This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/CAFDB41AD1C211F0A9C2D38DDAE4EC9C.roa File: CAFDB41AD1C211F0A9C2D38DDAE4EC9C.roa (raw, json) Hash identifier: otkoUIeVC07ZHogmrq0P3r+9c9Hq45HdG/7TPnP6EBo= Subject key identifier: A5:07:9F:0C:04:7D:88:1B:5E:84:AE:6A:EA:1E:F0:D6:A4:7B:86:87 Certificate issuer: /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669 Certificate serial: 0F06 Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/CAFDB41AD1C211F0A9C2D38DDAE4EC9C.roa Signing time: Fri 05 Dec 2025 10:11:41 +0000 ROA not before: Fri 05 Dec 2025 10:11:36 +0000 ROA not after: Thu 05 Dec 2030 10:11:36 +0000 asID: 37199 IP address blocks: 2c0f:fb18::/32 maxlen: 34 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 09 Dec 2025 00:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3846 (0xf06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F361D299AF, serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669 Validity Not Before: Dec 5 10:11:36 2025 GMT Not After : Dec 5 10:11:36 2030 GMT Subject: CN=6932afdd-166b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:30:f4:f4:4a:63:f5:40:c7:94:93:f5:ed:67: b9:63:b4:64:f6:90:2b:05:a9:f2:29:b5:0f:59:5c: 56:55:3c:3b:a4:89:c1:6f:57:8b:a5:e6:3d:50:10: f6:40:cb:1a:b1:cb:8d:83:5b:ad:31:ba:70:94:a4: ea:fe:37:58:15:8b:c9:ac:d5:73:ba:1d:ab:e8:96: 4b:ef:0d:0b:9f:ce:e0:1b:94:02:99:d0:21:85:3d: d3:01:de:2b:47:89:39:cd:fc:4d:b5:2a:fe:59:7a: 83:b4:2f:e1:db:c9:95:57:a1:95:c2:99:41:37:8a: 0e:11:5a:89:6e:96:cd:d3:79:ec:b3:46:35:f5:c1: cc:2f:73:31:e2:99:4f:4d:95:e8:93:a1:d0:a3:c4: 06:3a:89:76:4a:6e:f1:ed:dc:c9:06:5e:87:6d:35: 2a:d1:57:1a:c3:41:40:91:00:20:68:1f:36:1a:7a: 1c:6a:04:aa:76:aa:39:c5:67:44:49:21:a1:61:b0: 22:cf:dc:0e:ce:8a:11:a9:d0:42:a4:c2:7c:e3:e3: 9a:93:79:a8:97:3b:82:80:64:db:2d:9a:13:23:4b: 97:11:58:8e:33:e7:0c:a2:1d:1d:5a:e5:02:ad:b2: 18:8b:20:33:56:ba:a4:2e:64:eb:d7:d8:ff:91:7e: 63:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:07:9F:0C:04:7D:88:1B:5E:84:AE:6A:EA:1E:F0:D6:A4:7B:86:87 X509v3 Authority Key Identifier: keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/CAFDB41AD1C211F0A9C2D38DDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2c0f:fb18::/32 Signature Algorithm: sha256WithRSAEncryption 57:93:aa:70:76:30:a4:2b:22:55:f9:3b:35:8a:5a:32:74:9a: 12:f8:a0:8f:cd:75:84:d8:00:ea:cb:65:7c:a9:47:90:fa:de: 50:3d:8f:80:a3:7e:0d:17:7d:15:e4:41:7a:09:c2:0b:9d:2a: 93:9d:d4:ef:94:9e:3b:66:6d:30:69:57:31:9e:e5:05:86:66: 3e:4b:64:f8:cd:10:b0:92:ba:a7:78:00:26:78:8b:3a:a6:40: 7c:fe:02:29:8e:2d:00:59:cd:e3:24:72:04:8e:36:db:40:3a: ad:c7:0f:5f:7a:bd:6b:67:fe:f3:67:a6:86:72:c9:23:b6:7e: a5:ba:b3:5f:be:0e:f7:f6:64:6b:11:45:08:72:a5:1f:c9:ac: 33:0f:49:f1:6c:ea:b0:56:2e:39:fb:64:cf:f6:92:a4:11:ae: c7:57:78:61:8e:4b:04:de:67:88:23:62:a0:d9:22:4e:91:f6: 05:d9:93:6e:52:27:c0:03:09:b8:a0:e2:23:9d:f5:65:84:d7: fe:c5:13:3b:3f:66:b2:d9:b2:4d:e6:17:7a:eb:c8:59:8f:e7: e4:6b:d0:ab:42:ab:3f:f9:07:16:59:d4:01:1b:d1:07:e1:c8: 72:09:c9:b1:bf:16:71:16:97:35:f3:ae:d4:36:c6:77:6d:71: 78:86:e5:67 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDwYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MUQyOTlBRjExMC8GA1UEBRMoMkIyNDQyODQ4MTc0QUE4ODk0NDY5QTc3OUI5RkQ3 REE0OTU4QzY2OTAeFw0yNTEyMDUxMDExMzZaFw0zMDEyMDUxMDExMzZaMBgxFjAU BgNVBAMTDTY5MzJhZmRkLTE2NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDDMPT0SmP1QMeUk/XtZ7ljtGT2kCsFqfIptQ9ZXFZVPDukicFvV4ul5j1Q EPZAyxqxy42DW60xunCUpOr+N1gVi8ms1XO6HavolkvvDQufzuAblAKZ0CGFPdMB 3itHiTnN/E21Kv5ZeoO0L+HbyZVXoZXCmUE3ig4RWoluls3TeeyzRjX1wcwvczHi mU9NleiTodCjxAY6iXZKbvHt3MkGXodtNSrRVxrDQUCRACBoHzYaehxqBKp2qjnF Z0RJIaFhsCLP3A7OihGp0EKkwnzj45qTeaiXO4KAZNstmhMjS5cRWI4z5wyiHR1a 5QKtshiLIDNWuqQuZOvX2P+RfmNrAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUpQef DAR9iBtehK5q6h7w1qR7hocwHwYDVR0jBBgwFoAUKyRChIF0qoiURpp3m5/X2klY xmkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjFEMjk5LzQ4RjAwOEQ4NTZENTExRTU4NDVFRjg1Q0Y4QUVBMjI4L0t5UkNo SUYwcW9pVVJwcDNtNV9YMmtsWXhtay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL0t5UkNoSUYwcW9pVVJwcDNtNV9YMmtsWXhtay5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjFEMjk5LzQ4RjAwOEQ4NTZENTExRTU4NDVFRjg1Q0Y4 QUVBMjI4L0NBRkRCNDFBRDFDMjExRjBBOUMyRDM4RERBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD/sYMA0GCSqGSIb3DQEB CwUAA4IBAQBXk6pwdjCkKyJV+Ts1iloydJoS+KCPzXWE2ADqy2V8qUeQ+t5QPY+A o34NF30V5EF6CcILnSqTndTvlJ47Zm0waVcxnuUFhmY+S2T4zRCwkrqneAAmeIs6 pkB8/gIpji0AWc3jJHIEjjbbQDqtxw9fer1rZ/7zZ6aGcskjtn6lurNfvg739mRr EUUIcqUfyawzD0nxbOqwVi45+2TP9pKkEa7HV3hhjksE3meII2Kg2SJOkfYF2ZNu UifAAwm4oOIjnfVlhNf+xRM7P2ay2bJN5hd668hZj+fka9CrQqs/+QcWWdQBG9EH 4chyCcmxvxZxFpc1867UNsZ3bXF4huVn -----END CERTIFICATE-----Generated at Sun Dec 7 07:41:43 2025 by rpki-client