This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4BADF2A6DCA811F0A60B2AE0DAE4EC9C.roa
File: 4BADF2A6DCA811F0A60B2AE0DAE4EC9C.roa (raw, json)
Hash identifier: t3t/ULtLRNcbsM47r17d7x+jX/SQtkTH2ucz5zxnc2s=
Subject key identifier: 2D:F6:D5:11:0A:1B:D6:EF:F0:FD:54:30:38:6D:38:8B:8A:F7:18:3C
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 16BE
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4BADF2A6DCA811F0A60B2AE0DAE4EC9C.roa
Signing time: Fri 19 Dec 2025 06:59:43 +0000
ROA not before: Fri 19 Dec 2025 06:59:37 +0000
ROA not after: Sun 19 Dec 2027 06:59:37 +0000
asID: 834
IP address blocks: 102.129.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 21 Dec 2025 00:06:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5822 (0x16be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 19 06:59:37 2025 GMT
Not After : Dec 19 06:59:37 2027 GMT
Subject: CN=6944f7df-7aef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:fc:b9:ac:49:67:af:1f:62:16:5f:c0:d4:f7:
3a:e0:79:d8:f9:df:ce:ea:2b:5f:98:6f:11:0f:a4:
5c:be:e0:4c:ff:74:2f:16:25:cd:33:44:c8:6c:be:
48:77:c9:b9:6e:1b:4d:69:b5:78:f1:60:44:5b:53:
ed:4a:1d:68:6b:b1:0c:da:18:ac:a7:b2:d5:79:df:
fa:73:90:3d:a9:da:fb:77:7f:8a:2f:ca:82:8d:fa:
fb:b9:74:39:05:ac:fd:91:c5:49:bb:be:24:cf:96:
80:0b:1e:e6:d1:37:8d:2f:17:5b:6a:7a:86:a4:02:
16:3c:90:89:d1:61:e1:b7:61:39:79:50:52:46:e9:
35:18:12:9c:97:99:bf:62:a3:80:17:26:9f:98:74:
c4:3b:8f:be:9d:f9:17:01:dc:55:e5:49:7c:88:05:
c5:8a:c6:b6:26:5c:40:59:0d:0b:64:08:43:b0:49:
0f:01:57:fc:ae:03:b2:a2:37:d4:bf:ed:12:2b:4e:
99:7b:cd:a8:d0:b9:65:2c:14:b4:f5:ef:4b:c4:c4:
1a:b9:0e:0e:d1:a6:78:aa:c5:25:82:b7:e8:49:ac:
66:d3:20:4a:a1:4b:72:ae:59:d6:36:0d:1a:57:dc:
0f:0e:a1:53:8e:e7:bb:d7:2c:a4:6f:53:ba:50:f3:
71:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F6:D5:11:0A:1B:D6:EF:F0:FD:54:30:38:6D:38:8B:8A:F7:18:3C
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/4BADF2A6DCA811F0A60B2AE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.250.0/24
Signature Algorithm: sha256WithRSAEncryption
83:de:f2:3a:d4:27:b9:a9:ed:32:b8:21:8d:4c:9c:46:db:68:
28:34:af:1c:9b:a2:6c:d0:c9:0d:66:7d:e3:d8:fb:37:5c:54:
df:ba:ea:21:10:09:28:a9:5e:00:6f:62:52:91:15:7c:74:31:
22:96:f1:aa:51:b2:05:a1:47:77:66:e7:15:d2:0a:71:70:a2:
33:05:82:a1:43:26:3b:79:fc:3e:50:f3:6c:27:74:49:16:5e:
10:da:58:f4:0e:c3:45:f4:23:bb:d0:61:5b:0a:72:04:b2:68:
41:3e:f5:2f:88:94:64:ba:27:d0:63:d6:f6:4a:96:e5:9e:05:
45:89:3c:fb:3f:75:6a:96:1e:00:a1:63:eb:12:d4:68:31:ad:
a5:9e:76:66:ed:fe:7f:13:01:81:65:c7:9d:d1:18:e4:83:43:
46:ae:11:ed:d8:9b:9b:2f:af:67:68:44:75:30:d5:20:53:a6:
81:25:b2:08:aa:68:dd:c0:92:9a:84:be:e2:de:9d:ac:12:d3:
43:84:f0:95:5e:d3:95:d3:fd:75:3c:e5:b5:bb:9d:26:2f:90:
75:f3:fe:68:a2:7d:83:57:93:1e:49:a8:61:e6:56:7e:2e:2c:
f2:52:b6:eb:c0:9c:9e:5c:df:dd:86:c6:1c:d6:96:8c:1c:db:
eb:de:91:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 19 23:51:40 2025 by rpki-client