This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3ABDBBA2D99711F0A75B07A0DAE4EC9C.roa
File: 3ABDBBA2D99711F0A75B07A0DAE4EC9C.roa (raw, json)
Hash identifier: c6z39Cgp4AJ17RfCXsREbcuXe1hp1FeWcvxPQ0T9LKU=
Subject key identifier: C1:80:5B:E5:5E:50:21:C5:00:3D:35:CB:D2:A4:26:04:BB:43:C3:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 018E29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3ABDBBA2D99711F0A75B07A0DAE4EC9C.roa
Signing time: Mon 15 Dec 2025 09:20:00 +0000
ROA not before: Mon 15 Dec 2025 09:19:55 +0000
ROA not after: Fri 16 Jan 2026 09:19:55 +0000
asID: 22773
IP address blocks: 156.238.143.0/24 maxlen: 24
156.238.145.0/24 maxlen: 24
156.238.146.0/24 maxlen: 24
156.238.147.0/24 maxlen: 24
156.238.148.0/24 maxlen: 24
156.238.149.0/24 maxlen: 24
156.238.150.0/24 maxlen: 24
156.238.151.0/24 maxlen: 24
156.238.152.0/24 maxlen: 24
156.238.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101929 (0x18e29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Dec 15 09:19:55 2025 GMT
Not After : Jan 16 09:19:55 2026 GMT
Subject: CN=693fd2c0-98b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:95:59:12:23:4a:58:98:ff:6b:3c:f2:9b:8b:
93:70:63:72:2b:8a:de:f3:7a:e6:8e:1c:23:8f:90:
c8:8b:71:69:ba:a9:65:ab:c6:ea:19:17:e6:f1:4b:
27:53:85:04:25:fc:17:3d:c7:cf:0d:c8:ea:bc:95:
02:ed:f6:0f:54:33:13:ca:50:9d:dc:eb:1d:3e:f7:
9b:9d:34:c6:aa:f2:e0:66:43:73:70:4c:9b:f2:01:
18:69:05:c1:25:ec:46:0f:56:f1:d4:64:2f:df:83:
61:b5:15:9e:ac:6f:07:f5:f6:71:9f:35:1a:a9:cb:
5b:7c:16:e0:a2:17:e9:1e:b2:2a:d4:8b:ee:c8:59:
c5:a5:a7:22:fc:58:d3:44:43:0b:a3:ac:bd:f5:4f:
43:24:15:48:a6:5f:d0:44:07:17:a0:f3:c2:56:9e:
8b:1f:95:83:8d:be:27:47:59:d8:bc:f2:fe:0f:5c:
b4:d3:de:2f:78:9d:d8:49:c8:73:8b:20:bf:1d:fb:
64:de:ff:08:85:c1:29:69:c1:84:c7:e1:14:b4:13:
4f:0e:91:09:73:de:ac:39:52:6e:de:ec:b2:49:f6:
59:53:93:f5:90:df:06:e9:0a:0b:c1:0d:29:e1:b7:
8e:50:82:10:60:fa:20:78:ff:8d:cc:02:d5:55:f2:
4e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:80:5B:E5:5E:50:21:C5:00:3D:35:CB:D2:A4:26:04:BB:43:C3:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3ABDBBA2D99711F0A75B07A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
156.238.143.0/24
156.238.145.0-156.238.153.255
Signature Algorithm: sha256WithRSAEncryption
14:df:19:e7:89:f5:9a:bf:65:e4:4a:4b:1a:de:06:dc:c0:b0:
f8:36:86:9d:3d:8c:31:f7:dc:24:de:74:fe:83:29:20:fb:a2:
99:28:08:6d:42:fb:aa:e8:17:d8:69:8c:5c:04:d1:c0:f3:86:
ec:ed:df:b1:75:76:ce:1d:cb:92:5d:2a:b1:15:c3:41:11:44:
2e:4a:02:76:2e:68:6a:39:21:e5:34:75:b9:85:de:26:b6:0b:
e7:ad:89:c2:83:62:6e:18:38:17:0c:37:80:27:0a:7f:5c:f3:
90:a9:ae:bd:b8:e5:0a:5b:a6:ba:e5:67:c2:8f:fc:ee:b4:08:
d8:49:d3:94:b2:d7:be:af:7a:75:67:c0:1b:02:18:f0:31:e5:
28:d6:47:5f:f0:f3:26:2c:15:49:ff:fb:69:4f:82:8c:53:34:
b4:f7:5f:e5:94:23:3e:d8:e9:d9:47:97:14:cb:41:0c:1e:05:
9e:20:fb:20:56:71:4a:d3:5f:84:5d:ea:a0:84:21:df:b6:b1:
2c:9f:00:44:52:af:06:43:48:52:be:32:ca:b3:f5:e6:e8:e9:
03:4a:9c:c3:89:a6:7d:e0:ec:8e:29:68:7a:ac:56:98:3f:e7:
c2:cf:e5:eb:8b:48:0d:30:70:6f:fd:29:ce:94:ec:e2:be:a2:
d7:e8:2d:35
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAY4pMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMjE1MDkxOTU1WhcNMjYwMTE2MDkxOTU1WjAYMRYw
FAYDVQQDEw02OTNmZDJjMC05OGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4JVZEiNKWJj/azzym4uTcGNyK4re83rmjhwjj5DIi3Fpuqllq8bqGRfm
8UsnU4UEJfwXPcfPDcjqvJUC7fYPVDMTylCd3OsdPvebnTTGqvLgZkNzcEyb8gEY
aQXBJexGD1bx1GQv34NhtRWerG8H9fZxnzUaqctbfBbgohfpHrIq1IvuyFnFpaci
/FjTREMLo6y99U9DJBVIpl/QRAcXoPPCVp6LH5WDjb4nR1nYvPL+D1y0094veJ3Y
SchziyC/Hftk3v8IhcEpacGEx+EUtBNPDpEJc96sOVJu3uyySfZZU5P1kN8G6QoL
wQ0p4beOUIIQYPogeP+NzALVVfJOpwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFMGA
W+VeUCHFAD01y9KkJgS7Q8MaMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zQUJEQkJBMkQ5OTcxMUYwQTc1QjA3QTBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAnO6PMAwDBACc7pEDBAGc7pgw
DQYJKoZIhvcNAQELBQADggEBABTfGeeJ9Zq/ZeRKSxreBtzAsPg2hp09jDH33CTe
dP6DKSD7opkoCG1C+6roF9hpjFwE0cDzhuzt37F1ds4dy5JdKrEVw0ERRC5KAnYu
aGo5IeU0dbmF3ia2C+eticKDYm4YOBcMN4AnCn9c85Cprr245QpbprrlZ8KP/O60
CNhJ05Sy176venVnwBsCGPAx5SjWR1/w8yYsFUn/+2lPgoxTNLT3X+WUIz7Y6dlH
lxTLQQweBZ4g+yBWcUrTX4Rd6qCEId+2sSyfAERSrwZDSFK+Msqz9ebo6QNKnMOJ
pn3g7I4paHqsVpg/58LP5euLSA0wcG/9Kc6U7OK+otfoLTU=
-----END CERTIFICATE-----
Generated at Fri Dec 19 19:41:44 2025 by rpki-client