This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/11EAFD34CFB511F0A85F229EDAE4EC9C.roa
File: 11EAFD34CFB511F0A85F229EDAE4EC9C.roa (raw, json)
Hash identifier: ktCsVGelnDxhF1brhkkAXgPNdkq/+H9UbhWPD7GDAWM=
Subject key identifier: 07:14:6C:3D:4E:63:DE:F7:26:34:F3:1A:08:D5:EC:9F:7D:5C:0B:E6
Certificate issuer: /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial: 27
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/11EAFD34CFB511F0A85F229EDAE4EC9C.roa
Signing time: Tue 02 Dec 2025 19:28:25 +0000
ROA not before: Tue 02 Dec 2025 19:28:20 +0000
ROA not after: Mon 31 Dec 2035 19:28:20 +0000
asID: 36935
IP address blocks: 102.217.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 39 (0x27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Validity
Not Before: Dec 2 19:28:20 2025 GMT
Not After : Dec 31 19:28:20 2035 GMT
Subject: CN=692f3dd9-cfed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:c2:a6:ef:a0:cd:31:39:fb:70:88:e6:0e:
82:c8:6d:6e:6b:82:2c:36:77:0c:24:31:4b:6d:60:
90:08:a0:8f:ca:30:0d:b2:44:e1:b3:34:9b:fe:d2:
a5:2e:99:26:d4:4c:c7:7b:3e:7b:a6:3f:49:88:e9:
46:b4:e4:e3:6b:42:6c:a8:8e:1f:fb:e5:83:13:be:
95:0c:d3:41:f6:c7:bc:b1:90:3d:a3:17:97:32:ad:
9c:53:db:ef:0a:79:49:7d:98:cc:04:d8:a2:78:cd:
b8:a5:3e:71:f1:22:5d:fe:34:cc:7b:0a:93:66:cb:
d4:80:f5:70:8b:9b:df:3d:a9:b5:44:24:cd:6c:e1:
18:20:37:ee:51:48:09:4b:95:3a:d7:cd:9c:74:fe:
4d:36:09:68:d8:e6:84:84:68:7c:dd:5d:04:8e:17:
77:84:52:b1:63:b9:c8:91:36:e9:62:98:e7:ef:0b:
90:8c:6e:56:15:da:3a:bc:16:31:92:50:e6:91:72:
28:51:ae:73:bb:fc:2d:3d:ef:94:46:f8:fb:c2:b8:
42:5d:57:cc:e2:93:87:54:e0:19:68:77:82:b0:e1:
19:a7:b8:41:c8:01:24:08:90:f6:42:44:68:4b:33:
d0:bd:12:cd:8d:81:de:44:bd:dc:69:8c:9e:9d:3b:
06:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:14:6C:3D:4E:63:DE:F7:26:34:F3:1A:08:D5:EC:9F:7D:5C:0B:E6
X509v3 Authority Key Identifier:
keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/11EAFD34CFB511F0A85F229EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.112.0/22
Signature Algorithm: sha256WithRSAEncryption
58:ea:1b:6c:47:8c:4f:51:a6:8f:f8:0f:83:7c:e9:94:3c:f7:
51:8f:cd:57:e7:04:c1:51:b8:c6:d4:29:26:b1:7e:75:7e:2b:
ed:60:85:52:79:c5:cb:56:dc:1f:21:a0:f6:c5:4a:74:6e:87:
8f:c3:41:2d:50:80:81:57:44:ab:8c:5b:c3:c4:5a:d7:c2:83:
a7:91:7e:c8:d1:e4:7b:88:65:de:21:5f:64:da:67:35:73:22:
b4:2e:9e:bc:7a:32:97:ca:81:cf:03:fa:cb:a9:bd:5c:4e:4e:
08:0f:a5:3d:c2:d6:40:f3:22:60:36:2a:88:f9:5a:2a:e5:dc:
e2:cc:ef:12:9b:7a:01:41:51:6d:23:9a:08:36:ee:87:5b:b6:
fd:63:ad:bc:d1:2a:05:77:c3:8f:11:31:14:45:45:5a:91:24:
d3:56:69:a1:1c:dd:d9:f7:54:e6:bf:a7:b9:d4:7b:1d:fb:37:
0b:ee:dd:e5:5a:14:d5:03:22:ba:98:b6:5c:6f:a5:78:ad:6a:
00:15:51:ad:36:f0:be:74:5d:db:4b:75:e1:50:75:07:39:92:
7e:1e:72:1a:b8:42:07:28:94:6f:d3:3a:21:6a:ba:a7:2b:7d:
fe:ff:67:0a:47:0e:10:8a:00:02:f0:95:d0:31:28:c3:a6:1c:
71:3e:c5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:47 2025 by rpki-client