This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/0836D574EFA911F0AD3786BEDAE4EC9C.roa File: 0836D574EFA911F0AD3786BEDAE4EC9C.roa (raw, json) Hash identifier: s34q98p+j1656mmnmZ5OjzaYIjMbFPtO6WF3YwxXSiA= Subject key identifier: 5C:45:7B:85:FF:7E:C4:BF:8D:58:04:3B:E0:8F:38:CF:A1:56:3C:28 Certificate issuer: /CN=F36E1A95AF/serialNumber=CE07D524219A29BF4D0DAC7DB62A883B75AC4940 Certificate serial: 02 Authority key identifier: CE:07:D5:24:21:9A:29:BF:4D:0D:AC:7D:B6:2A:88:3B:75:AC:49:40 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/0836D574EFA911F0AD3786BEDAE4EC9C.roa Signing time: Mon 12 Jan 2026 11:22:52 +0000 ROA not before: Mon 12 Jan 2026 11:22:47 +0000 ROA not after: Wed 12 Jan 2028 11:22:47 +0000 asID: 329632 IP address blocks: 102.204.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.crl rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Tue 27 Jan 2026 00:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36E1A95AF, serialNumber=CE07D524219A29BF4D0DAC7DB62A883B75AC4940 Validity Not Before: Jan 12 11:22:47 2026 GMT Not After : Jan 12 11:22:47 2028 GMT Subject: CN=6964d98c-1584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3c:f9:26:36:18:13:f4:91:09:0e:18:cd:63: 8d:70:db:91:c1:b5:d2:ca:2d:dd:d8:a6:21:10:d0: 14:3e:24:b8:6c:26:9d:54:e8:51:83:a6:5c:30:b2: fa:75:1c:e1:4d:5a:4e:8a:0d:c2:1e:a0:26:4e:db: 71:47:5b:cb:2a:a3:c9:f2:45:55:f3:9e:eb:8a:74: 9f:e0:8c:a0:05:5d:1b:f5:d6:65:df:09:52:81:77: de:85:d9:25:1e:f1:b1:75:b5:fa:c4:08:cf:07:04: 1e:38:cc:67:71:42:02:c4:6a:72:ba:02:74:99:7e: 76:76:47:13:8d:8c:9d:94:52:ba:5a:82:12:92:3f: 68:0c:2e:1b:62:25:f1:15:c9:09:06:99:18:86:7a: 65:b6:43:31:1b:f8:03:56:a3:8a:49:7e:15:40:57: 83:3b:36:24:00:91:78:88:57:2e:34:9c:78:c9:e0: f1:84:df:69:4f:80:dc:1a:53:e6:87:7c:79:41:5e: 54:ee:7a:2a:81:b8:96:1c:7f:3b:f3:d0:62:9c:0b: 63:84:11:17:a2:8a:76:3c:33:c9:59:34:39:83:5c: cd:dd:14:04:34:af:65:a6:9e:cf:7d:23:01:77:4e: e5:c9:4a:01:84:a3:fe:dc:20:1e:31:ae:8c:f5:de: d4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:45:7B:85:FF:7E:C4:BF:8D:58:04:3B:E0:8F:38:CF:A1:56:3C:28 X509v3 Authority Key Identifier: keyid:CE:07:D5:24:21:9A:29:BF:4D:0D:AC:7D:B6:2A:88:3B:75:AC:49:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/0836D574EFA911F0AD3786BEDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 102.204.124.0/24 Signature Algorithm: sha256WithRSAEncryption 91:d6:82:dd:b2:8b:65:c3:4b:c0:12:66:77:9e:f1:6b:ea:a9: 2e:b4:64:7f:55:c7:37:bd:0a:a5:39:c8:5d:ee:ef:49:f7:57: 35:26:a6:ff:b7:d6:53:5b:32:95:8c:77:24:24:d2:96:e6:87: d2:07:d7:12:50:37:88:d5:57:c1:8e:d9:00:cc:fa:ea:06:03: d4:d7:ae:b0:d1:b0:be:e9:d9:0f:e6:3c:99:ea:8c:3f:50:36: b4:1a:e4:81:82:5e:68:f9:7e:63:18:1a:cc:40:5a:18:9d:d4: c1:75:2a:08:10:92:75:4d:1e:ea:b2:50:af:69:37:8e:1e:14: da:f1:fa:a9:47:55:41:c7:c7:ba:bc:c9:79:c7:ff:17:cb:e1: 08:59:2a:24:ad:d4:2f:10:07:f3:ee:b3:b0:6e:ad:45:2c:40: f1:ae:3d:ee:f3:92:35:41:60:86:18:50:7b:e0:28:12:0d:ce: 32:06:79:b1:d2:89:76:04:e0:62:bc:10:b9:2d:88:e7:f5:d6: 2d:e6:9e:f5:2c:01:7c:ab:4f:f3:40:f6:6e:58:0e:5c:6c:5f: da:21:38:28:6f:8d:b9:17:27:bb:ab:e2:d5:31:50:90:29:0b: b4:54:e5:fa:88:9f:da:6b:ec:af:3d:59:7c:e7:aa:ee:bf:95: fe:2c:48:7e -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZF MUE5NUFGMTEwLwYDVQQFEyhDRTA3RDUyNDIxOUEyOUJGNEQwREFDN0RCNjJBODgz Qjc1QUM0OTQwMB4XDTI2MDExMjExMjI0N1oXDTI4MDExMjExMjI0N1owGDEWMBQG A1UEAxMNNjk2NGQ5OGMtMTU4NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANE8+SY2GBP0kQkOGM1jjXDbkcG10sot3dimIRDQFD4kuGwmnVToUYOmXDCy +nUc4U1aTooNwh6gJk7bcUdbyyqjyfJFVfOe64p0n+CMoAVdG/XWZd8JUoF33oXZ JR7xsXW1+sQIzwcEHjjMZ3FCAsRqcroCdJl+dnZHE42MnZRSulqCEpI/aAwuG2Il 8RXJCQaZGIZ6ZbZDMRv4A1ajikl+FUBXgzs2JACReIhXLjSceMng8YTfaU+A3BpT 5od8eUFeVO56KoG4lhx/O/PQYpwLY4QRF6KKdjwzyVk0OYNczd0UBDSvZaaez30j AXdO5clKAYSj/twgHjGujPXe1I8CAwEAAaOCAqUwggKhMB0GA1UdDgQWBBRcRXuF /37Ev41YBDvgjzjPoVY8KDAfBgNVHSMEGDAWgBTOB9UkIZopv00NrH22Kog7daxJ QDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6 Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv RjM2RTFBOTUvMjhBM0JGNThFRkE4MTFGMEE2Qjk5MUI4REFFNEVDOUMvemdmVkpD R2FLYjlORGF4OXRpcUlPM1dzU1VBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu aWMvemdmVkpDR2FLYjlORGF4OXRpcUlPM1dzU1VBLmNlcjBPBgNVHSABAf8ERTBD MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy X3JlcG9zaXRvcnkvRjM2RTFBOTUvMjhBM0JGNThFRkE4MTFGMEE2Qjk5MUI4REFF NEVDOUMvMDgzNkQ1NzRFRkE5MTFGMEFEMzc4NkJFREFFNEVDOUMucm9hMDUGCCsG AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGbMfDANBgkqhkiG9w0BAQsF AAOCAQEAkdaC3bKLZcNLwBJmd57xa+qpLrRkf1XHN70KpTnIXe7vSfdXNSam/7fW U1sylYx3JCTSluaH0gfXElA3iNVXwY7ZAMz66gYD1NeusNGwvunZD+Y8meqMP1A2 tBrkgYJeaPl+YxgazEBaGJ3UwXUqCBCSdU0e6rJQr2k3jh4U2vH6qUdVQcfHurzJ ecf/F8vhCFkqJK3ULxAH8+6zsG6tRSxA8a497vOSNUFghhhQe+AoEg3OMgZ5sdKJ dgTgYrwQuS2I5/XWLeae9SwBfKtP80D2blgOXGxf2iE4KG+NuRcnu6vi1TFQkCkL tFTl+oif2mvsrz1ZfOeq7r+V/ixIfg== -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:02 2026 by rpki-client