This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/65089C20C45B11F0AED8CBD5DAE4EC9C.roa File: 65089C20C45B11F0AED8CBD5DAE4EC9C.roa (raw, json) Hash identifier: 3Fe7kc9SOxNJ9M4sM498Rlt07NmCt/hudWiyOHdD0vc= Subject key identifier: 5B:0B:EA:3A:14:CC:AB:F9:F1:C1:BB:AB:FE:88:4E:C7:B6:A7:89:F6 Certificate issuer: /CN=F3651B12AF/serialNumber=797B59395874D2EE6EC8CBFD076B2ABC613D89B4 Certificate serial: 9D Authority key identifier: 79:7B:59:39:58:74:D2:EE:6E:C8:CB:FD:07:6B:2A:BC:61:3D:89:B4 Authority info access: rsync://rpki.afrinic.net/repository/afrinic/eXtZOVh00u5uyMv9B2sqvGE9ibQ.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/65089C20C45B11F0AED8CBD5DAE4EC9C.roa Signing time: Tue 18 Nov 2025 08:48:47 +0000 ROA not before: Tue 18 Nov 2025 08:48:34 +0000 ROA not after: Mon 18 Nov 2030 08:48:34 +0000 asID: 33779 IP address blocks: 41.221.16.0/20 maxlen: 25 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/eXtZOVh00u5uyMv9B2sqvGE9ibQ.crl rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/eXtZOVh00u5uyMv9B2sqvGE9ibQ.mft rsync://rpki.afrinic.net/repository/afrinic/eXtZOVh00u5uyMv9B2sqvGE9ibQ.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 06 Dec 2025 05:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 157 (0x9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3651B12AF, serialNumber=797B59395874D2EE6EC8CBFD076B2ABC613D89B4 Validity Not Before: Nov 18 08:48:34 2025 GMT Not After : Nov 18 08:48:34 2030 GMT Subject: CN=691c32ef-a3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:4a:b5:a3:a7:f1:c7:1a:23:d5:a9:ef:a1:ee: 49:71:4f:da:76:2a:b5:d3:39:3e:f4:14:25:c5:cd: 66:ea:2b:a4:42:7a:4a:37:b0:b5:7e:0a:2d:9a:84: 18:e3:d9:07:26:05:5a:69:7c:1d:43:7f:65:e5:62: 17:58:5d:c3:a1:c7:94:9b:aa:98:8a:43:3d:53:26: 84:6a:9e:e2:ad:45:ba:96:25:ae:52:2e:36:4a:b1: 65:b8:6a:82:b0:ec:bf:2a:0b:68:f7:21:ec:8a:7d: 14:78:aa:53:6d:d3:81:3a:f1:32:ec:2b:3d:72:ac: 1a:65:13:f2:99:bf:2e:79:e5:0c:77:8b:56:3f:b7: b5:49:42:ef:c0:4e:21:c1:f7:b1:3f:39:b7:8c:d3: 0a:0f:06:5a:e1:47:95:3f:ad:f0:3f:c5:ec:e5:5e: a8:8c:43:78:0e:43:f8:e1:86:e3:b3:76:a9:e9:47: 2d:8e:6b:88:80:91:3c:d6:16:3d:ca:8b:22:fa:3a: fb:df:d0:fa:b2:a2:2b:c8:83:e8:a7:7a:d3:84:4c: 65:4b:5b:7c:06:58:bd:0c:03:e7:62:7b:f1:d1:c5: 6e:8b:33:83:ff:e3:75:08:87:e9:7c:10:df:13:3f: 0b:e7:ec:8e:b9:8d:ce:e4:4b:ef:d3:4c:15:2d:b4: 6f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0B:EA:3A:14:CC:AB:F9:F1:C1:BB:AB:FE:88:4E:C7:B6:A7:89:F6 X509v3 Authority Key Identifier: keyid:79:7B:59:39:58:74:D2:EE:6E:C8:CB:FD:07:6B:2A:BC:61:3D:89:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/eXtZOVh00u5uyMv9B2sqvGE9ibQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eXtZOVh00u5uyMv9B2sqvGE9ibQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651B12/040F5AC25BF011F0ABEB4ED6DAE4EC9C/65089C20C45B11F0AED8CBD5DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 41.221.16.0/20 Signature Algorithm: sha256WithRSAEncryption 1a:c3:73:87:81:dc:b9:93:7a:d6:b2:2e:e9:97:06:f3:77:11: d1:c6:4c:74:c1:3d:b6:86:e4:5b:fc:34:bd:73:ec:f6:bd:f4: af:49:d7:5a:56:7a:da:e0:7a:ea:0c:1e:d5:65:66:2b:dc:9f: 60:66:1f:8b:61:83:cb:7b:18:c5:0a:07:1c:f3:e3:6f:59:c6: 61:83:96:8a:3a:4c:75:e8:a3:99:d4:05:2b:b8:1d:62:39:03: f7:3e:a3:d9:38:a7:87:8b:04:f0:93:83:6b:ed:0e:68:db:18: f7:63:90:be:3e:ae:0f:3f:6d:09:30:fb:6d:ab:ea:92:bc:1b: 6f:df:2d:af:d8:4e:8b:f1:a5:c9:55:c9:18:06:9b:05:df:3d: 57:89:c4:47:1c:5e:69:dc:11:4f:76:e6:e1:c6:6a:d6:64:10: 4c:42:cb:9e:00:37:c6:57:c3:a0:d4:5d:03:b3:df:0b:8a:fb: d2:bb:c3:8e:a9:d3:10:34:a6:37:5b:c4:f6:15:1b:c1:a1:a5: 6a:2e:22:49:8e:c0:b1:57:a0:77:d9:60:f1:11:2e:71:52:63: cf:f6:a4:a5:e7:2a:52:85:14:5d:8f:76:be:14:aa:6a:2d:dd: ce:79:dd:8b:69:45:44:64:a7:60:b2:4d:a1:69:11:5e:a5:56: b9:1d:80:5b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 NTFCMTJBRjExMC8GA1UEBRMoNzk3QjU5Mzk1ODc0RDJFRTZFQzhDQkZEMDc2QjJB QkM2MTNEODlCNDAeFw0yNTExMTgwODQ4MzRaFw0zMDExMTgwODQ4MzRaMBgxFjAU BgNVBAMTDTY5MWMzMmVmLWEzYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDgSrWjp/HHGiPVqe+h7klxT9p2KrXTOT70FCXFzWbqK6RCeko3sLV+Ci2a hBjj2QcmBVppfB1Df2XlYhdYXcOhx5SbqpiKQz1TJoRqnuKtRbqWJa5SLjZKsWW4 aoKw7L8qC2j3IeyKfRR4qlNt04E68TLsKz1yrBplE/KZvy555Qx3i1Y/t7VJQu/A TiHB97E/ObeM0woPBlrhR5U/rfA/xezlXqiMQ3gOQ/jhhuOzdqnpRy2Oa4iAkTzW Fj3KiyL6Ovvf0PqyoivIg+inetOETGVLW3wGWL0MA+die/HRxW6LM4P/43UIh+l8 EN8TPwvn7I65jc7kS+/TTBUttG+3AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUWwvq OhTMq/nxwbur/ohOx7anifYwHwYDVR0jBBgwFoAUeXtZOVh00u5uyMv9B2sqvGE9 ibQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjUxQjEyLzA0MEY1QUMyNUJGMDExRjBBQkVCNEVENkRBRTRFQzlDL2VYdFpP VmgwMHU1dXlNdjlCMnNxdkdFOWliUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL2VYdFpPVmgwMHU1dXlNdjlCMnNxdkdFOWliUS5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjUxQjEyLzA0MEY1QUMyNUJGMDExRjBBQkVCNEVENkRB RTRFQzlDLzY1MDg5QzIwQzQ1QjExRjBBRUQ4Q0JENURBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQp3RAwDQYJKoZIhvcNAQEL BQADggEBABrDc4eB3LmTetayLumXBvN3EdHGTHTBPbaG5Fv8NL1z7Pa99K9J11pW etrgeuoMHtVlZivcn2BmH4thg8t7GMUKBxzz429ZxmGDloo6THXoo5nUBSu4HWI5 A/c+o9k4p4eLBPCTg2vtDmjbGPdjkL4+rg8/bQkw+22r6pK8G2/fLa/YTovxpclV yRgGmwXfPVeJxEccXmncEU925uHGatZkEExCy54AN8ZXw6DUXQOz3wuK+9K7w46p 0xA0pjdbxPYVG8GhpWouIkmOwLFXoHfZYPERLnFSY8/2pKXnKlKFFF2Pdr4Uqmot 3c553YtpRURkp2CyTaFpEV6lVrkdgFs= -----END CERTIFICATE-----Generated at Fri Dec 5 01:44:12 2025 by rpki-client