This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C475FF2DB2511F0B4CDA3E5DAE4EC9C.roa File: 8C475FF2DB2511F0B4CDA3E5DAE4EC9C.roa (raw, json) Hash identifier: mI6PZY1C3TPj4aDGyJu5FwPyIZGDp5p3Bi/Z9NWjx64= Subject key identifier: 30:8A:1C:17:A9:31:AC:00:11:EB:BD:1A:8E:EB:F9:46:27:9C:28:88 Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Certificate serial: 018F34 Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C475FF2DB2511F0B4CDA3E5DAE4EC9C.roa Signing time: Wed 17 Dec 2025 08:51:17 +0000 ROA not before: Wed 17 Dec 2025 08:51:11 +0000 ROA not after: Mon 19 Jan 2026 08:51:11 +0000 asID: 11404 IP address blocks: 45.195.0.0/24 maxlen: 24 45.195.84.0/22 maxlen: 24 45.196.92.0/22 maxlen: 24 45.197.200.0/21 maxlen: 24 45.197.224.0/21 maxlen: 24 45.200.144.0/20 maxlen: 24 45.202.16.0/20 maxlen: 24 45.204.32.0/20 maxlen: 24 45.205.176.0/20 maxlen: 24 45.205.240.0/20 maxlen: 24 45.206.128.0/18 maxlen: 24 45.206.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 21 Dec 2025 00:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102196 (0x18f34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B Validity Not Before: Dec 17 08:51:11 2025 GMT Not After : Jan 19 08:51:11 2026 GMT Subject: CN=69426f04-7328 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:a3:64:21:ca:01:fd:ff:c7:cc:d1:d5:01: a6:a8:40:7f:81:22:f2:f5:92:2d:d4:ea:24:d2:cd: 90:12:c4:b6:f5:50:55:97:3f:65:eb:6f:9d:60:70: d2:83:f6:06:35:a6:59:c9:fa:01:d0:44:b0:f5:0e: ca:87:5b:0f:85:59:f3:29:a5:e2:3b:63:f0:86:04: 77:ce:a5:5c:02:37:a5:47:2a:31:e0:a6:39:05:da: 77:cf:54:bc:13:0e:71:c8:1c:6a:32:3f:b1:c5:5c: 26:2f:99:84:32:f8:91:e1:d8:7d:c0:23:f8:7a:57: 95:d6:8e:be:10:e1:47:74:5c:d8:f0:42:98:31:a5: 78:5a:7e:4f:b7:f1:fa:26:47:46:1a:ea:59:d8:38: 18:be:98:0e:32:db:6d:23:f6:ca:e6:51:26:d5:e9: 83:b6:f0:a7:ff:c8:8d:83:18:68:81:0f:30:64:e2: 43:cd:8a:67:db:78:be:07:e3:21:7e:05:d6:51:22: 35:f9:ee:7d:44:14:18:51:e6:b5:ec:d4:c5:2a:87: 98:68:c0:c1:9e:99:78:35:38:62:91:cb:16:02:0c: c5:5b:7f:9a:dd:95:82:78:c7:b2:d6:4e:b3:4c:9b: ea:e5:46:df:b8:d2:cc:45:de:b9:96:94:cd:78:66: ad:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8A:1C:17:A9:31:AC:00:11:EB:BD:1A:8E:EB:F9:46:27:9C:28:88 X509v3 Authority Key Identifier: keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C475FF2DB2511F0B4CDA3E5DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.195.0.0/24 45.195.84.0/22 45.196.92.0/22 45.197.200.0/21 45.197.224.0/21 45.200.144.0/20 45.202.16.0/20 45.204.32.0/20 45.205.176.0/20 45.205.240.0/20 45.206.128.0/17 Signature Algorithm: sha256WithRSAEncryption 83:48:5d:b3:fb:7d:0d:56:d0:5c:fd:d6:8d:1c:d8:52:d8:c3: 66:6e:2f:3f:32:56:50:6f:35:6d:cc:6c:3e:12:d7:11:fd:3c: 2f:cf:e2:66:86:42:57:bd:41:df:cd:7c:3a:6c:78:8f:55:40: 85:a0:99:f4:c1:35:f4:2a:4b:91:1b:9d:a1:c1:38:76:9a:fc: 56:2a:69:a3:b2:05:53:b8:bc:b4:39:c3:8d:7e:b4:a0:66:62: 8d:7f:95:40:b4:1b:36:5d:0b:04:b8:f8:06:dc:20:c6:b9:5d: b4:20:36:c8:ba:d9:61:71:cd:eb:6d:6a:c5:bf:ee:91:17:f3: 9b:c5:0d:2c:e7:19:06:e7:ca:9a:53:03:f7:f5:2b:4e:31:23: 0f:b0:4c:b4:20:9f:4e:59:09:00:40:90:c0:45:d7:d2:1a:13: 13:11:8c:3a:19:0d:2c:81:40:e7:72:38:27:a5:4f:bd:e8:12: 9e:0c:4b:a8:0b:54:8b:3b:65:0f:73:34:98:cb:60:4f:5a:90: 2d:64:77:a9:cc:e0:ad:c7:cb:7e:a2:a3:00:08:1f:9c:74:30: 08:40:00:50:c8:30:09:2f:a2:56:da:24:0a:4b:3b:9d:72:5c: 28:fd:77:22:33:cb:24:86:ad:d6:6e:c9:cc:e7:4b:da:b3:cb: c1:6b:4b:4b -----BEGIN CERTIFICATE----- MIIFvTCCBKWgAwIBAgIDAY80MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5 QkFFQTZCRkQ2OUIwHhcNMjUxMjE3MDg1MTExWhcNMjYwMTE5MDg1MTExWjAYMRYw FAYDVQQDEw02OTQyNmYwNC03MzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAz/ajZCHKAf3/x8zR1QGmqEB/gSLy9ZIt1Ook0s2QEsS29VBVlz9l62+d YHDSg/YGNaZZyfoB0ESw9Q7Kh1sPhVnzKaXiO2PwhgR3zqVcAjelRyox4KY5Bdp3 z1S8Ew5xyBxqMj+xxVwmL5mEMviR4dh9wCP4eleV1o6+EOFHdFzY8EKYMaV4Wn5P t/H6JkdGGupZ2DgYvpgOMtttI/bK5lEm1emDtvCn/8iNgxhogQ8wZOJDzYpn23i+ B+MhfgXWUSI1+e59RBQYUea17NTFKoeYaMDBnpl4NThikcsWAgzFW3+a3ZWCeMey 1k6zTJvq5UbfuNLMRd65lpTNeGatNwIDAQABo4IC3jCCAtowHQYDVR0OBBYEFDCK HBepMawAEeu9Go7r+UYnnCiIMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF QTIyOC84QzQ3NUZGMkRCMjUxMUYwQjRDREEzRTVEQUU0RUM5Qy5yb2EwNQYIKwYB BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s MFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQALcMAAwQCLcNUAwQCLcRcAwQD LcXIAwQDLcXgAwQELciQAwQELcoQAwQELcwgAwQELc2wAwQELc3wAwQHLc6AMA0G CSqGSIb3DQEBCwUAA4IBAQCDSF2z+30NVtBc/daNHNhS2MNmbi8/MlZQbzVtzGw+ EtcR/Twvz+JmhkJXvUHfzXw6bHiPVUCFoJn0wTX0KkuRG52hwTh2mvxWKmmjsgVT uLy0OcONfrSgZmKNf5VAtBs2XQsEuPgG3CDGuV20IDbIutlhcc3rbWrFv+6RF/Ob xQ0s5xkG58qaUwP39StOMSMPsEy0IJ9OWQkAQJDARdfSGhMTEYw6GQ0sgUDncjgn pU+96BKeDEuoC1SLO2UPczSYy2BPWpAtZHepzOCtx8t+oqMACB+cdDAIQABQyDAJ L6JW2iQKSzudclwo/XciM8skhq3WbsnM50vas8vBa0tL -----END CERTIFICATE-----Generated at Fri Dec 19 19:33:47 2025 by rpki-client