This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/9A04FBE2E64511F09F9A5BF3DAE4EC9C.roa File: 9A04FBE2E64511F09F9A5BF3DAE4EC9C.roa (raw, json) Hash identifier: pXs0IUGkAP6lzSFilYD3ZhWaFNX+8DRTkKn+r7yjKys= Subject key identifier: AE:90:68:11:6A:5B:7D:51:55:DE:54:BE:38:48:B0:3C:F1:F7:FB:81 Certificate issuer: /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7 Certificate serial: 9D Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/9A04FBE2E64511F09F9A5BF3DAE4EC9C.roa Signing time: Wed 31 Dec 2025 12:38:26 +0000 ROA not before: Wed 31 Dec 2025 12:38:21 +0000 ROA not after: Mon 31 Dec 2035 12:38:21 +0000 asID: 36935 IP address blocks: 41.223.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7 Validity Not Before: Dec 31 12:38:21 2025 GMT Not After : Dec 31 12:38:21 2035 GMT Subject: CN=69551942-5b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:1f:d0:5f:db:d5:49:37:92:64:29:5f:b6:fe: a7:bc:36:7c:77:3d:63:8d:bb:bc:d7:6f:73:da:39: ab:07:87:3d:05:e1:2f:e8:13:bd:b9:44:af:95:07: 4e:48:d6:06:7a:f5:91:62:79:ea:72:16:62:9e:6c: 87:1d:10:59:88:3f:f7:ea:4c:1d:6a:80:df:80:45: 66:98:ea:f7:29:11:b3:4f:d7:7d:8b:d5:c5:d2:7e: 84:70:77:b9:b2:55:66:1c:06:88:5c:c5:00:00:3a: 95:3d:a5:fe:78:6c:aa:c4:88:e1:39:21:e5:46:45: 3f:35:9a:a8:3d:36:d3:c8:f0:e4:53:e7:10:55:51: ac:ef:35:a4:00:30:1c:de:ab:fe:26:0a:0b:b3:85: c9:ef:e6:c5:f0:53:7e:48:69:48:e1:46:ac:ec:59: 88:74:24:b4:41:68:7d:3d:fe:d9:4f:8e:3a:0e:5f: 30:c1:72:e8:d3:03:57:56:4b:02:b3:95:c4:a2:32: a9:37:d3:1c:03:1d:5c:c0:8b:6e:6c:bd:d3:51:92: d0:29:e4:52:06:6b:3f:52:e9:76:a4:6c:4e:fc:7b: e2:ca:0c:96:01:ef:80:b5:b4:c3:d8:82:6d:ed:3a: 36:80:83:02:75:65:f9:6e:e6:4f:26:18:9c:41:06: 7a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:90:68:11:6A:5B:7D:51:55:DE:54:BE:38:48:B0:3C:F1:F7:FB:81 X509v3 Authority Key Identifier: keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/9A04FBE2E64511F09F9A5BF3DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 41.223.20.0/22 Signature Algorithm: sha256WithRSAEncryption 06:bc:b0:c4:7d:99:2b:71:62:d5:ea:79:6e:ef:c5:0e:0f:b7: 7b:e3:59:8c:37:e3:11:2e:06:61:6a:8a:26:60:c6:bf:c0:4c: eb:5b:c3:e1:a9:ea:b8:2f:a4:e7:a5:f5:c2:29:6a:9a:61:de: a8:74:18:96:97:b0:2a:5a:70:d1:37:35:b5:fb:7e:f1:9a:24: ef:7b:21:46:da:af:fe:8f:15:21:4d:84:3a:59:6c:8f:51:b0: 79:93:91:e3:8d:7f:79:9d:cf:bd:d7:e3:93:e6:8d:a9:d2:98: 43:af:9a:53:72:f2:ef:65:19:e5:2e:2d:4b:93:a1:c7:8c:c3: 16:37:28:10:97:ee:a5:59:bb:43:2c:54:35:3c:dc:09:1e:9f: b4:9c:08:b8:d5:46:ec:20:c9:36:c5:fc:35:7b:a2:fe:8e:3f: 37:43:d2:aa:46:36:98:d1:69:c3:75:21:fa:4b:68:10:8e:80: c6:cb:45:a6:46:67:d8:57:4e:34:27:96:ef:19:96:51:2e:63: 8e:cc:e0:7e:da:c5:88:ee:a9:2f:f8:0a:4b:12:7c:9a:f3:a6: 5a:1a:b0:06:c6:d5:0f:f6:df:d7:49:a1:70:0f:3b:ed:fc:bc: 1d:43:92:d4:e5:3b:ca:e2:6b:c4:a8:ab:e6:8f:99:e5:94:5e: 39:e4:12:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MjVEN0JBRjExMC8GA1UEBRMoRTJGRTU2QUZFNjZBQjBERjNFMzk1RUREQjQxODkz RTAwREY2QUVGNzAeFw0yNTEyMzExMjM4MjFaFw0zNTEyMzExMjM4MjFaMBgxFjAU BgNVBAMTDTY5NTUxOTQyLTViODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQD4H9Bf29VJN5JkKV+2/qe8Nnx3PWONu7zXb3PaOasHhz0F4S/oE725RK+V B05I1gZ69ZFieepyFmKebIcdEFmIP/fqTB1qgN+ARWaY6vcpEbNP132L1cXSfoRw d7myVWYcBohcxQAAOpU9pf54bKrEiOE5IeVGRT81mqg9NtPI8ORT5xBVUazvNaQA MBzeq/4mCguzhcnv5sXwU35IaUjhRqzsWYh0JLRBaH09/tlPjjoOXzDBcujTA1dW SwKzlcSiMqk30xwDHVzAi25svdNRktAp5FIGaz9S6XakbE78e+LKDJYB74C1tMPY gm3tOjaAgwJ1Zflu5k8mGJxBBnrhAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUrpBo EWpbfVFV3lS+OEiwPPH3+4EwHwYDVR0jBBgwFoAU4v5Wr+ZqsN8+OV7dtBiT4A32 rvcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjI1RDdCLzNDRTg4RDA4QkRBOTExRjA4Q0EwODk3QURBRTRFQzlDLzR2NVdy LVpxc044LU9WN2R0QmlUNEEzMnJ2Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzR2NVdyLVpxc044LU9WN2R0QmlUNEEzMnJ2Yy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjI1RDdCLzNDRTg4RDA4QkRBOTExRjA4Q0EwODk3QURB RTRFQzlDLzlBMDRGQkUyRTY0NTExRjA5RjlBNUJGM0RBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIp3xQwDQYJKoZIhvcNAQEL BQADggEBAAa8sMR9mStxYtXqeW7vxQ4Pt3vjWYw34xEuBmFqiiZgxr/ATOtbw+Gp 6rgvpOel9cIpapph3qh0GJaXsCpacNE3NbX7fvGaJO97IUbar/6PFSFNhDpZbI9R sHmTkeONf3mdz73X45PmjanSmEOvmlNy8u9lGeUuLUuToceMwxY3KBCX7qVZu0Ms VDU83Aken7ScCLjVRuwgyTbF/DV7ov6OPzdD0qpGNpjRacN1IfpLaBCOgMbLRaZG Z9hXTjQnlu8ZllEuY47M4H7axYjuqS/4CksSfJrzploasAbG1Q/239dJoXAPO+38 vB1DktTlO8ria8Soq+aPmeWUXjnkEuQ= -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:01 2026 by rpki-client