This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/3C958764E73111F09C666E9EDAE4EC9C.roa
File: 3C958764E73111F09C666E9EDAE4EC9C.roa (raw, json)
Hash identifier: fVdYrlrooDNQRHbalW2EII4S7EJlQJMERwsN9flm4IM=
Subject key identifier: 59:D0:4D:90:A7:63:84:CC:32:C8:49:BF:E7:E7:9C:75:CA:43:36:53
Certificate issuer: /CN=F36BF59BAF/serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Certificate serial: 02ED
Authority key identifier: E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/3C958764E73111F09C666E9EDAE4EC9C.roa
Signing time: Thu 01 Jan 2026 16:45:11 +0000
ROA not before: Thu 01 Jan 2026 16:45:06 +0000
ROA not after: Sat 02 Jan 2027 16:45:06 +0000
asID: 329249
IP address blocks: 102.209.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft
rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 749 (0x2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36BF59BAF, serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Validity
Not Before: Jan 1 16:45:06 2026 GMT
Not After : Jan 2 16:45:06 2027 GMT
Subject: CN=6956a497-976a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:04:be:1e:b7:f7:0b:b2:cf:fe:72:a6:01:
df:a7:cc:ff:ba:07:39:97:d6:c4:31:83:88:7a:36:
b9:57:cf:64:ce:85:f5:a7:ed:a7:0f:db:ed:a3:11:
d4:04:7b:a4:38:42:f8:3d:0f:6a:27:b4:62:39:24:
56:54:bd:0a:5a:5d:ab:3e:d6:4e:95:d4:95:e8:1d:
3e:ed:78:09:58:c2:4c:fc:60:c6:64:7c:ae:73:bf:
95:09:64:53:55:e6:aa:9c:58:1e:62:e5:27:9b:3d:
95:04:0f:7b:eb:c2:62:ec:ec:f6:1b:67:9e:2a:6a:
ff:82:95:f3:26:38:d7:0c:aa:4f:bb:07:77:66:05:
1e:9b:d8:90:0f:48:03:0a:b0:ac:57:f8:73:44:2f:
a3:39:57:1a:b7:4e:6f:6e:8c:63:5a:d3:f6:3a:1f:
7e:05:8f:30:84:94:ca:40:f0:b4:07:15:7e:e3:d6:
e8:9e:a5:1e:fc:ca:c2:48:d4:1a:9e:c5:0f:bc:64:
45:7b:48:a6:56:df:a7:77:28:d7:b4:48:f3:4b:f4:
a1:3a:fe:77:71:f8:fb:ee:77:0d:68:d6:70:33:8d:
4b:06:3d:c6:9a:7d:e3:90:24:02:62:f0:e7:03:f2:
a9:31:96:16:ca:9e:9d:c2:22:d7:d2:51:85:7a:f8:
26:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D0:4D:90:A7:63:84:CC:32:C8:49:BF:E7:E7:9C:75:CA:43:36:53
X509v3 Authority Key Identifier:
keyid:E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/3C958764E73111F09C666E9EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.209.243.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:68:42:6d:a5:fa:ad:ea:29:f2:d0:c9:85:91:dc:34:29:78:
40:1a:f1:76:eb:f1:6c:5f:02:f4:ff:6f:09:7d:ff:05:93:90:
ad:ae:e5:22:0b:b2:0b:c3:aa:dd:a7:5c:33:b7:bf:93:e4:e2:
a0:fe:fa:ab:8a:68:3a:4d:08:d6:5f:49:3f:ea:bb:09:10:29:
08:7b:94:32:02:d2:1f:22:f0:c8:d2:e8:70:2a:80:12:43:e0:
1e:3e:7b:3c:53:34:a5:13:5f:25:18:93:07:c1:db:fd:d5:4a:
6a:3f:57:31:68:30:dc:fe:81:c9:32:50:0e:33:06:8c:31:7b:
26:49:1e:9e:ed:fa:4f:29:20:4d:3e:b2:e0:76:ed:a8:c5:c0:
57:d7:06:e4:d0:28:43:38:af:60:a5:be:dd:11:3b:1d:51:2f:
91:a7:9d:7c:76:9f:36:8f:5c:51:fb:01:32:1b:b1:68:f6:b5:
a0:cb:4d:2a:6e:71:c5:43:29:ed:42:68:de:21:c3:0e:b8:3a:
3e:12:cb:98:3b:2f:97:25:84:a7:6a:b0:9f:16:2d:b6:32:e3:
c2:8c:7d:cc:04:36:8e:6c:36:8e:01:e5:cc:ed:8c:76:2c:f0:
de:d4:1f:0f:18:f3:01:b3:cd:8e:3d:1f:9c:d6:09:4d:1a:b7:
56:e7:ee:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:25 2026 by rpki-client