This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/68BE0A70C48411F08BFB24D6DAE4EC9C.roa File: 68BE0A70C48411F08BFB24D6DAE4EC9C.roa (raw, json) Hash identifier: xQiFAizGHIy6/HjouiNS0esxgLpHabAXlVqCqoieWTk= Subject key identifier: 41:59:95:4C:48:10:18:84:A5:31:3D:2B:51:CA:74:FD:DB:46:2B:45 Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC Certificate serial: 1673 Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/68BE0A70C48411F08BFB24D6DAE4EC9C.roa Signing time: Tue 18 Nov 2025 13:42:23 +0000 ROA not before: Tue 18 Nov 2025 13:42:14 +0000 ROA not after: Sat 20 Nov 2027 13:42:14 +0000 asID: 23470 IP address blocks: 102.129.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sun 23 Nov 2025 00:06:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5747 (0x1673) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC Validity Not Before: Nov 18 13:42:14 2025 GMT Not After : Nov 20 13:42:14 2027 GMT Subject: CN=691c77be-afa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9c:03:5a:6e:37:71:e6:c7:fe:f7:58:2d:96: 95:bf:97:09:5b:5a:e4:eb:37:ae:84:42:58:24:9c: 34:27:1e:29:af:2f:05:e0:d3:eb:f2:07:65:38:34: f6:a2:f4:45:6d:8d:cf:a0:f2:3c:11:b6:9e:9f:d5: 1e:e2:c0:cf:ab:5f:39:1d:8e:61:da:be:48:f5:2b: a9:6e:7c:16:5a:f2:cf:ac:8b:24:f7:d7:80:0f:2b: 46:0e:8a:64:4d:9e:f3:3d:1f:b9:54:df:a8:fe:2e: e0:25:b3:d6:ff:89:15:2f:c2:4d:73:6a:0e:c5:6f: ef:8d:ca:10:ad:9d:ad:25:8a:9e:2a:7a:2e:95:d6: dc:e7:ac:43:8b:9b:c0:a4:94:27:ff:2f:d8:c1:f2: 71:2e:07:6c:7f:ce:49:8f:43:79:75:dd:0a:66:19: d8:70:d1:6d:20:f5:ad:be:49:b9:0c:27:6f:7f:7f: 1f:72:df:f1:90:99:5a:6c:8a:28:de:41:ee:d9:58: 03:0e:ab:3d:24:7e:0c:20:d0:e5:23:a5:c6:6c:d9: de:2a:93:48:4d:d7:0f:cb:dc:91:bd:a4:13:50:b2: 24:0f:eb:69:e2:f2:10:48:10:4d:3e:f1:10:44:34: a1:dc:8b:e2:33:6a:26:25:a0:d5:ec:cc:92:cf:ac: 3e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:59:95:4C:48:10:18:84:A5:31:3D:2B:51:CA:74:FD:DB:46:2B:45 X509v3 Authority Key Identifier: keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/68BE0A70C48411F08BFB24D6DAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 102.129.137.0/24 Signature Algorithm: sha256WithRSAEncryption 39:11:79:13:f0:d3:3a:22:dd:b2:20:ab:6a:9b:6b:ed:81:63: ec:0a:ff:0a:c0:89:2f:cf:4f:5b:eb:21:fa:b8:ad:3e:c2:6c: fd:84:58:85:bc:1a:0f:f0:db:f2:aa:60:04:7e:4f:5a:71:b7: 44:06:a7:99:f1:ca:5e:6f:e6:17:bb:9c:7c:77:21:89:0d:47: 6a:07:7c:f8:25:d8:98:32:e7:c0:ff:a0:f5:9b:aa:9c:2c:af: 9b:31:67:a8:9b:32:11:e9:a2:42:0f:b6:3d:26:e7:1a:44:7b: 62:94:d8:5f:3a:bf:22:ff:93:c3:8f:b8:74:e3:5c:9e:43:c1: 07:f7:1d:bc:82:3d:30:e9:8a:a8:b8:ac:7b:b2:db:45:26:68: 5c:d4:3d:71:05:fd:30:2f:1a:84:5b:1d:d5:fc:b9:6a:43:c5: de:50:a6:6c:d5:21:93:af:ff:1a:5f:db:06:f9:62:49:ba:ee: 8d:14:be:55:18:4d:11:3d:71:60:94:82:c3:89:01:fe:8c:3f: 03:21:84:da:6e:5f:98:46:9c:b2:06:39:b8:40:d3:18:7b:5f: 19:21:0a:57:93:6a:1e:cc:ce:09:97:a1:15:9b:a6:22:1c:e5: 86:e4:7c:fb:5e:5e:a0:c1:3d:72:27:73:90:a3:9b:37:08:51: 95:aa:74:14 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICFnMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky NjI5QkJFRDhGQzAeFw0yNTExMTgxMzQyMTRaFw0yNzExMjAxMzQyMTRaMBgxFjAU BgNVBAMTDTY5MWM3N2JlLWFmYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQCZnANabjdx5sf+91gtlpW/lwlbWuTrN66EQlgknDQnHimvLwXg0+vyB2U4 NPai9EVtjc+g8jwRtp6f1R7iwM+rXzkdjmHavkj1K6lufBZa8s+siyT314APK0YO imRNnvM9H7lU36j+LuAls9b/iRUvwk1zag7Fb++NyhCtna0lip4qei6V1tznrEOL m8CklCf/L9jB8nEuB2x/zkmPQ3l13QpmGdhw0W0g9a2+SbkMJ29/fx9y3/GQmVps iijeQe7ZWAMOqz0kfgwg0OUjpcZs2d4qk0hN1w/L3JG9pBNQsiQP62ni8hBIEE0+ 8RBENKHci+IzaiYloNXszJLPrD41AgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUQVmV TEgQGISlMT0rUcp0/dtGK0UwHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+ 2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4 S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4 QUVBMjI4LzY4QkUwQTcwQzQ4NDExRjA4QkZCMjRENkRBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgYkwDQYJKoZIhvcNAQEL BQADggEBADkReRPw0zoi3bIgq2qba+2BY+wK/wrAiS/PT1vrIfq4rT7CbP2EWIW8 Gg/w2/KqYAR+T1pxt0QGp5nxyl5v5he7nHx3IYkNR2oHfPgl2Jgy58D/oPWbqpws r5sxZ6ibMhHpokIPtj0m5xpEe2KU2F86vyL/k8OPuHTjXJ5DwQf3HbyCPTDpiqi4 rHuy20UmaFzUPXEF/TAvGoRbHdX8uWpDxd5QpmzVIZOv/xpf2wb5Ykm67o0UvlUY TRE9cWCUgsOJAf6MPwMhhNpuX5hGnLIGObhA0xh7XxkhCleTah7MzgmXoRWbpiIc 5YbkfPteXqDBPXInc5CjmzcIUZWqdBQ= -----END CERTIFICATE-----Generated at Fri Nov 21 04:19:37 2025 by rpki-client