This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/41D32A18E64811F0ACFAB484DAE4EC9C.roa
File: 41D32A18E64811F0ACFAB484DAE4EC9C.roa (raw, json)
Hash identifier: 5V7TJLQLLojrh3rp4usM3FHkPrvqeC97To9U71gTLO4=
Subject key identifier: 32:73:82:6E:71:36:C3:77:F1:A9:01:0B:28:1B:8A:60:AA:C2:AD:00
Certificate issuer: /CN=F3625D7BRI/serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Certificate serial: 4E
Authority key identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
Authority info access: rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/41D32A18E64811F0ACFAB484DAE4EC9C.roa
Signing time: Wed 31 Dec 2025 12:57:27 +0000
ROA not before: Wed 31 Dec 2025 12:57:22 +0000
ROA not after: Mon 31 Dec 2035 12:57:22 +0000
asID: 36935
IP address blocks: 62.68.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 78 (0x4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D7BRI, serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Validity
Not Before: Dec 31 12:57:22 2025 GMT
Not After : Dec 31 12:57:22 2035 GMT
Subject: CN=69551db7-698f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:c9:3e:42:46:19:d3:9d:50:dd:0e:56:27:
ff:67:3f:02:9f:a0:f5:75:a7:4a:bd:ba:8d:4d:1d:
0c:d8:cf:9e:27:40:cc:b3:2f:3f:a3:23:de:e5:a5:
61:4b:29:22:ad:8c:9e:2c:a1:40:da:ed:11:e6:0a:
f0:54:47:21:a0:f8:66:44:1f:15:bf:0e:41:e7:53:
ec:87:c8:b1:f1:1e:11:2d:ab:b2:b8:5c:73:0b:55:
c6:f9:f7:a6:b5:0f:05:98:df:56:98:b4:a1:78:ba:
96:0d:22:56:21:95:82:08:b0:4c:f2:25:0e:cc:70:
0d:f6:7d:25:d4:5e:94:05:a6:4f:c6:7c:b1:91:a9:
52:e1:6a:8e:5d:72:0d:06:a5:9d:68:78:5f:e8:04:
4f:18:c1:97:bb:2d:f8:2f:2a:18:07:c7:27:9d:19:
fb:e6:51:b0:a2:88:7f:fb:7f:69:3c:9c:20:82:8f:
e3:2b:36:6a:21:fa:af:54:5f:90:f0:c8:3e:c7:2a:
c0:b1:ca:13:47:1d:2c:59:1f:35:e8:01:25:38:cf:
8f:4f:08:31:5b:bd:46:d9:d3:21:5a:ca:63:61:f8:
7e:6b:9f:e5:b5:61:d4:21:0f:17:b8:92:a9:27:91:
5b:1e:78:3e:5e:dc:19:53:c5:88:3c:b2:42:9e:30:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:73:82:6E:71:36:C3:77:F1:A9:01:0B:28:1B:8A:60:AA:C2:AD:00
X509v3 Authority Key Identifier:
keyid:C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/41D32A18E64811F0ACFAB484DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
62.68.224.0/19
Signature Algorithm: sha256WithRSAEncryption
41:50:59:bf:d5:df:35:6e:07:5d:02:0b:94:0b:14:44:4a:0e:
ab:e1:57:a3:a9:96:fa:42:f1:86:7d:fa:74:1a:d6:9e:ec:5d:
cf:cc:64:cd:6a:45:42:41:9d:6a:a7:e1:2a:11:ab:2b:0b:30:
22:50:a3:cb:62:ee:24:71:0c:89:d8:ce:fc:69:8e:dc:55:5e:
74:54:1e:86:db:81:b0:37:8e:75:94:af:5b:7a:a7:8e:e2:4c:
3d:d8:b5:de:9f:76:b2:8c:f6:87:4e:fe:94:4f:30:6b:75:17:
53:9f:71:4c:34:3f:1c:31:65:02:5b:09:cc:a4:75:4b:ac:c7:
42:fb:a4:58:67:69:cd:52:5a:e5:be:e6:39:9d:1f:b3:b9:3a:
97:e6:36:86:7c:9c:43:92:53:10:76:51:d0:34:27:17:e1:f6:
ab:4d:92:2c:05:d3:41:c6:06:ab:dd:14:e4:9f:dc:96:1a:c4:
fb:a1:97:08:5d:6c:2e:25:4b:77:00:89:8c:43:76:37:ea:65:
21:50:ad:62:dd:88:48:77:a9:64:e0:26:8a:bb:b7:36:df:ef:
32:ae:f2:ef:23:8d:79:e5:04:b3:cc:2d:5b:97:f4:4a:92:10:
81:7e:15:8c:97:de:06:2e:87:bd:fc:0c:f2:07:6d:4e:b8:8e:
e1:84:ef:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:36:16 2026 by rpki-client