de:3e:db:97:
9b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:56:AC:1D:57:79:E6:5B:AD:52:07:9F:46:96:1A:AD:7D:94:D5:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E552C18CCFB711F0B0ABCDB0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.243.42.0/24
156.243.45.0/24
156.243.88.0/21
156.243.120.0-156.243.125.255
156.249.116.0/22
Signature Algorithm: sha256WithRSAEncryption
55:14:4d:d5:e6:d6:2b:4c:46:51:b3:64:ef:7b:8d:6f:b4:17:
a1:ce:2a:f2:41:e6:a2:d8:93:7b:85:1b:64:56:f3:0b:ab:88:
bc:e7:f9:c2:90:a5:71:c3:11:87:d0:cb:c8:4f:31:eb:e8:22:
57:fe:78:61:3c:87:2a:fc:48:4a:4d:a2:a6:10:cf:e2:4e:48:
7b:cc:4e:f6:0b:17:02:57:ff:71:17:f7:77:fb:00:76:c6:02:
05:5c:2f:27:b9:12:0a:99:7d:d6:29:35:8e:92:de:25:50:f7:
26:47:8a:cc:e0:78:e5:26:2c:c5:21:71:9e:3b:62:4e:89:3b:
50:b0:59:b7:46:cf:95:d5:08:80:bc:73:66:10:fc:28:fa:fb:
e9:4f:a0:bb:d2:49:a2:48:82:d5:93:01:4a:4d:3b:f1:2d:9f:
90:c7:11:50:8e:b6:05:69:19:97:01:80:dd:49:5f:04:fe:34:
c1:6e:b4:1e:ae:61:59:75:a4:88:ac:eb:2c:ef:1a:38:68:f6:
d1:1b:75:80:e7:9e:b2:08:65:f2:cc:7c:86:99:0d:57:7f:10:
49:a5:37:57:41:43:09:46:b9:08:c5:6f:9b:d0:a0:06:f7:b2:
a0:69:17:04:7b:54:fc:3f:46:49:97:7a:5a:48:e9:05:34:43:
f3:f6:12:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:12 2025 by rpki-client