This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/0CEAEE0AE64611F0871671F4DAE4EC9C.roa File: 0CEAEE0AE64611F0871671F4DAE4EC9C.roa (raw, json) Hash identifier: 5xW3AY+AI1m98uAIMdUQcGDUJHs1ajRXwY7eRe3tQMw= Subject key identifier: 65:3F:BD:B9:A0:31:10:E3:91:C6:30:44:88:42:81:BA:43:26:55:7E Certificate issuer: /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7 Certificate serial: A1 Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/0CEAEE0AE64611F0871671F4DAE4EC9C.roa Signing time: Wed 31 Dec 2025 12:41:39 +0000 ROA not before: Wed 31 Dec 2025 12:41:33 +0000 ROA not after: Mon 31 Dec 2035 12:41:33 +0000 asID: 36935 IP address blocks: 102.217.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7 Validity Not Before: Dec 31 12:41:33 2025 GMT Not After : Dec 31 12:41:33 2035 GMT Subject: CN=69551a03-48cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:82:f2:51:73:af:03:f3:85:92:ac:d0:06:84: cd:19:44:1e:8e:36:cd:98:bd:67:2f:88:bf:31:cd: d9:8f:02:5c:64:9d:26:48:95:d4:b2:2f:a0:e5:87: f6:0a:51:a8:f7:d3:01:01:10:04:78:06:00:4d:58: e0:03:ab:c6:00:8b:b6:50:ef:c0:7e:62:12:0b:cc: 49:a9:06:9b:3e:f3:60:a6:ec:e5:38:ad:1d:99:d0: 73:6c:e3:38:3f:48:cc:7d:57:32:24:1e:04:98:ed: 25:26:c7:e5:95:00:5a:ae:ae:73:07:db:07:80:45: ae:95:8c:e5:4c:60:d7:56:56:6b:0c:fb:d4:11:fc: 44:04:65:bf:e1:a3:11:ad:97:06:97:2a:54:fa:80: 92:05:23:ab:f2:27:3e:4f:85:48:6c:c8:43:e9:31: 84:75:44:18:24:c8:9f:69:cd:3c:9e:4f:4e:c4:42: 12:7e:7d:af:73:2c:db:d2:ef:42:82:95:8e:85:d9: 50:06:8e:28:d5:e3:da:35:20:80:13:cb:d2:ea:df: 84:03:9d:1c:35:4c:0f:1e:4b:c2:5a:32:7d:41:a1: da:84:83:0b:be:a2:19:2a:6a:3a:99:d9:10:2a:52: 40:52:6e:26:ec:0c:47:8e:31:8c:a1:2b:14:d4:99: 7f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3F:BD:B9:A0:31:10:E3:91:C6:30:44:88:42:81:BA:43:26:55:7E X509v3 Authority Key Identifier: keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/0CEAEE0AE64611F0871671F4DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 102.217.112.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:60:62:f3:52:0b:4a:54:7c:5d:9f:6a:6f:bc:a5:fe:79:b6: a9:9b:fb:c0:a2:61:84:d4:84:5a:13:2f:c0:92:28:54:1a:86: 21:7e:5b:54:c7:c5:b1:b3:60:7e:8e:b5:38:1f:ea:90:46:f5: db:52:a8:62:97:fc:87:6c:a8:21:21:51:2e:6e:46:fb:83:ba: de:55:c2:45:86:59:45:cd:fb:25:ae:3c:72:35:6b:bd:66:06: 11:25:c9:2d:dc:93:4f:13:63:42:75:10:14:f4:47:89:21:c3: 68:d6:b1:f9:0f:f8:f8:bc:46:a4:55:12:49:b5:05:7e:8c:53: 05:ca:c4:a4:2d:62:6a:ad:a2:f1:95:09:56:b6:a6:da:30:56: 53:d3:53:4c:f2:79:9a:14:98:14:ad:23:68:6e:5c:e2:77:d4: c9:c4:6d:dc:30:74:52:f7:24:a8:38:a7:ee:af:d2:f1:0a:f3: 0f:6d:47:04:c7:52:94:5f:78:0f:91:60:af:f3:76:1e:ba:73: 9d:93:be:14:f3:65:c7:46:16:d7:0e:f6:30:0f:c2:2e:af:91: 83:c0:6f:99:68:ee:bc:ab:47:a2:9f:78:63:ee:db:3b:ca:13: 8d:bf:54:0c:a6:ee:6d:2d:5d:bc:b2:a7:dc:bd:db:a5:28:5c: 46:28:99:7f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MjVEN0JBRjExMC8GA1UEBRMoRTJGRTU2QUZFNjZBQjBERjNFMzk1RUREQjQxODkz RTAwREY2QUVGNzAeFw0yNTEyMzExMjQxMzNaFw0zNTEyMzExMjQxMzNaMBgxFjAU BgNVBAMTDTY5NTUxYTAzLTQ4Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDsgvJRc68D84WSrNAGhM0ZRB6ONs2YvWcviL8xzdmPAlxknSZIldSyL6Dl h/YKUaj30wEBEAR4BgBNWOADq8YAi7ZQ78B+YhILzEmpBps+82Cm7OU4rR2Z0HNs 4zg/SMx9VzIkHgSY7SUmx+WVAFqurnMH2weARa6VjOVMYNdWVmsM+9QR/EQEZb/h oxGtlwaXKlT6gJIFI6vyJz5PhUhsyEPpMYR1RBgkyJ9pzTyeT07EQhJ+fa9zLNvS 70KClY6F2VAGjijV49o1IIATy9Lq34QDnRw1TA8eS8JaMn1BodqEgwu+ohkqajqZ 2RAqUkBSbibsDEeOMYyhKxTUmX/lAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUZT+9 uaAxEOORxjBEiEKBukMmVX4wHwYDVR0jBBgwFoAU4v5Wr+ZqsN8+OV7dtBiT4A32 rvcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjI1RDdCLzNDRTg4RDA4QkRBOTExRjA4Q0EwODk3QURBRTRFQzlDLzR2NVdy LVpxc044LU9WN2R0QmlUNEEzMnJ2Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzR2NVdyLVpxc044LU9WN2R0QmlUNEEzMnJ2Yy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjI1RDdCLzNDRTg4RDA4QkRBOTExRjA4Q0EwODk3QURB RTRFQzlDLzBDRUFFRTBBRTY0NjExRjA4NzE2NzFGNERBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJm2XAwDQYJKoZIhvcNAQEL BQADggEBAD5gYvNSC0pUfF2fam+8pf55tqmb+8CiYYTUhFoTL8CSKFQahiF+W1TH xbGzYH6OtTgf6pBG9dtSqGKX/IdsqCEhUS5uRvuDut5VwkWGWUXN+yWuPHI1a71m BhElyS3ck08TY0J1EBT0R4khw2jWsfkP+Pi8RqRVEkm1BX6MUwXKxKQtYmqtovGV CVa2ptowVlPTU0zyeZoUmBStI2huXOJ31MnEbdwwdFL3JKg4p+6v0vEK8w9tRwTH UpRfeA+RYK/zdh66c52TvhTzZcdGFtcO9jAPwi6vkYPAb5lo7ryrR6KfeGPu2zvK E42/VAym7m0tXbyyp9y926UoXEYomX8= -----END CERTIFICATE-----Generated at Sun Jan 25 10:30:58 2026 by rpki-client