This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/BC91A40EE65311F0908ABDCADAE4EC9C.roa File: BC91A40EE65311F0908ABDCADAE4EC9C.roa (raw, json) Hash identifier: VJ4tEGO/lKPbCH4khoVBPlLUyO5FnhtR7hnaBGZuDog= Subject key identifier: 20:FA:E0:9D:39:48:06:CA:94:7F:49:6B:F6:3C:09:F4:35:D3:01:28 Certificate issuer: /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7 Certificate serial: C0 Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/BC91A40EE65311F0908ABDCADAE4EC9C.roa Signing time: Wed 31 Dec 2025 14:19:37 +0000 ROA not before: Wed 31 Dec 2025 14:19:32 +0000 ROA not after: Mon 31 Dec 2035 14:19:32 +0000 asID: 36935 IP address blocks: 2001:4220::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7 Validity Not Before: Dec 31 14:19:32 2025 GMT Not After : Dec 31 14:19:32 2035 GMT Subject: CN=695530f9-0861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:15:2c:b2:eb:8a:3c:3f:a6:79:a5:f8:ce:3e: 20:b4:f4:36:5b:f9:5d:27:c8:c6:9c:6a:f4:ef:3a: 21:13:69:b2:19:e6:1a:22:1c:35:e5:b9:c4:cc:d4: f9:3e:52:8b:56:44:7f:36:22:a2:18:5f:43:84:fa: 88:c5:73:69:a6:0c:5c:6c:53:3f:ce:33:df:01:66: 9b:ad:f6:01:75:97:3e:8a:57:62:43:aa:67:08:14: 59:28:b8:aa:c4:75:59:6f:e8:32:99:ba:7f:86:32: 9c:3e:17:9f:e8:55:fb:b9:73:53:c4:e6:1e:3f:e8: 1a:ec:fb:ea:76:96:36:7e:26:0c:1d:c7:5a:59:4b: 3b:37:ad:04:db:5a:42:78:6b:6c:fc:aa:26:79:61: 40:c4:65:07:87:80:95:f6:b5:d8:ef:8a:f1:dd:ef: de:e4:c5:39:e5:59:63:44:ba:e2:e8:e8:f3:72:e4: f3:e7:3b:57:b9:a5:e8:57:ec:b4:0a:93:75:a1:b6: 94:df:a7:94:2f:69:1f:50:02:29:71:73:b4:84:74: b2:c9:f5:50:0e:12:c1:37:0b:49:45:ca:05:4a:10: 2d:88:57:44:2a:21:ee:72:72:59:b6:34:4f:3a:11: bf:43:27:d8:32:96:bd:2f:9f:59:a0:3f:53:34:fe: d1:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FA:E0:9D:39:48:06:CA:94:7F:49:6B:F6:3C:09:F4:35:D3:01:28 X509v3 Authority Key Identifier: keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/BC91A40EE65311F0908ABDCADAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2001:4220::/32 Signature Algorithm: sha256WithRSAEncryption 8c:1c:7f:8f:a1:5f:d7:f7:7d:84:17:88:7b:2c:9b:f6:8f:4b: 9f:e9:74:5b:7d:1b:ff:3a:61:2b:a7:18:84:39:29:d5:ae:da: 3a:01:f0:09:87:33:2c:78:7e:ed:ff:5a:04:0c:9e:d7:db:56: 9f:67:dd:74:87:79:e7:8d:3c:25:5f:c2:8d:e4:99:ae:60:0f: 69:44:bb:b1:06:68:20:b3:49:a1:0c:7e:cc:9b:0d:28:5a:24: 78:57:c4:6e:d8:49:f8:78:ec:18:3d:a9:e1:e7:08:e4:1b:2c: 33:ec:cf:20:17:ee:ef:68:d1:93:4d:9e:e8:ed:7d:fa:38:06: ff:ee:c2:f5:3d:c2:d0:6d:b0:ec:7b:7f:d0:5a:54:f3:3b:6b: a6:b7:97:8a:96:ae:1e:6f:18:ac:f3:90:69:b9:d3:de:1c:71: ef:3c:f0:f0:35:8d:69:73:d3:ba:d7:cd:8c:5c:00:24:93:f7: ad:de:63:56:d3:c1:3c:f2:56:d7:6d:e3:ab:f1:2b:2a:8d:01: 9b:55:bc:a2:c5:8a:0c:9a:55:9f:a5:9d:8e:75:83:5a:50:a5: f5:f3:6c:2c:36:ab:0c:09:01:f7:9f:52:9e:a7:75:68:f9:8b: 58:dc:e3:42:d5:ce:82:9c:66:3d:a6:53:e0:37:98:17:d4:a5: cc:e3:6b:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 MjVEN0JBRjExMC8GA1UEBRMoRTJGRTU2QUZFNjZBQjBERjNFMzk1RUREQjQxODkz RTAwREY2QUVGNzAeFw0yNTEyMzExNDE5MzJaFw0zNTEyMzExNDE5MzJaMBgxFjAU BgNVBAMTDTY5NTUzMGY5LTA4NjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCtFSyy64o8P6Z5pfjOPiC09DZb+V0nyMacavTvOiETabIZ5hoiHDXlucTM 1Pk+UotWRH82IqIYX0OE+ojFc2mmDFxsUz/OM98BZput9gF1lz6KV2JDqmcIFFko uKrEdVlv6DKZun+GMpw+F5/oVfu5c1PE5h4/6Brs++p2ljZ+Jgwdx1pZSzs3rQTb WkJ4a2z8qiZ5YUDEZQeHgJX2tdjvivHd797kxTnlWWNEuuLo6PNy5PPnO1e5pehX 7LQKk3WhtpTfp5QvaR9QAilxc7SEdLLJ9VAOEsE3C0lFygVKEC2IV0QqIe5yclm2 NE86Eb9DJ9gylr0vn1mgP1M0/tFnAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUIPrg nTlIBsqUf0lr9jwJ9DXTASgwHwYDVR0jBBgwFoAU4v5Wr+ZqsN8+OV7dtBiT4A32 rvcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjI1RDdCLzNDRTg4RDA4QkRBOTExRjA4Q0EwODk3QURBRTRFQzlDLzR2NVdy LVpxc044LU9WN2R0QmlUNEEzMnJ2Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzR2NVdyLVpxc044LU9WN2R0QmlUNEEzMnJ2Yy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjI1RDdCLzNDRTg4RDA4QkRBOTExRjA4Q0EwODk3QURB RTRFQzlDL0JDOTFBNDBFRTY1MzExRjA5MDhBQkRDQURBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAgAUIgMA0GCSqGSIb3DQEB CwUAA4IBAQCMHH+PoV/X932EF4h7LJv2j0uf6XRbfRv/OmErpxiEOSnVrto6AfAJ hzMseH7t/1oEDJ7X21afZ910h3nnjTwlX8KN5JmuYA9pRLuxBmggs0mhDH7Mmw0o WiR4V8Ru2En4eOwYPanh5wjkGywz7M8gF+7vaNGTTZ7o7X36OAb/7sL1PcLQbbDs e3/QWlTzO2umt5eKlq4ebxis85BpudPeHHHvPPDwNY1pc9O6182MXAAkk/et3mNW 08E88lbXbeOr8SsqjQGbVbyixYoMmlWfpZ2OdYNaUKX182wsNqsMCQH3n1Kep3Vo +YtY3ONC1c6CnGY9plPgN5gX1KXM42ul -----END CERTIFICATE-----Generated at Sun Jan 25 14:59:38 2026 by rpki-client