This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBDBF2DAC45411F097DBC8AEDAE4EC9C.roa
File: EBDBF2DAC45411F097DBC8AEDAE4EC9C.roa (raw, json)
Hash identifier: c9okNnHvnxe/oOzYB6zfvxrk5JX9vSeZ6hqVQ3vaH+A=
Subject key identifier: 12:76:F4:15:72:86:AC:C9:18:2E:46:7C:6F:27:0D:BF:EF:4A:B0:7C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018814
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBDBF2DAC45411F097DBC8AEDAE4EC9C.roa
Signing time: Tue 18 Nov 2025 08:02:26 +0000
ROA not before: Tue 18 Nov 2025 08:02:21 +0000
ROA not after: Tue 30 Dec 2025 08:02:21 +0000
asID: 137547
IP address blocks: 156.245.128.0/21 maxlen: 24
156.245.248.0/21 maxlen: 24
156.245.248.0/24 maxlen: 24
156.245.249.0/24 maxlen: 24
156.245.250.0/24 maxlen: 24
156.245.251.0/24 maxlen: 24
156.245.252.0/24 maxlen: 24
156.245.253.0/24 maxlen: 24
156.245.254.0/24 maxlen: 24
156.245.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 05 Dec 2025 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100372 (0x18814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Nov 18 08:02:21 2025 GMT
Not After : Dec 30 08:02:21 2025 GMT
Subject: CN=691c2812-f66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ca:81:11:a4:dc:db:d6:68:ca:d3:e9:fe:c9:
8c:06:6d:62:54:2c:af:0f:dc:a8:6b:0b:85:35:0c:
2b:1d:24:89:4e:d5:74:a1:35:af:71:5e:cc:bb:d1:
e8:3b:a9:25:bd:1c:31:ea:57:ba:b1:df:f0:a1:92:
5f:d7:72:35:ba:b5:79:a3:d9:23:c4:78:4c:ef:8e:
2f:14:40:9a:68:dd:f8:b8:b0:18:04:ea:e4:46:f6:
4e:f2:73:42:34:14:92:6b:a3:6e:39:5c:44:6b:97:
96:99:5f:1d:10:27:7f:11:b4:50:d1:d7:6f:b9:d8:
77:cf:52:40:f9:64:b6:8c:ee:d0:91:27:2f:57:c2:
ad:0a:96:a0:15:ec:ad:c8:5b:84:cb:1a:7d:b4:7f:
85:6e:94:6d:93:2f:e9:d0:20:6c:7b:ff:3e:92:00:
59:4c:a9:d1:c7:5c:63:f1:16:63:e2:cf:e8:31:32:
f8:41:b2:89:d0:2d:4d:25:4f:91:3c:c7:65:0d:e9:
56:ef:d5:56:98:e5:d1:58:ac:22:12:90:64:04:41:
bd:a2:e8:af:50:ff:0f:79:49:a7:fc:4e:64:1d:0d:
46:a9:8a:88:36:b3:3c:d0:90:fc:2a:49:cc:1c:b8:
bc:1f:ca:5b:bd:4d:94:5f:2a:82:2b:e4:6f:62:83:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:76:F4:15:72:86:AC:C9:18:2E:46:7C:6F:27:0D:BF:EF:4A:B0:7C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EBDBF2DAC45411F097DBC8AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.245.128.0/21
156.245.248.0/21
Signature Algorithm: sha256WithRSAEncryption
32:22:d4:b8:82:dd:1a:1a:41:b0:59:60:c8:d3:b8:c8:1c:69:
86:58:d8:10:23:3b:77:67:8f:18:b2:57:29:d0:01:6e:4d:ea:
16:9f:06:8b:f7:97:08:5b:1a:44:f7:1f:1e:2b:95:8c:9f:d9:
9a:62:1b:e8:07:8d:3b:41:02:ed:ea:64:36:f6:dc:aa:9e:26:
df:5d:cb:88:c9:d4:f7:36:81:8f:36:e6:13:f9:6b:15:cb:61:
7d:37:42:b1:a7:98:f8:5b:cb:ed:59:d9:0e:c5:6f:0c:e9:dd:
b9:87:93:e6:4b:5f:fe:79:cf:82:b3:4d:dd:ab:0c:b4:08:f6:
8d:be:5c:34:54:02:48:2a:9e:45:03:f9:a1:ec:88:ac:dd:fb:
52:72:dd:ab:2b:81:cb:5e:7c:09:df:f7:af:a2:92:31:85:48:
3c:01:d9:f9:15:7f:16:00:51:9e:ec:ec:23:a3:b3:ce:85:b5:
2b:0d:79:90:eb:75:34:fe:fc:79:74:56:1a:19:26:06:c1:ff:
04:7d:e4:ba:d4:b2:22:ea:24:72:45:36:3f:b0:dd:c1:63:19:
e1:8d:a8:94:64:b5:f8:9b:6c:ae:d0:ce:f7:87:ef:e1:88:bd:
5d:2e:f4:b9:8a:3a:ef:56:e6:7c:0a:a5:c4:db:c7:89:52:e4:
c6:85:94:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 10:05:54 2025 by rpki-client