This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/2B3E0AF8C61211F09859F792DAE4EC9C.roa File: 2B3E0AF8C61211F09859F792DAE4EC9C.roa (raw, json) Hash identifier: ItJz50mFSsI63au50L/pGX2otMpXZBP3EvtpW8W/vGg= Subject key identifier: 96:FB:27:E5:18:66:F7:FE:B8:B3:2F:60:62:9B:B1:03:89:7E:D4:BD Certificate issuer: /CN=F3695C0AAF/serialNumber=E4817CF6E3DA05025019FFD5AABBB7838475F29B Certificate serial: 0416 Authority key identifier: E4:81:7C:F6:E3:DA:05:02:50:19:FF:D5:AA:BB:B7:83:84:75:F2:9B Authority info access: rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/2B3E0AF8C61211F09859F792DAE4EC9C.roa Signing time: Thu 20 Nov 2025 13:09:39 +0000 ROA not before: Thu 20 Nov 2025 13:09:34 +0000 ROA not after: Tue 20 Nov 2035 13:09:34 +0000 asID: 328631 IP address blocks: 102.219.20.0/24 maxlen: 24 2c0f:5880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.crl rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.mft rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 06 Dec 2025 03:17:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1046 (0x416) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F3695C0AAF, serialNumber=E4817CF6E3DA05025019FFD5AABBB7838475F29B Validity Not Before: Nov 20 13:09:34 2025 GMT Not After : Nov 20 13:09:34 2035 GMT Subject: CN=691f1313-79e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c8:05:28:77:90:d6:1d:d6:34:1c:94:64:bc: a3:ce:05:48:c7:f7:64:b0:3f:e8:17:7f:2a:7c:97: 31:1b:44:9f:9f:fa:6e:94:2f:a1:f5:78:aa:7c:6b: 67:a6:01:cd:c0:86:d6:7e:1f:71:21:1b:76:d8:25: cd:fc:a6:3e:a7:60:c8:c2:b8:da:6b:e4:db:16:c1: 31:fa:49:12:96:9b:62:00:74:58:0c:92:2d:ae:4d: 23:e3:c0:02:97:f5:14:d6:7a:6d:6d:84:c4:90:80: fa:24:be:b4:1c:87:a9:4f:9e:39:81:58:84:22:48: 53:55:0e:e5:3b:32:bf:ad:7d:ec:fd:f6:37:be:5f: 30:4e:2e:d5:62:a6:4e:8d:77:b0:85:f4:a7:e8:33: 01:9d:81:f8:c3:c5:b9:60:22:c8:80:72:6c:81:93: 8c:a8:81:1c:e4:2a:0c:8d:24:70:8e:3a:09:bc:48: ff:41:c0:b7:c8:a4:c2:fc:5c:08:fb:6c:bb:82:9b: 5e:1f:f0:35:5d:6d:41:e1:52:71:7d:d8:d1:62:ec: 0d:36:d1:84:a1:83:8e:b6:49:4f:55:4d:60:99:fa: ab:d6:a0:c2:cf:4f:1d:0f:7e:3c:96:23:92:eb:51: 73:74:9d:79:d9:c9:df:9e:c9:cb:b0:32:8b:07:9e: c0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FB:27:E5:18:66:F7:FE:B8:B3:2F:60:62:9B:B1:03:89:7E:D4:BD X509v3 Authority Key Identifier: keyid:E4:81:7C:F6:E3:DA:05:02:50:19:FF:D5:AA:BB:B7:83:84:75:F2:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/5IF89uPaBQJQGf_Vqru3g4R18ps.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5IF89uPaBQJQGf_Vqru3g4R18ps.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695C0A/4F556FEAAB7511ED93E656AFF1222468/2B3E0AF8C61211F09859F792DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 102.219.20.0/24 IPv6: 2c0f:5880::/32 Signature Algorithm: sha256WithRSAEncryption d2:56:26:64:f4:74:4f:b1:cf:5c:04:b3:2a:00:b9:3d:8e:e4: 0f:04:9c:32:cc:b8:7b:a9:5e:ce:ff:5b:7a:0c:46:bb:d5:1a: 30:7c:c0:6c:13:c4:31:33:20:f2:50:ea:ca:3a:bd:01:80:c4: 0e:55:fc:0b:9f:e1:98:e8:f1:29:f8:c7:4e:b0:14:ab:32:54: a3:57:f5:4b:78:ac:3c:fe:89:11:7f:d3:17:f5:c3:c3:cc:2f: 76:04:f9:3a:f7:0b:f4:a4:e3:2e:cc:dc:90:73:35:30:e0:03: 03:6c:1b:a8:1e:79:ff:7b:9f:da:1c:06:df:de:eb:ac:8d:32: 5f:cd:e3:3c:63:8c:d3:c3:df:98:5c:a7:48:67:78:9e:68:da: 85:d8:5d:40:d6:77:4d:33:d3:09:8d:cb:db:ec:2f:4d:66:a1: d6:c3:06:0d:f6:02:34:7b:a2:02:99:a1:4d:7d:74:64:ad:4b: 00:77:22:41:3d:ab:32:16:80:81:c4:1a:a9:39:4b:d9:e8:f8: 7d:85:4b:bd:f7:24:e0:1d:7a:2f:c2:81:eb:75:7c:c8:0a:01: e6:26:86:46:01:ba:8b:0b:42:d0:08:a7:54:46:7d:1a:21:15: 31:6e:62:32:f8:be:df:1e:bd:a9:bc:9b:cc:6e:95:4c:2b:21: 80:a6:56:97 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICBBYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 OTVDMEFBRjExMC8GA1UEBRMoRTQ4MTdDRjZFM0RBMDUwMjUwMTlGRkQ1QUFCQkI3 ODM4NDc1RjI5QjAeFw0yNTExMjAxMzA5MzRaFw0zNTExMjAxMzA5MzRaMBgxFjAU BgNVBAMTDTY5MWYxMzEzLTc5ZTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDMyAUod5DWHdY0HJRkvKPOBUjH92SwP+gXfyp8lzEbRJ+f+m6UL6H1eKp8 a2emAc3AhtZ+H3EhG3bYJc38pj6nYMjCuNpr5NsWwTH6SRKWm2IAdFgMki2uTSPj wAKX9RTWem1thMSQgPokvrQch6lPnjmBWIQiSFNVDuU7Mr+tfez99je+XzBOLtVi pk6Nd7CF9KfoMwGdgfjDxblgIsiAcmyBk4yogRzkKgyNJHCOOgm8SP9BwLfIpML8 XAj7bLuCm14f8DVdbUHhUnF92NFi7A020YShg462SU9VTWCZ+qvWoMLPTx0PfjyW I5LrUXN0nXnZyd+eycuwMosHnsAzAgMBAAGjggK0MIICsDAdBgNVHQ4EFgQUlvsn 5Rhm9/64sy9gYpuxA4l+1L0wHwYDVR0jBBgwFoAU5IF89uPaBQJQGf/Vqru3g4R1 8pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNjk1QzBBLzRGNTU2RkVBQUI3NTExRUQ5M0U2NTZBRkYxMjIyNDY4LzVJRjg5 dVBhQlFKUUdmX1ZxcnUzZzRSMThwcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljLzVJRjg5dVBhQlFKUUdmX1ZxcnUzZzRSMThwcy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNjk1QzBBLzRGNTU2RkVBQUI3NTExRUQ5M0U2NTZBRkYx MjIyNDY4LzJCM0UwQUY4QzYxMjExRjA5ODU5Rjc5MkRBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBABm2xQwDQQCAAIwBwMFACwP WIAwDQYJKoZIhvcNAQELBQADggEBANJWJmT0dE+xz1wEsyoAuT2O5A8EnDLMuHup Xs7/W3oMRrvVGjB8wGwTxDEzIPJQ6so6vQGAxA5V/Auf4Zjo8Sn4x06wFKsyVKNX 9Ut4rDz+iRF/0xf1w8PML3YE+Tr3C/Sk4y7M3JBzNTDgAwNsG6geef97n9ocBt/e 66yNMl/N4zxjjNPD35hcp0hneJ5o2oXYXUDWd00z0wmNy9vsL01modbDBg32AjR7 ogKZoU19dGStSwB3IkE9qzIWgIHEGqk5S9no+H2FS733JOAdei/Cget1fMgKAeYm hkYBuosLQtAIp1RGfRohFTFuYjL4vt8evam8m8xulUwrIYCmVpc= -----END CERTIFICATE-----Generated at Fri Dec 5 01:44:14 2025 by rpki-client