This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/4009105CD9A611F09098297CDAE4EC9C.roa File: 4009105CD9A611F09098297CDAE4EC9C.roa (raw, json) Hash identifier: 1FB2u1NkHPd32cvhaDk1Mr5Y9QwYrKrNoGPZPpvM/bI= Subject key identifier: 36:7F:2E:62:02:15:71:80:43:37:F5:21:72:2C:D5:72:EE:D5:EF:17 Certificate issuer: /CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193 Certificate serial: 0DF9 Authority key identifier: FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/4009105CD9A611F09098297CDAE4EC9C.roa Signing time: Mon 15 Dec 2025 11:07:31 +0000 ROA not before: Mon 15 Dec 2025 11:07:27 +0000 ROA not after: Wed 15 Dec 2049 11:07:27 +0000 asID: 8452 IP address blocks: 41.232.0.0/13 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 22 Dec 2025 00:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3577 (0xdf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36B49FAAF, serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193 Validity Not Before: Dec 15 11:07:27 2025 GMT Not After : Dec 15 11:07:27 2049 GMT Subject: CN=693febf3-3db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:94:73:dc:16:45:f3:21:bd:c8:e3:ed:ae:7e: 11:0e:b6:f7:af:90:e7:a3:fc:06:b8:85:3a:80:50: 10:c1:d5:f5:73:f2:02:5f:19:a5:38:80:bf:d7:f7: 0b:d9:04:aa:00:a6:af:5e:0b:17:bc:1e:2b:30:68: c4:96:98:62:fc:20:79:3a:e3:27:d7:56:35:d9:5d: d0:d6:62:38:9f:f2:22:7b:7c:19:8c:b3:9c:4f:a7: 3e:c6:24:02:f4:29:54:d4:07:71:9a:0e:11:33:50: 25:e8:23:ae:6b:4d:df:0c:2d:16:a1:8f:da:eb:b5: 6e:02:ae:26:89:0b:08:81:ab:c1:67:f9:3b:67:f6: 8c:e8:c8:ef:9e:df:78:f8:cd:92:ca:10:2f:da:61: 91:ba:16:e2:c5:d0:63:7d:5a:c7:68:ba:29:7a:cf: 8a:1b:11:bd:84:59:ea:7d:be:fd:c2:97:bb:5a:f5: 75:62:58:48:b7:d6:d5:75:3b:5b:e7:01:31:3c:bf: f1:60:d5:8c:6b:4f:68:68:fa:6e:53:38:48:b6:fa: 1f:13:f1:1e:ce:ab:13:26:96:64:60:e4:92:a8:63: 80:77:6a:4a:96:7a:53:92:19:cc:a0:a9:f3:e2:eb: 38:a9:5f:ed:6c:40:a6:dc:34:c3:5c:e2:56:91:9a: 47:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:7F:2E:62:02:15:71:80:43:37:F5:21:72:2C:D5:72:EE:D5:EF:17 X509v3 Authority Key Identifier: keyid:FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/4009105CD9A611F09098297CDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 41.232.0.0/13 Signature Algorithm: sha256WithRSAEncryption 57:75:d9:7c:c1:f8:e5:4d:09:8e:46:dd:61:11:c0:3f:66:c3: 4a:7d:27:58:ee:dc:3f:b1:d4:47:c9:fc:14:ce:03:23:8a:79: 08:e9:d5:38:ba:db:12:e5:30:54:d7:4d:d6:90:f6:e8:52:32: 1e:7e:01:28:0d:bc:f2:ab:54:0b:19:e6:77:ac:25:1e:9e:42: c0:0d:7d:80:5e:1d:19:04:ad:b4:53:1c:54:54:50:90:82:19: 77:e0:03:ea:b6:92:05:cc:46:c9:b9:14:9a:6e:ca:df:37:13: 7e:c1:c3:55:2e:22:58:83:19:00:60:49:f5:23:be:fc:cf:76: 6a:1a:c5:87:0d:95:72:e7:eb:5d:3b:ce:9e:c6:1f:63:f9:bd: bc:04:d1:63:49:53:54:24:4a:5f:04:53:63:99:43:38:82:44: d3:b9:56:3d:83:17:18:91:8a:f0:6a:b2:5d:ec:02:3e:99:32: 29:22:9d:1c:9c:5e:27:34:a8:4e:97:6a:5a:12:99:91:45:9d: db:ab:1f:1d:b1:c5:e4:8c:ae:3d:6a:24:74:d3:33:46:5a:ed: 5a:98:e7:a8:ce:c6:00:7a:ed:5f:16:38:f7:88:e5:29:1b:87: 92:45:5c:23:2d:9d:57:16:27:5b:eb:ab:29:87:11:e0:ae:30: 68:29:a4:f8 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICDfkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QjQ5RkFBRjExMC8GA1UEBRMoRkQ1OUFDMjA3NzM1OUIwRDcyM0QyMEFBOTk5QThF MTZBODRCNDE5MzAeFw0yNTEyMTUxMTA3MjdaFw00OTEyMTUxMTA3MjdaMBgxFjAU BgNVBAMTDTY5M2ZlYmYzLTNkYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDElHPcFkXzIb3I4+2ufhEOtvevkOej/Aa4hTqAUBDB1fVz8gJfGaU4gL/X 9wvZBKoApq9eCxe8HiswaMSWmGL8IHk64yfXVjXZXdDWYjif8iJ7fBmMs5xPpz7G JAL0KVTUB3GaDhEzUCXoI65rTd8MLRahj9rrtW4CriaJCwiBq8Fn+Ttn9ozoyO+e 33j4zZLKEC/aYZG6FuLF0GN9Wsdouil6z4obEb2EWep9vv3Cl7ta9XViWEi31tV1 O1vnATE8v/Fg1YxrT2ho+m5TOEi2+h8T8R7OqxMmlmRg5JKoY4B3akqWelOSGcyg qfPi6zipX+1sQKbcNMNc4laRmkdLAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQUNn8u YgIVcYBDN/UhcizVcu7V7xcwHwYDVR0jBBgwFoAU/VmsIHc1mw1yPSCqmZqOFqhL QZMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkI0OUZBL0EyNTU5MTlDMUMxQzExRTZCQTFFNUMwQ0Y4QUVBMjI4L19WbXNJ SGMxbXcxeVBTQ3FtWnFPRnFoTFFaTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL19WbXNJSGMxbXcxeVBTQ3FtWnFPRnFoTFFaTS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNkI0OUZBL0EyNTU5MTlDMUMxQzExRTZCQTFFNUMwQ0Y4 QUVBMjI4LzQwMDkxMDVDRDlBNjExRjA5MDk4Mjk3Q0RBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwMp6DANBgkqhkiG9w0BAQsF AAOCAQEAV3XZfMH45U0JjkbdYRHAP2bDSn0nWO7cP7HUR8n8FM4DI4p5COnVOLrb EuUwVNdN1pD26FIyHn4BKA288qtUCxnmd6wlHp5CwA19gF4dGQSttFMcVFRQkIIZ d+AD6raSBcxGybkUmm7K3zcTfsHDVS4iWIMZAGBJ9SO+/M92ahrFhw2VcufrXTvO nsYfY/m9vATRY0lTVCRKXwRTY5lDOIJE07lWPYMXGJGK8GqyXewCPpkyKSKdHJxe JzSoTpdqWhKZkUWd26sfHbHF5IyuPWokdNMzRlrtWpjnqM7GAHrtXxY494jlKRuH kkVcIy2dVxYnW+urKYcR4K4waCmk+A== -----END CERTIFICATE-----Generated at Sat Dec 20 19:07:50 2025 by rpki-client