This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/1FB32634CFB611F0A31DAAA4DAE4EC9C.roa
File: 1FB32634CFB611F0A31DAAA4DAE4EC9C.roa (raw, json)
Hash identifier: DZhYeLrVZ0weMplnQYlSAPus+IEMEVNVzO++jLpv0YY=
Subject key identifier: A4:EC:14:6A:B1:65:12:87:2A:82:F7:1D:76:E8:C1:5F:7D:B8:AE:74
Certificate issuer: /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial: 2F
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/1FB32634CFB611F0A31DAAA4DAE4EC9C.roa
Signing time: Tue 02 Dec 2025 19:35:58 +0000
ROA not before: Tue 02 Dec 2025 19:35:53 +0000
ROA not after: Mon 31 Dec 2035 19:35:53 +0000
asID: 24835
IP address blocks: 197.132.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 47 (0x2f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Validity
Not Before: Dec 2 19:35:53 2025 GMT
Not After : Dec 31 19:35:53 2035 GMT
Subject: CN=692f3f9e-6ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:31:eb:2f:7d:20:41:5f:86:d7:5c:a6:e0:
aa:0f:9c:fe:17:d8:90:e5:c1:98:d4:9c:da:8b:c5:
aa:12:9d:39:ca:d0:8f:c6:61:4c:f6:20:ad:c0:23:
9b:6d:6b:9f:a7:3d:6f:4d:8f:83:3c:72:24:7a:33:
82:51:3b:f3:48:a1:30:cf:4c:e4:f6:76:c3:d9:75:
a0:2c:35:ff:f8:ad:2f:09:21:ac:ba:b6:22:a6:9c:
f6:48:db:77:54:b7:e5:94:a8:c7:e6:a6:6d:42:08:
a4:78:c4:55:a5:d6:df:84:2c:1d:2b:5a:53:29:7a:
c2:75:a9:76:68:e6:b3:40:d0:eb:98:ec:93:d1:29:
f7:09:fa:67:31:0c:f2:42:89:9f:00:f9:f1:2f:f0:
88:c7:26:60:16:e7:55:f7:29:d3:2b:56:46:d2:d3:
aa:a0:d5:a2:a5:5a:21:fb:13:fc:9e:82:63:7c:fe:
fe:f7:70:d6:1d:7d:36:db:6a:9a:64:c4:56:50:6f:
9b:60:2c:41:5c:b1:dc:04:9f:61:5f:8a:b0:63:c3:
db:e4:07:5b:53:d1:19:59:f7:6b:e7:9b:0a:d3:05:
95:94:65:6a:4d:05:50:7e:8d:27:da:ce:85:b4:da:
bf:f5:7a:35:9a:08:d4:a5:92:84:2b:71:25:87:29:
71:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EC:14:6A:B1:65:12:87:2A:82:F7:1D:76:E8:C1:5F:7D:B8:AE:74
X509v3 Authority Key Identifier:
keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/1FB32634CFB611F0A31DAAA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.132.0.0/14
Signature Algorithm: sha256WithRSAEncryption
3b:6f:23:cd:1b:28:d2:ad:b2:33:e5:4d:a1:23:44:1b:31:5a:
8e:1b:f1:4a:8f:aa:32:74:0e:6b:24:95:0e:22:8a:d3:f5:f2:
70:4c:f9:b3:51:37:85:67:66:18:c2:67:a1:91:96:ae:9e:60:
62:75:82:d1:b2:a4:db:74:26:ab:5d:d1:11:d1:a1:b4:5c:23:
6b:9e:19:87:dd:a4:e4:d4:f4:4e:32:3e:d8:42:bc:17:b2:6f:
99:45:3b:14:fd:1c:d3:d4:f9:09:da:1f:27:31:db:8e:0a:54:
e0:f2:82:fb:88:38:be:f8:f6:55:29:28:aa:db:6c:c6:dd:fa:
71:77:6f:d5:26:b9:e3:11:e3:c7:66:75:76:6b:89:67:2a:85:
f5:3d:2f:27:19:3b:0f:32:ef:5f:05:f0:4e:dc:54:ae:2e:ae:
5e:cb:51:31:e6:06:d7:60:3c:fb:71:d9:89:15:a5:d3:05:1a:
6f:f1:0e:53:ce:50:5b:db:39:31:5a:8f:40:b4:8d:1b:b1:48:
98:57:3e:80:43:f3:44:ff:c1:db:35:cf:b8:99:d2:86:82:7c:
dd:e4:3a:12:1b:a6:c9:0a:df:f1:ee:fe:19:0a:bb:ed:5c:bb:
23:65:87:10:3e:20:88:57:3e:0c:0c:98:65:78:f2:95:f2:be:
44:1a:3f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:46 2025 by rpki-client