This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F29AF0FAD01911F0AAEAD0A5DAE4EC9C.roa File: F29AF0FAD01911F0AAEAD0A5DAE4EC9C.roa (raw, json) Hash identifier: DK7SSQljnr92bpSh1Bda/JMBZKjaiS7wJuRwnQMsR0E= Subject key identifier: 3B:5C:A4:7B:49:85:18:B7:7B:44:86:4F:A9:BB:B0:94:D6:68:04:7C Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Certificate serial: 018B69 Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F29AF0FAD01911F0AAEAD0A5DAE4EC9C.roa Signing time: Wed 03 Dec 2025 07:30:31 +0000 ROA not before: Wed 03 Dec 2025 07:30:23 +0000 ROA not after: Fri 02 Jan 2026 07:30:23 +0000 asID: 984 IP address blocks: 156.227.133.0/24 maxlen: 24 156.227.143.0/24 maxlen: 24 156.227.145.0/24 maxlen: 24 156.231.98.0/24 maxlen: 24 156.231.101.0/24 maxlen: 24 156.232.32.0/24 maxlen: 24 156.232.33.0/24 maxlen: 24 156.233.109.0/24 maxlen: 24 156.242.66.0/24 maxlen: 24 156.242.67.0/24 maxlen: 24 156.242.68.0/24 maxlen: 24 156.242.80.0/24 maxlen: 24 156.242.89.0/24 maxlen: 24 156.242.90.0/24 maxlen: 24 156.242.92.0/24 maxlen: 24 156.242.93.0/24 maxlen: 24 156.243.229.0/24 maxlen: 24 156.249.172.0/24 maxlen: 24 156.249.173.0/24 maxlen: 24 156.249.175.0/24 maxlen: 24 156.249.177.0/24 maxlen: 24 156.249.179.0/24 maxlen: 24 156.249.196.0/24 maxlen: 24 156.252.8.0/24 maxlen: 24 156.252.11.0/24 maxlen: 24 156.253.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Fri 05 Dec 2025 00:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 101225 (0x18b69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Validity Not Before: Dec 3 07:30:23 2025 GMT Not After : Jan 2 07:30:23 2026 GMT Subject: CN=692fe717-4fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:03:ef:4c:5b:c9:1b:3f:97:8c:cd:a8:be:a4: e7:8d:89:51:e7:c0:0d:9e:74:7d:90:0a:da:45:bf: 48:22:16:80:b6:7e:70:dd:7a:79:c0:a0:54:63:3e: ec:57:dd:cc:38:7c:3e:6a:e1:d3:5e:5c:49:69:8d: dd:fe:00:1b:05:d0:18:b4:b8:58:d7:32:39:b1:18: 59:66:76:8b:74:ee:d9:d0:d3:00:70:54:04:29:21: b7:26:0f:ff:7f:3f:9b:69:a1:d7:a7:3d:93:31:f5: 38:d2:62:16:4d:4d:a9:83:25:f9:b8:2b:eb:a6:a4: 60:79:af:ab:72:8f:39:b4:f7:85:c7:84:48:95:04: 31:57:bc:40:c3:f4:2a:94:18:ef:bf:5e:b7:1c:dd: b8:6a:7f:6b:f8:24:04:0d:1c:2f:b1:4c:c9:51:c2: 67:8b:77:af:ff:1c:e8:ff:17:d5:a5:ba:b5:8f:3c: fe:c2:3e:64:fe:e6:b3:ae:f2:4e:66:31:1c:97:aa: a5:85:2f:27:64:99:f2:02:5f:d1:5b:77:20:ea:fe: 0b:55:f1:35:1a:ab:ad:ed:f6:88:79:9e:99:6a:ec: 6f:e5:e0:47:cc:e0:6c:d6:5b:91:74:36:37:f6:02: 61:bc:db:05:ce:35:9c:1c:f9:f2:b2:cf:76:bd:34: f2:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5C:A4:7B:49:85:18:B7:7B:44:86:4F:A9:BB:B0:94:D6:68:04:7C X509v3 Authority Key Identifier: keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F29AF0FAD01911F0AAEAD0A5DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 156.227.133.0/24 156.227.143.0/24 156.227.145.0/24 156.231.98.0/24 156.231.101.0/24 156.232.32.0/23 156.233.109.0/24 156.242.66.0-156.242.68.255 156.242.80.0/24 156.242.89.0-156.242.90.255 156.242.92.0/23 156.243.229.0/24 156.249.172.0/23 156.249.175.0/24 156.249.177.0/24 156.249.179.0/24 156.249.196.0/24 156.252.8.0/24 156.252.11.0/24 156.253.134.0/24 Signature Algorithm: sha256WithRSAEncryption ae:65:75:63:f5:75:57:79:8e:c0:af:58:04:ca:b9:dd:37:84: a2:18:f5:a0:92:4f:bb:34:16:10:de:2d:c0:07:76:6f:07:8e: fd:43:4f:54:0c:a3:6d:04:e1:89:6c:82:7c:fb:b2:4f:25:f1: 6c:91:60:b2:ce:f8:79:50:52:37:91:46:9b:e9:68:98:eb:f9: 48:e4:01:41:33:0c:c0:f3:5b:9a:0b:11:e4:98:46:b1:65:5c: 92:47:f9:32:35:94:de:e1:cf:62:ff:7d:82:7c:46:61:19:d7: 4d:30:d1:16:83:15:67:91:ed:82:79:67:7c:40:45:91:d0:82: ba:34:01:e6:a5:1c:24:9c:af:13:08:dc:4d:e9:cb:36:49:7b: 82:40:6e:f7:38:0d:86:6d:cb:ae:1e:c8:cc:b0:35:97:db:d3: 5d:e3:3b:29:5a:c4:be:d2:c4:ab:a1:00:3e:5a:c8:22:45:3f: 84:28:0a:91:94:85:b6:b9:69:b7:c1:3a:b7:71:48:43:35:bf: 3f:16:a8:67:74:31:80:c8:5f:41:31:c1:fd:e4:b6:19:82:79: e0:fa:d1:08:9c:13:d2:45:da:97:8a:34:b2:79:22:3a:33:80: 6f:33:20:0b:ec:f7:48:1b:cd:dd:a3:18:ff:95:5e:b9:5f:1f: f6:ea:88:43 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIDAYtpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5 QkFFQTZCRkQ2OUIwHhcNMjUxMjAzMDczMDIzWhcNMjYwMTAyMDczMDIzWjAYMRYw FAYDVQQDEw02OTJmZTcxNy00ZmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAqgPvTFvJGz+XjM2ovqTnjYlR58ANnnR9kAraRb9IIhaAtn5w3Xp5wKBU Yz7sV93MOHw+auHTXlxJaY3d/gAbBdAYtLhY1zI5sRhZZnaLdO7Z0NMAcFQEKSG3 Jg//fz+baaHXpz2TMfU40mIWTU2pgyX5uCvrpqRgea+rco85tPeFx4RIlQQxV7xA w/QqlBjvv163HN24an9r+CQEDRwvsUzJUcJni3ev/xzo/xfVpbq1jzz+wj5k/uaz rvJOZjEcl6qlhS8nZJnyAl/RW3cg6v4LVfE1Gqut7faIeZ6Zauxv5eBHzOBs1luR dDY39gJhvNsFzjWcHPnyss92vTTyrQIDAQABo4IDKTCCAyUwHQYDVR0OBBYEFDtc pHtJhRi3e0SGT6m7sJTWaAR8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF QTIyOC9GMjlBRjBGQUQwMTkxMUYwQUFFQUQwQTVEQUU0RUM5Qy5yb2EwNQYIKwYB BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s MIGlBggrBgEFBQcBBwEB/wSBlTCBkjCBjwQCAAEwgYgDBACc44UDBACc448DBACc 45EDBACc52IDBACc52UDBAGc6CADBACc6W0wDAMEAZzyQgMEAJzyRAMEAJzyUDAM AwQAnPJZAwQAnPJaAwQBnPJcAwQAnPPlAwQBnPmsAwQAnPmvAwQAnPmxAwQAnPmz AwQAnPnEAwQAnPwIAwQAnPwLAwQAnP2GMA0GCSqGSIb3DQEBCwUAA4IBAQCuZXVj 9XVXeY7Ar1gEyrndN4SiGPWgkk+7NBYQ3i3AB3ZvB479Q09UDKNtBOGJbIJ8+7JP JfFskWCyzvh5UFI3kUab6WiY6/lI5AFBMwzA81uaCxHkmEaxZVySR/kyNZTe4c9i /32CfEZhGddNMNEWgxVnke2CeWd8QEWR0IK6NAHmpRwknK8TCNxN6cs2SXuCQG73 OA2GbcuuHsjMsDWX29Nd4zspWsS+0sSroQA+WsgiRT+EKAqRlIW2uWm3wTq3cUhD Nb8/FqhndDGAyF9BMcH95LYZgnng+tEInBPSRdqXijSyeSI6M4BvMyAL7PdIG83d oxj/lV65Xx/26ohD -----END CERTIFICATE-----Generated at Wed Dec 3 10:07:47 2025 by rpki-client