This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2565E896E47411F09408D9CADAE4EC9C.roa File: 2565E896E47411F09408D9CADAE4EC9C.roa (raw, json) Hash identifier: XVkLbm3DA/6O5Ga7AA+0/rR9qbQtva6rxVuH+WZEsPM= Subject key identifier: 4C:2E:2F:5C:D8:E7:1D:31:87:56:A6:13:67:3F:D2:7E:75:51:60:F4 Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Certificate serial: 0192AE Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2565E896E47411F09408D9CADAE4EC9C.roa Signing time: Mon 29 Dec 2025 05:06:35 +0000 ROA not before: Mon 29 Dec 2025 05:06:30 +0000 ROA not after: Sun 01 Feb 2026 05:06:30 +0000 asID: 984 IP address blocks: 156.227.133.0/24 maxlen: 24 156.227.143.0/24 maxlen: 24 156.227.145.0/24 maxlen: 24 156.231.98.0/24 maxlen: 24 156.231.101.0/24 maxlen: 24 156.232.32.0/24 maxlen: 24 156.232.33.0/24 maxlen: 24 156.233.109.0/24 maxlen: 24 156.242.66.0/24 maxlen: 24 156.242.67.0/24 maxlen: 24 156.242.68.0/24 maxlen: 24 156.242.80.0/24 maxlen: 24 156.242.89.0/24 maxlen: 24 156.242.90.0/24 maxlen: 24 156.242.92.0/24 maxlen: 24 156.242.93.0/24 maxlen: 24 156.243.229.0/24 maxlen: 24 156.249.172.0/24 maxlen: 24 156.249.173.0/24 maxlen: 24 156.249.175.0/24 maxlen: 24 156.249.177.0/24 maxlen: 24 156.249.179.0/24 maxlen: 24 156.249.196.0/24 maxlen: 24 156.252.11.0/24 maxlen: 24 156.253.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Thu 01 Jan 2026 00:26:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103086 (0x192ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Validity Not Before: Dec 29 05:06:30 2025 GMT Not After : Feb 1 05:06:30 2026 GMT Subject: CN=69520c5b-6661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:53:69:9c:6c:30:44:23:14:35:df:ae:10:c8: d5:72:9d:a1:72:b0:b1:d4:35:33:ce:fd:c1:04:c8: b9:55:f6:be:0d:3d:de:0a:06:7a:0d:12:94:88:fa: 40:d1:60:cd:04:b7:b2:5b:2b:10:ef:72:fe:91:ed: 93:4f:09:a0:82:2d:a2:6d:8d:57:af:74:47:0f:d4: ef:87:ac:bf:7e:f9:47:10:9b:5c:89:8b:09:38:57: 60:d9:c3:cd:3b:f5:e7:63:b6:98:08:1a:72:1b:37: 65:20:19:ce:ad:81:3c:ff:36:f2:60:da:94:57:22: a4:d1:da:8e:1b:67:87:ae:1a:10:48:54:f9:ed:fd: e8:e5:70:c0:13:16:0a:a8:7a:85:38:e5:cb:67:0d: 5f:da:1f:fa:58:8e:bd:80:e5:5b:34:36:24:d2:bd: 97:78:07:b2:3c:62:73:56:3e:8e:3c:91:94:be:75: 64:c0:de:d9:f9:4a:b5:6d:d5:25:16:08:bd:f7:46: 75:59:01:1c:b6:e1:f9:2c:89:38:1d:40:19:23:7d: e6:94:04:8a:2f:b7:df:c9:cd:a1:4f:1e:18:db:2d: cc:ee:b4:e8:d6:24:56:bf:f5:a8:18:ee:24:7f:a3: 97:df:43:62:c0:0d:55:e6:6d:59:2c:0c:17:a3:ec: 65:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2E:2F:5C:D8:E7:1D:31:87:56:A6:13:67:3F:D2:7E:75:51:60:F4 X509v3 Authority Key Identifier: keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2565E896E47411F09408D9CADAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 156.227.133.0/24 156.227.143.0/24 156.227.145.0/24 156.231.98.0/24 156.231.101.0/24 156.232.32.0/23 156.233.109.0/24 156.242.66.0-156.242.68.255 156.242.80.0/24 156.242.89.0-156.242.90.255 156.242.92.0/23 156.243.229.0/24 156.249.172.0/23 156.249.175.0/24 156.249.177.0/24 156.249.179.0/24 156.249.196.0/24 156.252.11.0/24 156.253.134.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:a5:a6:06:0e:29:8a:45:7d:c6:7a:6f:ed:98:f1:6f:fa:92: 45:59:38:52:0c:78:32:61:7a:5d:79:f9:f0:c8:1a:72:af:e9: 16:4b:ca:e9:78:ee:a2:da:59:48:f4:a6:ff:77:98:e1:cd:3a: 49:d7:7d:ff:d4:de:de:f2:09:6e:b1:25:32:b6:42:23:55:9e: 0c:17:42:21:4d:e2:ea:a3:68:27:50:1c:8b:60:78:78:1a:af: 4d:1a:08:bb:96:2b:22:2c:af:f7:47:59:d9:3d:5a:e7:bb:ee: c2:a4:00:37:d2:66:be:5f:46:9a:61:88:74:a1:e2:9d:64:3d: 5d:4a:17:e9:f4:95:f8:9a:13:18:0e:a8:6e:ce:15:ab:9f:ff: 87:3f:04:e9:33:82:a4:d0:d9:ae:8c:d3:99:0b:c6:10:a1:79: 5f:07:c7:a5:57:6d:86:73:ff:5d:79:84:63:94:82:27:dd:6d: e2:9b:63:05:03:f0:9b:49:17:06:3a:a5:c9:58:a3:9b:bf:bf: 5f:d2:c9:37:ea:d3:76:f5:a7:55:d5:0c:3f:6a:ae:e4:aa:09: 31:9d:1c:66:2c:3b:f8:fd:04:2f:07:02:d2:37:fc:3b:5a:c1: b1:a3:d8:31:07:8d:56:8a:a4:85:90:71:b7:b5:6b:89:1d:b4: 57:6c:de:8f -----BEGIN CERTIFICATE----- MIIGAjCCBOqgAwIBAgIDAZKuMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5 QkFFQTZCRkQ2OUIwHhcNMjUxMjI5MDUwNjMwWhcNMjYwMjAxMDUwNjMwWjAYMRYw FAYDVQQDEw02OTUyMGM1Yi02NjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAnVNpnGwwRCMUNd+uEMjVcp2hcrCx1DUzzv3BBMi5Vfa+DT3eCgZ6DRKU iPpA0WDNBLeyWysQ73L+ke2TTwmggi2ibY1Xr3RHD9Tvh6y/fvlHEJtciYsJOFdg 2cPNO/XnY7aYCBpyGzdlIBnOrYE8/zbyYNqUVyKk0dqOG2eHrhoQSFT57f3o5XDA ExYKqHqFOOXLZw1f2h/6WI69gOVbNDYk0r2XeAeyPGJzVj6OPJGUvnVkwN7Z+Uq1 bdUlFgi990Z1WQEctuH5LIk4HUAZI33mlASKL7ffyc2hTx4Y2y3M7rTo1iRWv/Wo GO4kf6OX30NiwA1V5m1ZLAwXo+xlkwIDAQABo4IDIzCCAx8wHQYDVR0OBBYEFEwu L1zY5x0xh1amE2c/0n51UWD0MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF QTIyOC8yNTY1RTg5NkU0NzQxMUYwOTQwOEQ5Q0FEQUU0RUM5Qy5yb2EwNQYIKwYB BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s MIGfBggrBgEFBQcBBwEB/wSBjzCBjDCBiQQCAAEwgYIDBACc44UDBACc448DBACc 45EDBACc52IDBACc52UDBAGc6CADBACc6W0wDAMEAZzyQgMEAJzyRAMEAJzyUDAM AwQAnPJZAwQAnPJaAwQBnPJcAwQAnPPlAwQBnPmsAwQAnPmvAwQAnPmxAwQAnPmz AwQAnPnEAwQAnPwLAwQAnP2GMA0GCSqGSIb3DQEBCwUAA4IBAQA/paYGDimKRX3G em/tmPFv+pJFWThSDHgyYXpdefnwyBpyr+kWS8rpeO6i2llI9Kb/d5jhzTpJ133/ 1N7e8glusSUytkIjVZ4MF0IhTeLqo2gnUByLYHh4Gq9NGgi7lisiLK/3R1nZPVrn u+7CpAA30ma+X0aaYYh0oeKdZD1dShfp9JX4mhMYDqhuzhWrn/+HPwTpM4Kk0Nmu jNOZC8YQoXlfB8elV22Gc/9deYRjlIIn3W3im2MFA/CbSRcGOqXJWKObv79f0sk3 6tN29adV1Qw/aq7kqgkxnRxmLDv4/QQvBwLSN/w7WsGxo9gxB41WiqSFkHG3tWuJ HbRXbN6P -----END CERTIFICATE-----Generated at Tue Dec 30 12:28:28 2025 by rpki-client