This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/705538E8F23411F0ABE2AFDCDAE4EC9C.roa
File: 705538E8F23411F0ABE2AFDCDAE4EC9C.roa (raw, json)
Hash identifier: +jhpv0hpOYh5YDao9lohBm7A/3HpwqG1brbR9Ufglgk=
Subject key identifier: 21:E8:39:28:76:79:8C:99:90:59:4F:B6:A6:E0:09:1C:CF:72:B8:99
Certificate issuer: /CN=F367B8D1RI/serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
Certificate serial: 03B4
Authority key identifier: 65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7
Authority info access: rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/705538E8F23411F0ABE2AFDCDAE4EC9C.roa
Signing time: Thu 15 Jan 2026 17:05:49 +0000
ROA not before: Thu 15 Jan 2026 17:05:43 +0000
ROA not after: Thu 30 Dec 2049 17:05:43 +0000
asID: 328228
IP address blocks: 81.91.224.0/20 maxlen: 20
81.91.224.0/20 maxlen: 24
81.91.224.0/24 maxlen: 24
81.91.225.0/24 maxlen: 24
81.91.226.0/24 maxlen: 24
81.91.227.0/24 maxlen: 24
81.91.228.0/22 maxlen: 22
81.91.228.0/24 maxlen: 24
81.91.229.0/24 maxlen: 24
81.91.230.0/23 maxlen: 23
81.91.230.0/24 maxlen: 24
81.91.231.0/24 maxlen: 24
81.91.232.0/23 maxlen: 23
81.91.232.0/24 maxlen: 24
81.91.234.0/24 maxlen: 24
81.91.235.0/24 maxlen: 24
81.91.236.0/24 maxlen: 24
81.91.237.0/24 maxlen: 24
81.91.238.0/24 maxlen: 24
81.91.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl
rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 28 Jan 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948 (0x3b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367B8D1RI, serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
Validity
Not Before: Jan 15 17:05:43 2026 GMT
Not After : Dec 30 17:05:43 2049 GMT
Subject: CN=69691e6d-c3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:9f:f2:96:64:ab:5b:47:60:46:ad:1f:35:
df:54:70:22:38:ce:e4:5a:77:94:6f:42:9a:26:b4:
e8:f3:a3:a1:25:e5:29:8a:5c:47:9a:8f:7a:94:70:
e3:da:7e:0d:02:85:55:8d:26:66:73:f2:e5:0a:ca:
cf:e9:ad:a4:c9:0c:43:c3:1f:a3:f0:4b:0b:9b:c6:
03:9d:63:9e:6a:49:84:cd:fa:0a:67:82:d9:aa:83:
24:d9:e5:79:ee:fa:07:2f:1f:c3:85:7c:03:98:da:
62:ca:4b:d9:9b:f9:88:f7:fa:78:ae:2b:a0:97:ee:
37:fa:a1:db:ce:03:89:ea:41:61:a9:f7:f5:88:34:
b6:23:94:68:39:4f:c0:57:bf:f9:54:41:31:4c:a8:
2d:b0:f0:44:b3:db:63:9b:6f:4a:2c:26:f3:69:b3:
ae:d2:52:75:d4:96:f7:f7:43:ce:4e:1e:19:b2:5a:
38:6b:2a:e7:62:7f:96:93:9b:df:98:0e:ba:14:3d:
42:bb:24:00:af:0c:f2:d8:b2:23:6f:89:aa:40:ae:
66:31:b2:24:31:92:0f:8b:33:4d:c7:ec:36:13:de:
11:6b:9d:c9:4e:6f:61:61:1a:d0:2a:ba:7e:6b:8e:
61:b7:ae:30:b0:36:a2:5f:9a:7d:a6:f2:2e:8f:a5:
21:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E8:39:28:76:79:8C:99:90:59:4F:B6:A6:E0:09:1C:CF:72:B8:99
X509v3 Authority Key Identifier:
keyid:65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/705538E8F23411F0ABE2AFDCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
81.91.224.0/20
Signature Algorithm: sha256WithRSAEncryption
65:48:49:05:9f:6e:20:6f:4b:48:0f:8e:a3:61:6f:73:15:22:
d3:06:90:ae:bc:fc:ce:20:b2:84:e6:ff:bb:09:5a:21:4b:1a:
4c:40:46:cd:df:90:d0:74:27:c5:0c:5c:d7:ef:03:a7:0b:1e:
e4:eb:a3:3b:16:cf:08:e0:33:9a:c8:96:97:d5:9c:a5:7f:e4:
ee:67:6d:2e:99:d8:9f:06:4d:f3:8f:f3:48:1f:65:8a:fd:26:
d3:32:b5:b0:69:0e:6b:41:3f:04:3a:0e:50:a4:4a:c5:59:da:
bc:25:45:2f:ac:32:09:08:56:75:9b:97:41:e9:9b:10:4c:3b:
59:e5:89:f2:05:07:e8:db:fe:0e:bd:6f:7e:e7:bf:15:7f:0b:
88:46:5a:9e:3e:d6:8c:6c:f9:23:70:40:c8:58:9b:60:3c:a1:
c4:c7:c5:27:da:31:d7:01:eb:db:ae:2b:0e:19:9e:85:5f:64:
0e:84:9a:25:4d:4a:ab:04:7d:3d:49:10:38:ab:9f:b0:d5:30:
41:0e:29:d5:43:3d:33:8d:e1:54:4b:ce:42:3f:8a:28:e6:21:
03:02:01:07:e3:6c:95:5a:5a:36:1f:6c:6e:49:cf:ba:69:54:
92:2a:c4:c3:73:02:4f:9c:ed:7d:cd:1a:bc:0b:30:65:be:70:
ca:01:f5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:04:45 2026 by rpki-client