This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/18C749D6E64511F0ABEFC7EFDAE4EC9C.roa
File: 18C749D6E64511F0ABEFC7EFDAE4EC9C.roa (raw, json)
Hash identifier: HcEhn8rY0LMqLMqnW5E48TBpkZIQs7rG01NNOWL4qIw=
Subject key identifier: BF:2F:6B:83:3E:A3:96:11:5E:87:EC:0C:54:4A:57:7C:36:0A:20:EF
Certificate issuer: /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial: 99
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/18C749D6E64511F0ABEFC7EFDAE4EC9C.roa
Signing time: Wed 31 Dec 2025 12:34:49 +0000
ROA not before: Wed 31 Dec 2025 12:34:45 +0000
ROA not after: Mon 31 Dec 2035 12:34:45 +0000
asID: 36935
IP address blocks: 41.206.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153 (0x99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Validity
Not Before: Dec 31 12:34:45 2025 GMT
Not After : Dec 31 12:34:45 2035 GMT
Subject: CN=69551869-b4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7f:1c:20:12:f8:da:34:93:46:ef:dd:b6:4d:
95:67:ca:90:c7:36:36:ec:e4:09:d1:75:0d:02:63:
ee:ee:0e:04:d6:79:37:c3:3e:e5:25:a9:d6:87:e2:
80:e7:cb:00:3a:5c:58:0c:7d:d2:65:65:b3:1b:3d:
c9:b5:9b:95:f9:e1:7a:86:22:f3:43:df:eb:9b:bc:
2a:fb:88:fc:72:c2:bf:4d:31:f8:ff:11:ef:05:97:
b0:70:b4:c0:88:e9:28:68:e4:92:15:e4:88:ea:ef:
9d:1d:9d:2a:f2:80:21:2b:90:68:e9:0c:34:ca:07:
49:d9:d6:f0:03:cb:5b:97:44:44:ff:4e:7b:51:a0:
49:5f:b4:c5:51:e8:83:d9:e2:9e:8c:0e:2d:67:7b:
42:77:ef:f0:83:8c:49:bb:8f:1b:2a:7a:47:03:c6:
4f:dc:45:22:74:7f:0a:4c:dc:6d:9c:17:f9:02:4f:
98:e7:ad:91:2f:ff:03:cb:bc:cf:1e:3c:fa:ef:1e:
8f:db:8f:0c:41:5a:a5:c5:af:93:2c:71:11:43:57:
90:ca:cf:48:02:73:d8:27:9c:e8:54:9e:38:d2:cb:
f0:13:9c:b1:7d:11:07:78:db:07:75:37:14:5d:a5:
db:b6:8d:6f:38:b3:7d:c7:e1:0d:66:66:37:a5:9d:
67:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2F:6B:83:3E:A3:96:11:5E:87:EC:0C:54:4A:57:7C:36:0A:20:EF
X509v3 Authority Key Identifier:
keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/18C749D6E64511F0ABEFC7EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.206.128.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:62:ba:c5:5a:d6:d9:93:b7:19:f7:b0:c9:fb:3d:f5:2c:9c:
c4:3d:31:ca:e4:1d:8a:43:bf:8c:5b:45:de:0e:5f:b4:2c:c3:
ca:82:04:50:7b:95:4c:d1:6d:f7:92:3d:6c:be:6a:2d:fc:d8:
df:65:8e:9c:f4:2e:f6:12:48:91:98:b7:9a:20:8c:42:b3:48:
bb:6e:5e:6c:e0:8f:f2:c4:20:0c:19:02:7b:ec:5a:8e:ae:fa:
eb:40:f9:f9:e1:e4:65:c8:06:ec:d5:79:9b:14:44:10:f5:c9:
cc:09:30:37:a1:77:5b:85:42:3b:f6:4d:a8:2e:ee:d2:49:a4:
5e:03:44:41:2f:24:8d:b1:1a:c8:75:d6:ff:71:d3:b5:58:44:
6d:27:dc:28:53:2f:aa:31:38:a8:55:bc:bc:88:6c:f8:9c:ff:
9c:b1:29:69:9a:1c:a4:f5:32:ea:b1:19:d0:4a:1a:c4:2c:05:
76:8a:62:21:97:9d:d8:fd:05:ee:f1:fa:db:6e:5f:63:2c:4e:
4b:93:5d:67:83:dd:9d:8c:e7:ea:56:a7:2f:0a:1a:a5:9f:9d:
54:82:b0:af:41:59:11:4a:7d:45:a1:c2:f8:3b:27:46:d6:d2:
b0:fc:a6:39:4b:3c:94:63:31:75:65:30:d3:00:fb:af:6f:a2:
4d:74:27:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:54 2026 by rpki-client