This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9609DD82DA9711F0911BCFE4DAE4EC9C.roa
File: 9609DD82DA9711F0911BCFE4DAE4EC9C.roa (raw, json)
Hash identifier: oKunpLR6vVD7WtrjSC0OVf5d2Kb9yQVTFFlg4+qSWAU=
Subject key identifier: 87:FE:47:68:37:F1:9A:DC:5F:4B:CD:F4:DA:B1:ED:7F:F0:BE:86:6F
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 16B8
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9609DD82DA9711F0911BCFE4DAE4EC9C.roa
Signing time: Tue 16 Dec 2025 15:55:04 +0000
ROA not before: Tue 16 Dec 2025 15:54:59 +0000
ROA not after: Sat 16 Dec 2028 15:54:59 +0000
asID: 834
IP address blocks: 102.129.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 19 Dec 2025 00:06:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5816 (0x16b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Dec 16 15:54:59 2025 GMT
Not After : Dec 16 15:54:59 2028 GMT
Subject: CN=694180d8-9951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:b4:12:a0:47:42:1d:b8:c3:b5:4b:7d:01:
24:cb:de:bd:44:c1:b6:65:ee:00:51:a2:25:a0:e2:
21:d6:59:c8:10:d6:04:b8:4b:8f:12:3e:c4:48:03:
c2:d0:69:fb:3b:41:93:fa:11:95:ef:4a:59:fb:34:
68:69:41:a0:a9:82:37:42:22:44:bd:6d:e1:1d:b4:
c2:05:31:5d:a9:8f:9b:d4:4c:fe:0c:5f:89:4c:7c:
3b:37:50:ba:d1:e1:03:eb:d1:07:7c:d3:1d:14:57:
bb:ec:8c:61:18:d8:77:de:4f:74:8f:83:da:9a:3a:
99:7c:3c:9d:cd:a2:d2:37:3e:b9:ac:36:84:72:56:
ab:96:97:80:fd:01:7a:4e:74:30:41:56:5c:9b:89:
5b:7d:0f:fe:a5:02:e7:e2:a1:32:c7:e8:42:94:c0:
36:54:05:a6:5f:ed:a2:34:ce:ac:00:0c:6a:87:71:
de:62:88:e5:b7:e2:3e:2a:73:43:83:51:ec:f6:60:
56:51:8c:74:b5:f7:09:0f:dc:18:30:26:2b:64:67:
06:74:96:09:74:5f:97:20:d8:fa:92:fe:6b:65:99:
2f:f8:6b:23:3a:6b:cc:b8:6d:bf:03:bf:8e:60:cd:
87:63:19:ce:40:64:3f:df:a2:69:d3:60:8a:26:58:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FE:47:68:37:F1:9A:DC:5F:4B:CD:F4:DA:B1:ED:7F:F0:BE:86:6F
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/9609DD82DA9711F0911BCFE4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.129.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:b6:ba:67:e1:51:44:ed:6c:f4:a4:56:c4:ae:f8:15:51:b6:
6f:4f:2e:97:14:0a:07:97:a5:47:e4:02:23:a5:bb:7c:96:9c:
3c:e8:37:83:30:0a:1a:1a:3e:b9:3c:67:dd:1d:ab:d8:f8:f6:
86:a3:79:5c:1e:a0:56:4a:41:e5:a0:b3:4e:f3:59:33:22:ff:
ad:d3:a0:12:90:f3:9e:50:17:7b:c6:ff:a4:88:80:5d:d0:c3:
58:db:a0:05:81:fc:53:fc:1f:db:6a:b4:e1:83:30:09:f7:d5:
1c:7c:67:b0:34:31:12:a6:2a:a2:61:34:74:79:ba:7b:b8:c9:
36:b5:f1:82:15:3d:2b:72:59:a9:6d:d9:45:cf:c1:b3:de:99:
3b:25:32:6b:3f:c4:46:49:da:c8:c4:aa:f5:48:69:cb:f4:6f:
f3:b4:5d:32:7b:c7:21:1b:40:8d:1a:f3:46:5c:5f:76:98:a9:
6d:56:bd:2c:de:43:3f:41:66:65:da:a8:49:dd:bb:de:c6:60:
f7:22:2d:85:3e:d3:e8:81:65:78:54:92:0d:d8:12:b0:ee:37:
cc:89:6f:0a:ea:28:8e:ae:30:59:84:e4:a3:0f:f6:0f:cd:e8:
b0:0b:b7:72:e1:fb:ab:31:b4:72:c3:1c:bd:59:23:5f:12:bf:
5c:58:c9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 17 20:45:24 2025 by rpki-client