This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CA96E426E6DD11F0952EC99BDAE4EC9C.roa File: CA96E426E6DD11F0952EC99BDAE4EC9C.roa (raw, json) Hash identifier: gqfbAoAPdIf8+39oDmG5lmuWvIG1i2RhcFa2NOx0jFI= Subject key identifier: 28:9B:FC:BD:C2:EC:B9:A2:4C:F3:93:2F:9E:F4:78:60:FC:5C:7E:3E Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC Certificate serial: 16E9 Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CA96E426E6DD11F0952EC99BDAE4EC9C.roa Signing time: Thu 01 Jan 2026 06:47:51 +0000 ROA not before: Thu 01 Jan 2026 06:47:46 +0000 ROA not after: Mon 01 Jan 2029 06:47:46 +0000 asID: 834 IP address blocks: 102.129.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft rsync://rpki.afrinic.net/repository/AfriNIC.cer Signature path expires: Sat 03 Jan 2026 06:50:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5865 (0x16e9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC Validity Not Before: Jan 1 06:47:46 2026 GMT Not After : Jan 1 06:47:46 2029 GMT Subject: CN=69561897-d9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:a0:1d:6d:55:47:fd:43:7f:c5:a1:f5:78: e5:cd:c9:8d:8d:1d:e5:6e:72:80:72:49:77:97:78: e1:92:3c:ce:a7:6a:39:6b:c8:d1:ae:a7:92:8c:89: 6d:f3:ed:90:47:68:d9:ea:69:b8:0e:5b:76:28:0f: 07:f6:62:66:ac:1b:b8:33:b0:26:00:5a:5b:75:b8: 2a:6e:7d:6e:c9:c4:17:52:2c:24:95:b9:de:7f:09: c7:d8:cb:3e:dd:f3:e2:f0:db:98:b9:49:c1:e9:96: 10:8d:7f:ce:14:32:d9:a8:10:df:77:fa:d7:b9:93: e1:56:30:89:c6:05:8a:f5:b7:68:01:99:02:2a:2e: 17:0c:f8:68:48:6c:e4:2d:ea:57:e6:03:78:cb:7f: c9:87:97:5a:4a:c8:3a:29:62:cd:49:3d:44:a4:c1: 84:7c:63:c3:da:ac:8b:48:d6:f5:c4:84:5d:f7:70: ad:a2:0c:10:79:c3:4a:11:a2:fe:a3:45:67:d0:7b: 36:e6:0f:33:a5:2e:b4:15:8f:ff:84:0d:b7:e0:d1: 6f:91:d5:a0:47:c0:73:72:43:ce:d6:5e:47:12:1d: fa:1d:bd:4a:51:cb:cc:89:d5:75:90:90:1e:23:fe: 28:02:71:5d:2c:fe:fa:2b:f7:38:54:66:77:0b:94: 58:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:9B:FC:BD:C2:EC:B9:A2:4C:F3:93:2F:9E:F4:78:60:FC:5C:7E:3E X509v3 Authority Key Identifier: keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://rpki.afrinic.net/policy/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/CA96E426E6DD11F0952EC99BDAE4EC9C.roa RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 102.129.134.0/24 Signature Algorithm: sha256WithRSAEncryption 65:f6:d3:f6:b0:78:4c:99:6d:79:a7:6d:cb:2f:65:88:b1:1f: 0c:e1:e7:0a:a3:12:18:34:ba:c9:c8:dc:0d:4f:44:cb:ca:43: 4b:cf:0b:7c:9d:2b:46:3d:e5:bd:92:8a:ee:21:ac:08:01:90: f5:76:f3:85:4a:f0:2f:4c:99:b0:f2:0c:eb:37:3b:70:f6:18: 36:20:80:5f:74:ea:a5:40:f5:a3:c2:d4:8c:46:f1:1e:85:76: 92:f7:f4:bf:e5:37:77:89:65:c0:a9:cb:1b:d9:fb:c8:18:5d: d4:74:ec:a2:f0:8e:6f:2e:b8:25:be:1b:e8:10:74:b1:d7:0a: f4:16:bb:c9:06:1a:1d:34:d1:47:ad:68:20:53:a0:f9:b4:9c: c3:85:3d:a5:d7:fd:4c:94:60:6e:58:2a:c2:49:00:f2:fc:66: bf:64:4d:12:9a:54:58:f1:b3:8b:cb:5f:c2:ba:7f:53:09:82: 4d:53:75:e7:e6:a8:77:6d:f9:a8:c5:5c:15:53:7c:0d:de:a3: a0:54:37:14:89:38:55:38:e0:19:90:13:90:c1:e9:fc:4f:ea: fa:32:28:6e:67:cf:e7:07:8e:ad:d5:b3:a8:24:5d:84:02:1c: 64:bb:03:13:5d:c8:8b:1b:e2:50:a7:9c:ad:6e:fc:0d:8f:2c: e4:03:c8:0c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICFukwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2 QzU4RDZBRjExMC8GA1UEBRMoNDhBMkYyQzRBQTRBRUEzOUJFNDZCRkU1Rjk5Qzky NjI5QkJFRDhGQzAeFw0yNjAxMDEwNjQ3NDZaFw0yOTAxMDEwNjQ3NDZaMBgxFjAU BgNVBAMTDTY5NTYxODk3LWQ5YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK AoIBAQDMPaAdbVVH/UN/xaH1eOXNyY2NHeVucoBySXeXeOGSPM6najlryNGup5KM iW3z7ZBHaNnqabgOW3YoDwf2YmasG7gzsCYAWlt1uCpufW7JxBdSLCSVud5/CcfY yz7d8+Lw25i5ScHplhCNf84UMtmoEN93+te5k+FWMInGBYr1t2gBmQIqLhcM+GhI bOQt6lfmA3jLf8mHl1pKyDopYs1JPUSkwYR8Y8ParItI1vXEhF33cK2iDBB5w0oR ov6jRWfQezbmDzOlLrQVj/+EDbfg0W+R1aBHwHNyQ87WXkcSHfodvUpRy8yJ1XWQ kB4j/igCcV0s/vor9zhUZncLlFhPAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUKJv8 vcLsuaJM85MvnvR4YPxcfj4wHwYDVR0jBBgwFoAUSKLyxKpK6jm+Rr/l+ZySYpu+ 2PwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5 L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4QUVBMjI4L1NLTHl4 S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp bmljL1NLTHl4S3BLNmptLVJyX2wtWnlTWXB1LTJQdy5jZXIwTwYDVR0gAQH/BEUw QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl cl9yZXBvc2l0b3J5L0YzNkM1OEQ2L0Q2OUE0REZFNzMxNjExRTk5MTMzMDM3Q0Y4 QUVBMjI4L0NBOTZFNDI2RTZERDExRjA5NTJFQzk5QkRBRTRFQzlDLnJvYTA1Bggr BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54 bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABmgYYwDQYJKoZIhvcNAQEL BQADggEBAGX20/aweEyZbXmnbcsvZYixHwzh5wqjEhg0usnI3A1PRMvKQ0vPC3yd K0Y95b2Siu4hrAgBkPV284VK8C9MmbDyDOs3O3D2GDYggF906qVA9aPC1IxG8R6F dpL39L/lN3eJZcCpyxvZ+8gYXdR07KLwjm8uuCW+G+gQdLHXCvQWu8kGGh000Uet aCBToPm0nMOFPaXX/UyUYG5YKsJJAPL8Zr9kTRKaVFjxs4vLX8K6f1MJgk1Tdefm qHdt+ajFXBVTfA3eo6BUNxSJOFU44BmQE5DB6fxP6voyKG5nz+cHjq3Vs6gkXYQC HGS7AxNdyIsb4lCnnK1u/A2PLOQDyAw= -----END CERTIFICATE-----Generated at Fri Jan 2 02:08:34 2026 by rpki-client