This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/CFAE3C72CDCC11F0B6625DB3DAE4EC9C.roa File: CFAE3C72CDCC11F0B6625DB3DAE4EC9C.roa (raw, json) Hash identifier: gzKwOZ98jgnieBv/5nWznefopJ4KkE1g7Or0zMyAoZI= Subject key identifier: 6A:44:06:14:E5:23:F2:E4:50:50:1A:00:8E:15:17:9F:46:1F:FB:8F Certificate issuer: /CN=F361B650AF/serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C Certificate serial: 0218 Authority key identifier: D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C Authority info access: rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/CFAE3C72CDCC11F0B6625DB3DAE4EC9C.roa Signing time: Sun 30 Nov 2025 09:13:20 +0000 ROA not before: Sun 30 Nov 2025 09:13:15 +0000 ROA not after: Mon 30 Nov 2026 09:13:15 +0000 asID: 37225 IP address blocks: 41.76.176.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 536 (0x218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F361B650AF, serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C Validity Not Before: Nov 30 09:13:15 2025 GMT Not After : Nov 30 09:13:15 2026 GMT Subject: CN=692c0ab0-e8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:88:3d:ca:00:62:89:74:c0:4a:b8:9e:1c:1f: c7:f1:b4:12:c3:4d:cb:46:d1:71:9d:0e:c1:33:cd: db:28:8e:44:15:e2:38:d3:c7:ed:07:6b:a3:d8:27: 05:45:f9:a6:86:39:59:c1:45:52:7b:6d:6f:9b:32: ca:48:13:cf:07:44:6e:fa:7b:8d:55:1b:af:c5:54: 3b:e5:72:98:0d:0f:44:28:85:61:90:71:e3:ed:4c: 81:1e:6f:32:0b:e9:b2:5a:ea:20:37:65:3d:dd:87: 50:8e:b6:38:8d:e0:5d:37:13:e6:5e:a4:4b:84:f0: fa:ae:5d:2e:4d:79:6c:8f:b1:18:06:59:45:bb:fa: e5:7e:d3:e0:82:9b:22:af:40:37:b2:68:2a:c5:d9: 47:44:7b:b4:0a:20:0e:53:fd:62:7f:3e:f7:0d:b5: 4a:97:11:8c:ad:20:9f:d0:4c:e8:5c:c0:c9:86:21: 9f:0b:9c:8b:8a:74:3f:24:91:b3:1b:f2:0f:0e:6d: 39:1a:17:bc:dc:87:de:2d:67:2d:ac:58:a4:b8:74: 83:bb:de:56:e0:09:2a:6f:51:cd:3e:ef:d5:61:7a: b6:40:e1:ea:74:01:81:ae:10:ff:07:0d:97:54:6e: a3:b7:ca:51:68:e8:01:a8:81:e6:51:7b:e8:5b:f1: 6c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:44:06:14:E5:23:F2:E4:50:50:1A:00:8E:15:17:9F:46:1F:FB:8F X509v3 Authority Key Identifier: keyid:D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/CFAE3C72CDCC11F0B6625DB3DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 41.76.176.0/21 Signature Algorithm: sha256WithRSAEncryption 4a:43:de:d8:eb:eb:f8:e3:fa:a3:75:b2:19:ed:61:0b:4c:1d: fc:ac:14:77:b5:2c:38:dd:6c:74:ed:4c:8d:1e:05:42:49:75: 45:52:ae:74:55:6f:51:2f:a0:2d:51:d1:d5:05:6f:57:c9:30: 8c:cd:05:9a:73:b3:11:e6:6a:14:59:ca:b8:2b:2d:9d:73:0c: 93:52:42:95:0f:5d:b7:5b:8a:b9:b6:a8:92:dd:31:ae:75:8e: 44:d0:75:aa:87:b7:e1:cf:a6:02:bb:b1:20:24:b2:18:ad:0a: 55:85:65:c9:4e:03:eb:ad:bb:64:b0:0d:fa:2a:97:7a:c1:dd: dd:d3:13:db:1c:ec:7e:1d:4d:3f:44:a5:a5:f9:af:95:72:32: 14:06:49:1f:d1:9b:37:23:78:ce:a1:de:bc:58:a0:2f:d8:f0: 36:f0:d9:fc:8e:65:77:7d:01:cc:59:02:23:2a:56:f5:8b:2a: cc:97:d9:43:1a:bd:6f:03:17:21:ab:88:d2:f9:78:c8:d1:40: 49:35:92:7d:0f:b1:c4:ed:50:74:f3:cc:d1:e5:bd:35:d1:20: 30:93:cc:88:a2:a8:f7:99:b1:57:91:1a:ae:07:a0:de:91:7f: 02:84:08:d0:06:22:88:12:c9:3d:4d:97:d3:15:aa:ba:85:a5: b4:8a:ca:8c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MUI2NTBBRjExMC8GA1UEBRMoRDkyRDk3MTM3N0E0M0MyQURDMDAwNTMwQ0RBQjYw QjRCNjc2MEQxQzAeFw0yNTExMzAwOTEzMTVaFw0yNjExMzAwOTEzMTVaMBgxFjAU BgNVBAMTDTY5MmMwYWIwLWU4YWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDBiD3KAGKJdMBKuJ4cH8fxtBLDTctG0XGdDsEzzdsojkQV4jjTx+0Ha6PY JwVF+aaGOVnBRVJ7bW+bMspIE88HRG76e41VG6/FVDvlcpgND0QohWGQcePtTIEe bzIL6bJa6iA3ZT3dh1COtjiN4F03E+ZepEuE8PquXS5NeWyPsRgGWUW7+uV+0+CC myKvQDeyaCrF2UdEe7QKIA5T/WJ/PvcNtUqXEYytIJ/QTOhcwMmGIZ8LnIuKdD8k kbMb8g8ObTkaF7zch94tZy2sWKS4dIO73lbgCSpvUc0+79VherZA4ep0AYGuEP8H DZdUbqO3ylFo6AGogeZRe+hb8WxHAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUakQG FOUj8uRQUBoAjhUXn0Yf+48wHwYDVR0jBBgwFoAU2S2XE3ekPCrcAAUwzatgtLZ2 DRwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjFCNjUwLzY4OTVCMEJFM0RFNjExRUY4MkVEODc5MDc2MkU5NTFBLzJTMlhF M2VrUENyY0FBVXd6YXRndExaMkRSdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzJTMlhFM2VrUENyY0FBVXd6YXRndExaMkRSdy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjFCNjUwLzY4OTVCMEJFM0RFNjExRUY4MkVEODc5MDc2 MkU5NTFBL0NGQUUzQzcyQ0RDQzExRjBCNjYyNURCM0RBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMpTLAwDQYJKoZIhvcNAQEL BQADggEBAEpD3tjr6/jj+qN1shntYQtMHfysFHe1LDjdbHTtTI0eBUJJdUVSrnRV b1EvoC1R0dUFb1fJMIzNBZpzsxHmahRZyrgrLZ1zDJNSQpUPXbdbirm2qJLdMa51 jkTQdaqHt+HPpgK7sSAkshitClWFZclOA+utu2SwDfoql3rB3d3TE9sc7H4dTT9E paX5r5VyMhQGSR/RmzcjeM6h3rxYoC/Y8Dbw2fyOZXd9AcxZAiMqVvWLKsyX2UMa vW8DFyGriNL5eMjRQEk1kn0PscTtUHTzzNHlvTXRIDCTzIiiqPeZsVeRGq4HoN6R fwKECNAGIogSyT1Nl9MVqrqFpbSKyow= -----END CERTIFICATE-----Generated at Mon Dec 8 18:04:43 2025 by rpki-client