This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/34CEF68ECFB511F094C7EE9FDAE4EC9C.roa File: 34CEF68ECFB511F094C7EE9FDAE4EC9C.roa (raw, json) Hash identifier: DOZkdMukh+v2DBjPXn5J+dS+3o+FoDrcyvSwkXpJNvE= Subject key identifier: 33:C6:05:70:1E:4E:A4:C7:F3:E1:21:88:35:71:C2:0F:23:4B:F7:21 Certificate issuer: /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7 Certificate serial: 29 Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/34CEF68ECFB511F094C7EE9FDAE4EC9C.roa Signing time: Tue 02 Dec 2025 19:29:23 +0000 ROA not before: Tue 02 Dec 2025 19:29:18 +0000 ROA not after: Mon 31 Dec 2035 19:29:18 +0000 asID: 24835 IP address blocks: 41.68.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Wed 10 Dec 2025 00:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7 Validity Not Before: Dec 2 19:29:18 2025 GMT Not After : Dec 31 19:29:18 2035 GMT Subject: CN=692f3e13-9e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5d:42:c8:64:15:84:af:60:83:bb:ea:5e:85: a0:a5:50:dc:f4:b9:e3:5b:0e:cf:79:15:cb:2b:8e: 4b:1b:2f:2e:9e:34:59:9a:ea:30:f0:a8:5f:cf:63: f3:d7:6a:b3:26:e8:77:33:0c:e8:45:83:06:dd:7f: ac:6b:24:92:d1:c1:e4:af:4b:9a:43:28:0d:29:75: c8:27:fe:4c:04:c1:7a:4c:b2:a8:7a:73:6e:77:1b: a6:a9:05:ec:8c:f1:6d:99:c1:7e:52:cc:04:35:ff: 1a:1d:e0:97:c7:36:b3:66:6d:6c:b7:5a:e8:20:27: d1:92:24:ed:bf:7f:02:03:d6:4c:81:05:28:68:78: 50:4a:48:73:d9:c4:38:d8:61:a4:a4:1c:a5:a9:ab: cd:3d:15:64:c8:7e:b3:87:87:0a:62:3b:eb:25:c4: b2:38:66:25:26:3d:30:d1:a8:14:14:79:42:85:13: 6a:25:ab:4b:eb:ed:ae:84:f7:4d:35:43:92:89:bc: 52:6e:ba:bd:26:22:fb:7d:39:81:76:00:be:da:f5: e7:8b:80:2e:e0:ba:34:cb:e9:68:1c:74:db:eb:62: 55:60:af:15:81:23:cf:a0:4b:63:fa:9d:72:14:81: 37:24:78:4e:72:98:45:5f:78:73:ea:6e:cd:79:2d: 64:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C6:05:70:1E:4E:A4:C7:F3:E1:21:88:35:71:C2:0F:23:4B:F7:21 X509v3 Authority Key Identifier: keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/34CEF68ECFB511F094C7EE9FDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 41.68.0.0/15 Signature Algorithm: sha256WithRSAEncryption 39:20:da:55:e2:29:00:d9:f5:a0:73:7d:a9:73:ca:af:ea:a3: 84:84:02:67:18:c7:75:c8:de:fb:55:43:c9:3d:71:d8:5d:4f: db:8b:8e:e5:e3:81:2b:04:88:68:4f:0b:bd:a7:39:f2:ce:77: 65:c6:fb:d8:66:4e:bc:8f:44:1f:37:eb:94:90:e3:a8:0a:1b: 2d:ca:28:0c:b1:68:d1:77:1c:d1:86:43:25:f2:f8:4a:3d:38: ce:bf:8c:57:13:e7:73:12:bb:f7:ee:ba:d9:2f:ff:85:b9:4b: a1:78:5e:ea:50:3b:57:c6:e5:5d:91:d5:1b:35:31:b3:44:5f: 00:ac:ab:fd:ea:0c:f7:c0:55:99:d5:db:f7:9a:5d:a1:a5:da: 68:28:46:69:f8:98:53:22:50:17:87:fe:45:f2:5c:ca:e9:f5: 6d:65:38:de:e5:16:5b:09:af:86:16:b5:1b:4b:0a:67:74:f5: b7:35:8e:0d:d1:18:74:53:d5:ed:ba:ae:6b:26:d7:1a:3b:6a: dd:a3:d4:47:0f:b3:16:a2:e0:56:79:3d:9a:2c:0c:6d:64:6a: b0:ed:e8:15:2b:70:90:86:2c:54:ed:90:59:83:af:e3:14:f7: dc:d1:89:d5:48:cc:60:75:32:ff:ef:b7:79:64:f8:60:ca:93: 12:21:7a:e6 -----BEGIN CERTIFICATE----- MIIFgTCCBGmgAwIBAgIBKTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy NUQ3QkFGMTEwLwYDVQQFEyhFMkZFNTZBRkU2NkFCMERGM0UzOTVFRERCNDE4OTNF MDBERjZBRUY3MB4XDTI1MTIwMjE5MjkxOFoXDTM1MTIzMTE5MjkxOFowGDEWMBQG A1UEAxMNNjkyZjNlMTMtOWUwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL9dQshkFYSvYIO76l6FoKVQ3PS541sOz3kVyyuOSxsvLp40WZrqMPCoX89j 89dqsybodzMM6EWDBt1/rGskktHB5K9LmkMoDSl1yCf+TATBekyyqHpzbncbpqkF 7IzxbZnBflLMBDX/Gh3gl8c2s2ZtbLda6CAn0ZIk7b9/AgPWTIEFKGh4UEpIc9nE ONhhpKQcpamrzT0VZMh+s4eHCmI76yXEsjhmJSY9MNGoFBR5QoUTaiWrS+vtroT3 TTVDkom8Um66vSYi+305gXYAvtr154uALuC6NMvpaBx02+tiVWCvFYEjz6BLY/qd chSBNyR4TnKYRV94c+puzXktZMMCAwEAAaOCAqQwggKgMB0GA1UdDgQWBBQzxgVw Hk6kx/PhIYg1ccIPI0v3ITAfBgNVHSMEGDAWgBTi/lav5mqw3z45Xt20GJPgDfau 9zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2MjVEN0IvM0NFODhEMDhCREE5MTFGMDhDQTA4OTdBREFFNEVDOUMvNHY1V3It WnFzTjgtT1Y3ZHRCaVQ0QTMycnZjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu aWMvNHY1V3ItWnFzTjgtT1Y3ZHRCaVQ0QTMycnZjLmNlcjBPBgNVHSABAf8ERTBD MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2MjVEN0IvM0NFODhEMDhCREE5MTFGMDhDQTA4OTdBREFF NEVDOUMvMzRDRUY2OEVDRkI1MTFGMDk0QzdFRTlGREFFNEVDOUMucm9hMDUGCCsG AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht bDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDASlEMA0GCSqGSIb3DQEBCwUA A4IBAQA5INpV4ikA2fWgc32pc8qv6qOEhAJnGMd1yN77VUPJPXHYXU/bi47l44Er BIhoTwu9pznyzndlxvvYZk68j0QfN+uUkOOoChstyigMsWjRdxzRhkMl8vhKPTjO v4xXE+dzErv37rrZL/+FuUuheF7qUDtXxuVdkdUbNTGzRF8ArKv96gz3wFWZ1dv3 ml2hpdpoKEZp+JhTIlAXh/5F8lzK6fVtZTje5RZbCa+GFrUbSwpndPW3NY4N0Rh0 U9Xtuq5rJtcaO2rdo9RHD7MWouBWeT2aLAxtZGqw7egVK3CQhixU7ZBZg6/jFPfc 0YnVSMxgdTL/77d5ZPhgypMSIXrm -----END CERTIFICATE-----Generated at Mon Dec 8 18:04:48 2025 by rpki-client