This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/840DD0AAE64711F084488A80DAE4EC9C.roa
File: 840DD0AAE64711F084488A80DAE4EC9C.roa (raw, json)
Hash identifier: LEJhspwfo4P35G4GsyqKcA7wSNxsuLJZrV6m0oln0v0=
Subject key identifier: 72:63:39:E1:0F:1F:1B:65:5B:25:A3:41:2F:08:B4:21:29:1E:13:46
Certificate issuer: /CN=F3625D7BRI/serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Certificate serial: 46
Authority key identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
Authority info access: rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/840DD0AAE64711F084488A80DAE4EC9C.roa
Signing time: Wed 31 Dec 2025 12:52:08 +0000
ROA not before: Wed 31 Dec 2025 12:52:04 +0000
ROA not after: Mon 31 Dec 2035 12:52:04 +0000
asID: 36935
IP address blocks: 82.129.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:45:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70 (0x46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D7BRI, serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Validity
Not Before: Dec 31 12:52:04 2025 GMT
Not After : Dec 31 12:52:04 2035 GMT
Subject: CN=69551c78-605a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:90:9d:91:e9:1c:7e:69:74:91:73:ce:f7:
e1:98:bc:f3:32:d0:75:98:d7:78:ee:59:4a:87:51:
d9:ec:2e:88:86:92:50:c4:8d:22:1e:39:d7:d5:01:
c8:84:80:eb:05:20:3f:ba:9e:52:62:bc:8d:14:f7:
ae:de:7f:da:27:3a:fd:9e:f1:bc:45:c3:02:bd:1a:
31:ce:4b:67:1e:4d:bd:24:5a:c1:75:10:f6:51:9c:
ba:b3:b0:71:d7:d7:70:00:34:f5:31:5a:7c:cc:20:
5f:92:01:98:c7:6c:ed:b8:51:e0:49:45:29:fe:c0:
f1:5f:e2:83:d2:fa:59:8d:aa:e3:04:94:01:48:f1:
ea:38:0a:a6:63:26:4c:82:3f:9e:ac:ab:dd:50:b8:
d2:84:f1:c6:4b:b9:b7:cf:a5:0e:77:83:69:93:b3:
e8:7f:c6:cb:7d:41:c3:8f:79:8c:f4:59:53:42:a9:
26:be:c1:f9:35:58:0a:37:da:1e:ae:9a:70:67:a6:
60:5d:0f:46:13:90:61:56:b3:a2:63:e9:5e:e3:0c:
e0:2e:8b:d5:ed:a0:4d:c4:d7:3a:17:5d:fc:a0:1d:
75:0c:55:58:6b:50:91:28:46:8b:7c:a2:f7:9b:de:
9e:83:96:c3:3b:11:27:82:3d:41:b3:41:89:55:14:
74:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:63:39:E1:0F:1F:1B:65:5B:25:A3:41:2F:08:B4:21:29:1E:13:46
X509v3 Authority Key Identifier:
keyid:C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/840DD0AAE64711F084488A80DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
82.129.128.0/17
Signature Algorithm: sha256WithRSAEncryption
67:3e:0a:59:10:6b:7d:15:44:1a:f2:70:ef:bf:17:5e:cc:78:
b0:ca:e7:7d:9f:ca:94:b6:80:d7:09:b6:ba:97:11:32:56:84:
da:53:7e:ac:ae:63:ad:9f:c0:42:12:7d:aa:e6:67:65:1d:96:
9f:4c:ff:8c:d1:9d:97:90:41:e3:ee:6b:a8:41:e5:6b:5a:6e:
14:93:0e:fc:34:39:25:c5:b7:4f:1e:e6:a7:03:08:9f:30:5e:
af:14:91:7e:ca:c6:05:65:02:c3:58:9e:62:c9:6b:0b:2f:76:
41:45:d8:99:ec:f5:76:7c:f6:1b:44:9e:f4:86:94:97:6d:15:
16:fd:61:3b:c2:e5:63:b5:0c:a6:f7:99:ae:fa:49:23:85:a5:
92:e4:d9:3f:7f:5b:3d:93:10:7d:d5:49:a8:65:f4:0b:48:61:
b6:c9:c5:83:69:3e:15:8a:46:6d:79:15:b7:5a:7b:38:91:b3:
cc:81:40:27:1c:1c:7b:5c:69:62:15:d2:d6:8a:83:ce:aa:79:
cd:86:35:59:83:4b:68:de:8c:69:d8:d3:98:0c:f8:af:0f:8e:
23:c4:e0:06:a1:01:f0:5e:20:5d:9d:bf:ca:46:2a:54:36:c8:
8b:36:47:af:9f:fd:fd:1e:8b:95:1f:99:ab:98:67:6a:a1:75:
d7:0a:db:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:37:49 2026 by rpki-client