This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/1295CBCCD9A811F0B3211388DAE4EC9C.roa File: 1295CBCCD9A811F0B3211388DAE4EC9C.roa (raw, json) Hash identifier: DtFf09bSwD3ukrw7d5JjXz1lpk12BRaVOODR5baCUSE= Subject key identifier: A1:9E:39:E7:20:7C:FB:FB:03:A6:6D:EF:EC:99:8F:C4:AD:4C:C9:50 Certificate issuer: /CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F Certificate serial: 0DF2 Authority key identifier: C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F Authority info access: rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/1295CBCCD9A811F0B3211388DAE4EC9C.roa Signing time: Mon 15 Dec 2025 11:20:34 +0000 ROA not before: Mon 15 Dec 2025 11:20:29 +0000 ROA not after: Wed 15 Dec 2049 11:20:29 +0000 asID: 8452 IP address blocks: 156.192.0.0/11 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Mon 22 Dec 2025 00:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3570 (0xdf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36B49FAAR, serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F Validity Not Before: Dec 15 11:20:29 2025 GMT Not After : Dec 15 11:20:29 2049 GMT Subject: CN=693fef02-a491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c4:fb:9f:fd:2f:b5:ec:df:ff:13:fb:59:d7: f0:56:8d:49:bc:20:0b:ed:7e:cf:5b:22:68:54:4b: e0:12:35:c0:fc:d6:ba:de:70:4e:70:ba:12:a7:62: c7:e0:ea:ac:f7:5f:8d:f1:be:bf:56:58:28:6c:3f: 3d:8a:ac:c7:64:b1:d7:14:1f:be:09:29:c1:3c:0a: 4e:51:64:40:12:b0:5d:38:0c:eb:2f:6d:09:4f:f6: cb:b0:04:20:5b:8e:0c:0f:b9:72:a8:53:70:35:4d: a2:21:7d:34:c0:7c:41:8f:88:0e:56:a7:b3:1b:29: 3f:0b:48:a7:3d:68:ef:99:f5:2e:f3:a7:6a:2c:d0: 18:d0:d7:fd:04:8d:e2:f4:69:0d:75:cd:62:5b:88: ea:4e:5e:17:e8:31:85:10:8d:d8:81:42:19:26:c9: dc:01:fd:0d:1c:5a:b4:05:f3:61:91:ff:ce:23:78: c6:a7:8a:45:38:58:67:05:86:d8:36:84:a2:71:94: 6a:70:45:2f:54:75:75:23:fe:6c:63:4f:a7:08:b8: 9c:9e:30:5f:e9:e6:83:2e:65:00:66:79:28:bf:79: 86:6d:52:b8:a7:87:5b:51:b9:19:73:fe:dd:3e:84: b4:fc:f6:f6:1c:07:23:fd:6a:e5:72:9d:1e:2d:64: 25:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9E:39:E7:20:7C:FB:FB:03:A6:6D:EF:EC:99:8F:C4:AD:4C:C9:50 X509v3 Authority Key Identifier: keyid:C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/1295CBCCD9A811F0B3211388DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 156.192.0.0/11 Signature Algorithm: sha256WithRSAEncryption 1f:b4:91:0d:5c:26:7d:86:c6:88:3a:be:62:b6:c4:8e:b4:7a: 06:58:b7:c2:47:8b:a0:0c:93:32:49:91:51:90:9c:fe:70:4d: f1:ee:7e:62:6b:f1:9a:85:60:c0:17:4f:9e:00:c4:7e:76:53: fe:f1:05:95:9c:7e:2f:84:fb:90:8c:c2:14:c2:89:c7:cf:b1: 1d:db:0e:58:39:54:20:b0:6b:62:ba:74:99:b7:e9:1e:42:85: 7c:86:ee:05:83:29:43:ef:0e:54:58:a2:b2:a9:35:5b:6c:11: 90:4d:4a:5d:26:14:a6:30:c9:9e:11:e9:46:aa:b3:23:cb:7b: ae:cf:f7:9f:ff:28:f6:ab:6c:9f:1a:7c:83:e2:12:50:8b:c0: 42:8d:cc:80:be:90:27:e4:09:c8:49:d5:8c:a4:2b:d3:8a:ac: 4d:d5:ae:2c:84:7c:3f:f2:f4:36:0b:2d:ff:38:14:d7:ab:dd: fc:08:51:c9:72:c7:7b:96:b9:c1:d6:b2:bb:aa:4e:7e:01:4f: bd:6e:bc:d2:69:2a:10:b8:59:03:b6:0a:67:49:69:c4:4e:ed: fd:0f:39:a6:30:e0:75:1e:df:dd:88:d8:0c:b8:5e:c9:55:30: bf:23:a4:11:e1:b7:1d:fe:22:b8:10:f2:c6:46:22:52:51:04: 76:dc:b4:ab -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICDfIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QjQ5RkFBUjExMC8GA1UEBRMoQzRGM0UyRUFCREU5RTM5MDFBREJCQzMxQzlGMjUz NUNERTNCMUM2RjAeFw0yNTEyMTUxMTIwMjlaFw00OTEyMTUxMTIwMjlaMBgxFjAU BgNVBAMTDTY5M2ZlZjAyLWE0OTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDJxPuf/S+17N//E/tZ1/BWjUm8IAvtfs9bImhUS+ASNcD81rrecE5wuhKn Ysfg6qz3X43xvr9WWChsPz2KrMdksdcUH74JKcE8Ck5RZEASsF04DOsvbQlP9suw BCBbjgwPuXKoU3A1TaIhfTTAfEGPiA5Wp7MbKT8LSKc9aO+Z9S7zp2os0BjQ1/0E jeL0aQ11zWJbiOpOXhfoMYUQjdiBQhkmydwB/Q0cWrQF82GR/84jeManikU4WGcF htg2hKJxlGpwRS9UdXUj/mxjT6cIuJyeMF/p5oMuZQBmeSi/eYZtUrinh1tRuRlz /t0+hLT89vYcByP9auVynR4tZCUpAgMBAAGjggKhMIICnTAdBgNVHQ4EFgQUoZ45 5yB8+/sDpm3v7JmPxK1MyVAwHwYDVR0jBBgwFoAUxPPi6r3p45Aa27wxyfJTXN47 HG8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkI0OUZBL0I1NDQ4NDUyMUMxQzExRTY5RjdDNzUwQ0Y4QUVBMjI4L3hQUGk2 cjNwNDVBYTI3d3h5ZkpUWE40N0hHOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu L3hQUGk2cjNwNDVBYTI3d3h5ZkpUWE40N0hHOC5jZXIwTwYDVR0gAQH/BEUwQzBB BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y ZXBvc2l0b3J5L0YzNkI0OUZBL0I1NDQ4NDUyMUMxQzExRTY5RjdDNzUwQ0Y4QUVB MjI4LzEyOTVDQkNDRDlBODExRjBCMzIxMTM4OERBRTRFQzlDLnJvYTA1BggrBgEF BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww HgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwWcwDANBgkqhkiG9w0BAQsFAAOC AQEAH7SRDVwmfYbGiDq+YrbEjrR6Bli3wkeLoAyTMkmRUZCc/nBN8e5+YmvxmoVg wBdPngDEfnZT/vEFlZx+L4T7kIzCFMKJx8+xHdsOWDlUILBrYrp0mbfpHkKFfIbu BYMpQ+8OVFiisqk1W2wRkE1KXSYUpjDJnhHpRqqzI8t7rs/3n/8o9qtsnxp8g+IS UIvAQo3MgL6QJ+QJyEnVjKQr04qsTdWuLIR8P/L0Ngst/zgU16vd/AhRyXLHe5a5 wdayu6pOfgFPvW680mkqELhZA7YKZ0lpxE7t/Q85pjDgdR7f3YjYDLheyVUwvyOk EeG3Hf4iuBDyxkYiUlEEdty0qw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:07:48 2025 by rpki-client