This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F256083ACFAD11F0A67CE2F0DAE4EC9C.roa File: F256083ACFAD11F0A67CE2F0DAE4EC9C.roa (raw, json) Hash identifier: dgzGQVnkPWf3hzkgqNOveLWfbUSRf+DsGSI+mVAMx0Q= Subject key identifier: 18:2D:8D:40:B6:5C:C0:1D:BF:9B:63:23:84:76:20:D7:26:A9:C1:53 Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Certificate serial: 018B45 Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F256083ACFAD11F0A67CE2F0DAE4EC9C.roa Signing time: Tue 02 Dec 2025 18:37:25 +0000 ROA not before: Tue 02 Dec 2025 18:37:19 +0000 ROA not after: Sun 19 Nov 2028 18:37:19 +0000 asID: 17561 IP address blocks: 156.232.4.0/24 maxlen: 24 156.232.5.0/24 maxlen: 24 156.232.8.0/24 maxlen: 24 156.242.125.0/24 maxlen: 24 156.242.126.0/24 maxlen: 24 156.243.39.0/24 maxlen: 24 156.243.81.0/24 maxlen: 24 156.243.85.0/24 maxlen: 24 156.243.86.0/24 maxlen: 24 156.243.87.0/24 maxlen: 24 156.243.112.0/24 maxlen: 24 156.243.116.0/24 maxlen: 24 156.243.117.0/24 maxlen: 24 156.243.118.0/24 maxlen: 24 156.243.119.0/24 maxlen: 24 156.243.128.0/24 maxlen: 24 156.243.131.0/24 maxlen: 24 156.243.235.0/24 maxlen: 24 156.243.247.0/24 maxlen: 24 156.249.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101189 (0x18b45) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Validity Not Before: Dec 2 18:37:19 2025 GMT Not After : Nov 19 18:37:19 2028 GMT Subject: CN=692f31e5-bd09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f5:1a:dc:65:a6:e8:a8:2c:12:8c:22:5a:e0: cd:07:d8:52:b9:0f:e0:a5:3a:95:7a:b5:32:e0:e5: cf:9b:7a:93:7f:47:96:68:29:89:ea:4b:88:ef:16: a7:f3:54:f7:ee:73:ce:e2:17:aa:b7:9c:88:61:25: 47:6e:13:72:03:1e:9d:48:ee:eb:6f:42:c3:49:26: e0:11:92:c6:0a:94:d5:d9:cd:06:72:2a:9c:8c:6f: d7:14:d7:8d:10:20:6d:ed:58:b9:b2:8f:26:fc:50: d9:b0:ed:9a:d8:44:1b:20:ee:0e:1b:47:8c:4d:35: 23:e7:a9:b5:c3:4f:f6:a5:c0:cb:bb:ab:65:a9:95: ec:9e:0a:73:e0:c8:98:47:63:a6:1f:12:1b:bc:a9: 77:9c:f1:b2:53:e2:45:a3:3b:0f:ef:5e:c8:6b:bf: fa:46:51:54:9f:ef:2c:5d:c2:15:59:1a:ab:70:61: 74:38:71:a6:61:57:17:ca:1f:c6:a4:ee:5a:b5:ed: 75:ad:b5:fc:d4:8c:71:d7:e4:66:91:3d:60:0f:b2: 56:bd:65:a1:b4:1e:ab:46:13:bf:47:72:8a:5b:41: 32:de:1a:92:75:03:be:c4:ea:00:23:1b:f3:1f:53: 05:27:4a:77:90:ed:c9:62:4c:dc:e1:ab:55:3f:6e: eb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2D:8D:40:B6:5C:C0:1D:BF:9B:63:23:84:76:20:D7:26:A9:C1:53 X509v3 Authority Key Identifier: keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F256083ACFAD11F0A67CE2F0DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 156.232.4.0/23 156.232.8.0/24 156.242.125.0-156.242.126.255 156.243.39.0/24 156.243.81.0/24 156.243.85.0-156.243.87.255 156.243.112.0/24 156.243.116.0/22 156.243.128.0/24 156.243.131.0/24 156.243.235.0/24 156.243.247.0/24 156.249.18.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:2a:21:dc:38:4c:6d:88:6f:cf:75:29:17:ec:c8:c6:fc:aa: f3:2d:40:1a:64:8f:b1:f8:fc:a7:5f:83:7a:b1:3e:dc:b2:8a: da:27:16:eb:ce:a3:ae:e9:78:be:e9:ae:59:b9:53:d9:5b:29: 11:b9:e7:e8:b9:56:cb:f9:f1:8c:e5:4c:c6:3d:35:64:c9:20: 25:a6:3a:b7:68:03:5b:2f:1a:21:e2:a1:76:f4:75:f9:47:13: f5:7c:6d:94:d4:1f:a1:67:2e:e6:6e:58:66:89:82:20:83:23: 08:94:8d:92:3a:1b:4e:af:44:37:03:b0:f8:1d:00:9a:99:f3: 84:f7:b2:86:ba:22:b5:e1:f4:27:c1:ba:77:33:f0:d4:93:3c: c4:09:44:c4:83:20:96:f2:dc:a9:5c:79:08:0f:71:c6:5c:3a: 49:6b:ac:6d:c3:d1:09:41:b1:a9:21:10:b4:ec:f9:57:bf:26: ca:0e:39:1b:af:ef:b0:fd:71:53:d3:97:10:86:f4:9e:e9:9b: d9:20:48:3f:3f:7e:b8:cf:e3:b3:5d:b7:60:e3:3a:d1:9d:06: 0a:e5:eb:44:f9:13:aa:18:bb:3e:c4:71:16:f0:b6:a0:69:5f: 9a:d3:58:56:e2:b4:6e:60:9d:b5:5b:b8:6e:02:1c:03:99:06: be:77:95:51 -----BEGIN CERTIFICATE----- MIIF2TCCBMGgAwIBAgIDAYtFMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5 QkFFQTZCRkQ2OUIwHhcNMjUxMjAyMTgzNzE5WhcNMjgxMTE5MTgzNzE5WjAYMRYw FAYDVQQDEw02OTJmMzFlNS1iZDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAu/Ua3GWm6KgsEowiWuDNB9hSuQ/gpTqVerUy4OXPm3qTf0eWaCmJ6kuI 7xan81T37nPO4heqt5yIYSVHbhNyAx6dSO7rb0LDSSbgEZLGCpTV2c0GciqcjG/X FNeNECBt7Vi5so8m/FDZsO2a2EQbIO4OG0eMTTUj56m1w0/2pcDLu6tlqZXsngpz 4MiYR2OmHxIbvKl3nPGyU+JFozsP717Ia7/6RlFUn+8sXcIVWRqrcGF0OHGmYVcX yh/GpO5ate11rbX81Ixx1+RmkT1gD7JWvWWhtB6rRhO/R3KKW0Ey3hqSdQO+xOoA IxvzH1MFJ0p3kO3JYkzc4atVP27r0QIDAQABo4IC+jCCAvYwHQYDVR0OBBYEFBgt jUC2XMAdv5tjI4R2INcmqcFTMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF QTIyOC9GMjU2MDgzQUNGQUQxMUYwQTY3Q0UyRjBEQUU0RUM5Qy5yb2EwNQYIKwYB BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s MHcGCCsGAQUFBwEHAQH/BGgwZjBkBAIAATBeAwQBnOgEAwQAnOgIMAwDBACc8n0D BACc8n4DBACc8ycDBACc81EwDAMEAJzzVQMEA5zzUAMEAJzzcAMEApzzdAMEAJzz gAMEAJzzgwMEAJzz6wMEAJzz9wMEAJz5EjANBgkqhkiG9w0BAQsFAAOCAQEAbCoh 3DhMbYhvz3UpF+zIxvyq8y1AGmSPsfj8p1+DerE+3LKK2icW686jrul4vumuWblT 2VspEbnn6LlWy/nxjOVMxj01ZMkgJaY6t2gDWy8aIeKhdvR1+UcT9XxtlNQfoWcu 5m5YZomCIIMjCJSNkjobTq9ENwOw+B0AmpnzhPeyhroiteH0J8G6dzPw1JM8xAlE xIMglvLcqVx5CA9xxlw6SWusbcPRCUGxqSEQtOz5V78myg45G6/vsP1xU9OXEIb0 numb2SBIPz9+uM/js123YOM60Z0GCuXrRPkTqhi7PsRxFvC2oGlfmtNYVuK0bmCd tVu4bgIcA5kGvneVUQ== -----END CERTIFICATE-----Generated at Wed Dec 3 10:06:17 2025 by rpki-client