This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/40F7518CF7B911F0A2EAB0A6DAE4EC9C.roa
File: 40F7518CF7B911F0A2EAB0A6DAE4EC9C.roa (raw, json)
Hash identifier: tFc77WdhIIRlE4uKB0sKEuV6jT/dhoYmgbo569TiCUw=
Subject key identifier: 40:3B:F3:57:AF:38:E8:DB:C8:5C:40:8E:48:56:D4:22:D7:32:69:B1
Certificate issuer: /CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
Certificate serial: 02EE
Authority key identifier: FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/40F7518CF7B911F0A2EAB0A6DAE4EC9C.roa
Signing time: Thu 22 Jan 2026 17:39:08 +0000
ROA not before: Thu 22 Jan 2026 17:39:02 +0000
ROA not after: Fri 22 Jan 2027 17:39:02 +0000
asID: 329391
IP address blocks: 102.210.8.0/22 maxlen: 24
2c0f:2b40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl
rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 750 (0x2ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3636ECFAF, serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
Validity
Not Before: Jan 22 17:39:02 2026 GMT
Not After : Jan 22 17:39:02 2027 GMT
Subject: CN=697260bc-558b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:5d:0b:8c:35:76:99:1e:89:6f:a9:95:26:
61:99:e2:da:0b:24:a9:ae:9e:e3:ab:a2:24:04:b0:
7a:ef:bb:a6:75:b1:f1:1a:97:c5:e0:30:f4:ae:9d:
36:c4:b1:b0:29:92:45:5b:f8:30:4c:39:d4:9c:39:
15:62:32:d4:bc:f9:b6:69:b8:9c:b0:29:b1:b9:60:
b6:4d:7b:24:a7:a8:ba:73:af:59:fb:26:29:5c:8e:
e9:48:cc:68:74:90:fc:d4:9e:70:48:c4:bd:45:0b:
86:c1:c3:95:24:71:76:63:94:ea:73:d9:60:b1:23:
16:34:2f:ba:3f:cf:c7:7a:e8:66:c3:97:4c:61:c6:
54:d8:e8:78:37:77:28:66:14:0a:15:09:02:de:d4:
2d:0a:2b:ec:27:b0:41:f9:06:83:d6:3b:16:db:c2:
9a:95:e4:d1:a9:48:cf:b3:d6:db:3c:0b:28:c1:ef:
64:2c:74:3d:60:00:11:66:26:e6:d4:e9:21:e8:dd:
fb:69:3a:0a:5a:5e:d1:9f:d2:63:34:d1:9c:6a:bf:
b7:28:5a:8e:25:63:4b:ff:5d:93:ff:a5:f5:3d:af:
13:83:0c:e8:5c:8d:4e:71:a1:ef:3d:79:9c:cb:73:
1b:c4:20:94:ec:78:65:d9:6a:e8:15:59:8c:54:60:
23:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3B:F3:57:AF:38:E8:DB:C8:5C:40:8E:48:56:D4:22:D7:32:69:B1
X509v3 Authority Key Identifier:
keyid:FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/40F7518CF7B911F0A2EAB0A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.210.8.0/22
IPv6:
2c0f:2b40::/32
Signature Algorithm: sha256WithRSAEncryption
2b:8a:e3:52:f0:68:bb:40:10:5a:05:8e:a4:ff:26:0e:12:15:
9e:f9:8b:09:dc:8a:cf:82:ea:26:a6:80:73:4c:e5:99:f3:44:
b1:c9:de:ef:a8:ce:86:10:7b:5d:aa:b3:49:50:b7:2e:95:9b:
24:64:7e:14:25:65:d8:7b:54:96:71:63:30:71:2a:36:f3:a5:
59:96:c2:fc:86:6e:57:b3:cc:59:ca:98:b4:cb:ec:94:ee:38:
86:dd:6c:8b:f1:92:9c:5f:cf:b3:c3:13:ca:7b:d4:d2:df:52:
df:80:80:9d:49:ce:d8:02:05:c1:f2:c7:58:74:da:d8:0e:81:
60:f0:11:af:df:c7:e2:74:ac:da:36:f6:38:33:ac:e5:de:50:
ba:f1:6c:17:46:f5:6a:fe:72:e7:ea:cb:24:b4:0e:f1:94:62:
47:b5:f5:61:85:11:8d:65:26:b9:ea:85:5d:4e:a9:7d:1a:80:
bc:78:b1:de:38:71:f9:c3:2d:75:dd:cc:f8:71:f4:04:87:b9:
8a:59:d9:98:9d:11:bf:a5:b2:a9:31:3f:32:f9:42:1e:ff:e0:
9b:d7:12:fc:68:7b:93:74:9a:8e:c2:8a:8e:66:5d:35:27:f6:
f2:e4:c6:6e:9b:62:21:af:c2:8f:cf:1a:c7:bf:05:07:34:72:
97:c4:d9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:59:38 2026 by rpki-client