This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/107ED0CACFE111F0957C53ACDAE4EC9C.roa
File: 107ED0CACFE111F0957C53ACDAE4EC9C.roa (raw, json)
Hash identifier: RIkwUzoDd3XDed4hEq/jalYnrLUgJWyxDayVH4F6t5g=
Subject key identifier: D0:18:20:36:16:AF:7E:3E:14:39:0F:F5:39:A0:DA:AD:F4:5C:0A:B1
Certificate issuer: /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial: 37
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/107ED0CACFE111F0957C53ACDAE4EC9C.roa
Signing time: Wed 03 Dec 2025 00:43:20 +0000
ROA not before: Wed 03 Dec 2025 00:00:15 +0000
ROA not after: Mon 31 Dec 2035 00:00:15 +0000
asID: 24835
IP address blocks: 105.199.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Validity
Not Before: Dec 3 00:00:15 2025 GMT
Not After : Dec 31 00:00:15 2035 GMT
Subject: CN=692f87a8-0077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8f:7f:dc:03:45:59:c9:04:ea:9c:17:08:1a:
ac:f5:3b:33:b1:fc:05:c4:fd:f9:58:cd:b3:d8:58:
61:a1:f4:cc:b9:9c:fd:83:27:c0:cb:a7:3b:84:a9:
b4:44:4c:e6:0d:04:14:bd:11:b8:d1:fe:07:6b:3f:
c3:2f:70:1d:48:6f:e0:8f:aa:0e:4e:e2:2e:61:24:
4f:15:5f:f0:ae:a3:6c:20:06:ec:47:70:05:d0:db:
5f:b0:f7:40:bc:3c:5d:0b:75:c5:72:5c:df:7d:6f:
e6:98:e1:04:a5:a7:50:08:f9:1b:af:f7:c3:6c:7f:
89:14:76:d4:6e:18:aa:9e:19:0b:15:8e:7e:2b:a3:
09:57:0a:69:56:36:e3:84:19:2e:68:6d:4f:63:f0:
2e:a8:ff:5e:34:b1:54:07:46:26:18:15:25:48:ab:
41:25:5a:17:fd:72:e6:db:c1:fe:93:aa:4e:a5:5c:
01:c1:88:05:64:46:52:02:48:94:12:31:fd:dd:7c:
6f:11:82:71:39:b5:9c:14:3a:e4:8f:27:bc:e4:19:
68:57:71:8e:7b:41:79:72:ad:89:0d:8f:e4:23:f2:
67:30:41:31:25:08:7f:9d:3e:77:b9:17:c5:8c:61:
81:dd:0d:7c:66:ad:1b:1b:c0:cb:b7:f0:ca:be:72:
77:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:18:20:36:16:AF:7E:3E:14:39:0F:F5:39:A0:DA:AD:F4:5C:0A:B1
X509v3 Authority Key Identifier:
keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/107ED0CACFE111F0957C53ACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.199.244.0/24
Signature Algorithm: sha256WithRSAEncryption
91:fb:f9:dc:d9:ea:25:e9:66:5c:37:b9:6b:ce:91:3f:82:5f:
b8:11:1d:a8:9a:e9:2d:76:8e:0f:97:02:a4:a1:2a:d8:bb:58:
e3:36:e8:fd:00:0b:a8:ef:03:09:bc:2d:ac:0a:51:7a:8e:16:
3b:7f:1b:00:3e:37:2b:b8:80:c3:09:db:1f:6a:e1:20:60:ea:
40:ec:1c:c0:8f:1f:df:9d:fc:28:67:06:09:a6:77:d0:4e:b2:
f5:fc:91:b8:91:d4:4b:d5:29:67:4f:82:8c:01:88:04:be:02:
98:c5:42:c4:ae:cb:cd:1e:3f:cb:ac:d3:09:67:85:c3:b6:83:
39:87:35:84:ad:75:d7:a6:55:9f:08:65:ce:57:af:15:53:a0:
cd:2a:de:91:5c:76:85:15:e3:63:96:b6:74:db:a5:32:3a:92:
40:2b:95:1d:af:31:83:9c:ee:d3:e9:24:18:61:7e:41:a2:96:
c4:86:c4:6a:03:0a:98:50:c4:84:0a:12:ba:aa:8f:28:d8:c4:
a4:6d:e6:f4:10:a7:fa:97:02:fd:3a:ea:6d:71:37:b3:34:e8:
e0:5c:ef:7c:ae:80:b7:c8:5e:c8:6b:1b:dc:5b:5c:a0:ab:6b:
49:aa:a4:5f:90:96:2c:cf:dc:2e:87:71:68:f3:98:dc:02:fa:
45:ac:f5:98
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIBNzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
NUQ3QkFGMTEwLwYDVQQFEyhFMkZFNTZBRkU2NkFCMERGM0UzOTVFRERCNDE4OTNF
MDBERjZBRUY3MB4XDTI1MTIwMzAwMDAxNVoXDTM1MTIzMTAwMDAxNVowGDEWMBQG
A1UEAxMNNjkyZjg3YTgtMDA3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN6Pf9wDRVnJBOqcFwgarPU7M7H8BcT9+VjNs9hYYaH0zLmc/YMnwMunO4Sp
tERM5g0EFL0RuNH+B2s/wy9wHUhv4I+qDk7iLmEkTxVf8K6jbCAG7EdwBdDbX7D3
QLw8XQt1xXJc331v5pjhBKWnUAj5G6/3w2x/iRR21G4Yqp4ZCxWOfiujCVcKaVY2
44QZLmhtT2PwLqj/XjSxVAdGJhgVJUirQSVaF/1y5tvB/pOqTqVcAcGIBWRGUgJI
lBIx/d18bxGCcTm1nBQ65I8nvOQZaFdxjntBeXKtiQ2P5CPyZzBBMSUIf50+d7kX
xYxhgd0NfGatGxvAy7fwyr5yd7ECAwEAAaOCAqUwggKhMB0GA1UdDgQWBBTQGCA2
Fq9+PhQ5D/U5oNqt9FwKsTAfBgNVHSMEGDAWgBTi/lav5mqw3z45Xt20GJPgDfau
9zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjVEN0IvM0NFODhEMDhCREE5MTFGMDhDQTA4OTdBREFFNEVDOUMvNHY1V3It
WnFzTjgtT1Y3ZHRCaVQ0QTMycnZjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvNHY1V3ItWnFzTjgtT1Y3ZHRCaVQ0QTMycnZjLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjVEN0IvM0NFODhEMDhCREE5MTFGMDhDQTA4OTdBREFF
NEVDOUMvMTA3RUQwQ0FDRkUxMTFGMDk1N0M1M0FDREFFNEVDOUMucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGnH9DANBgkqhkiG9w0BAQsF
AAOCAQEAkfv53NnqJelmXDe5a86RP4JfuBEdqJrpLXaOD5cCpKEq2LtY4zbo/QAL
qO8DCbwtrApReo4WO38bAD43K7iAwwnbH2rhIGDqQOwcwI8f3538KGcGCaZ30E6y
9fyRuJHUS9UpZ0+CjAGIBL4CmMVCxK7LzR4/y6zTCWeFw7aDOYc1hK1116ZVnwhl
zlevFVOgzSrekVx2hRXjY5a2dNulMjqSQCuVHa8xg5zu0+kkGGF+QaKWxIbEagMK
mFDEhAoSuqqPKNjEpG3m9BCn+pcC/TrqbXE3szTo4FzvfK6At8heyGsb3FtcoKtr
SaqkX5CWLM/cLodxaPOY3AL6Raz1mA==
-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:46 2025 by rpki-client