This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/21633E18E64711F09267137EDAE4EC9C.roa
File: 21633E18E64711F09267137EDAE4EC9C.roa (raw, json)
Hash identifier: eLEh0SyY43hybPcZSU5IedR+zAs7IskDltcK3L464X4=
Subject key identifier: ED:0F:16:C8:CC:CC:05:B9:36:74:07:7C:DA:E1:EF:0F:7E:6C:6B:1A
Certificate issuer: /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial: A9
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/21633E18E64711F09267137EDAE4EC9C.roa
Signing time: Wed 31 Dec 2025 12:49:23 +0000
ROA not before: Wed 31 Dec 2025 12:49:18 +0000
ROA not after: Mon 31 Dec 2035 12:49:18 +0000
asID: 36935
IP address blocks: 196.204.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 169 (0xa9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Validity
Not Before: Dec 31 12:49:18 2025 GMT
Not After : Dec 31 12:49:18 2035 GMT
Subject: CN=69551bd3-9432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:b9:ed:8f:e6:ea:d8:f9:72:06:ad:31:7c:42:
73:2e:60:ec:3e:fa:02:5c:7d:df:09:7a:d2:68:03:
f6:eb:4d:bb:dc:84:71:24:13:5c:df:e1:74:85:f5:
f9:64:4a:5c:42:c2:e5:5d:9c:2c:aa:14:7a:61:79:
29:f5:52:d3:f9:6e:27:90:09:f6:85:30:60:ab:6b:
ce:33:1e:e4:93:50:9b:99:f5:76:d3:69:60:e4:db:
b4:fd:a1:b8:2b:59:c1:7d:0b:cf:b7:18:27:9a:1a:
cd:28:4b:dc:26:52:0f:bf:d3:0d:0d:8a:75:69:e5:
03:32:1b:82:e2:79:59:23:71:30:32:0a:99:05:87:
a8:55:a7:b1:59:c1:06:2c:45:aa:97:98:45:2d:9c:
29:00:f6:c4:09:21:28:34:1a:d2:99:d6:03:bd:e1:
52:28:2f:c7:97:66:39:1c:0e:c8:94:98:df:c7:34:
87:41:e7:cb:df:fa:2b:64:69:33:41:76:95:58:77:
cf:2c:13:f3:a9:cf:87:e1:10:19:72:fb:5f:46:27:
cf:a7:12:e9:0a:17:89:92:b7:38:49:6d:81:d0:1a:
d0:ed:3e:65:e1:53:57:84:70:fc:54:27:36:c3:b9:
42:91:d1:fe:0b:77:66:33:d1:ee:c2:59:66:19:d0:
16:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0F:16:C8:CC:CC:05:B9:36:74:07:7C:DA:E1:EF:0F:7E:6C:6B:1A
X509v3 Authority Key Identifier:
keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/21633E18E64711F09267137EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.204.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:2a:93:2a:05:ae:cd:98:d0:61:74:a7:98:0e:4f:a6:b4:1c:
8f:8d:83:68:a2:71:f1:f2:a9:e9:ce:aa:0c:d1:15:c5:fb:06:
b0:8a:ee:1a:d2:37:28:47:94:48:b8:7a:60:cd:e2:4a:eb:14:
51:65:8a:5e:49:3a:43:34:d0:1f:24:61:99:4f:67:47:54:3d:
2c:48:f1:44:0a:9a:b6:87:7e:b2:53:1f:a4:bc:46:8a:92:8d:
b8:1a:d8:93:2b:f2:2c:d2:3a:e0:27:39:b0:f6:d0:6c:d9:ab:
96:e8:2c:46:9d:9a:68:73:01:ea:e2:3c:a8:1e:c4:14:67:a0:
1d:e6:47:3c:63:9d:1c:33:74:c7:12:cd:a9:87:92:76:b9:e3:
aa:44:88:f2:3a:2d:ec:8a:19:95:ca:ec:7f:0f:18:c3:61:c7:
ef:13:1c:26:ea:f9:db:cc:2d:55:71:c0:e9:0f:9b:d7:6a:ca:
9e:ab:ec:67:56:e9:f0:54:28:a1:15:20:77:20:d5:62:55:72:
0f:d7:04:09:f5:b7:fc:aa:c7:b4:96:ac:dd:6e:12:48:c4:dc:
be:6b:88:4f:62:57:7e:23:46:c7:7c:31:dd:d7:c4:6c:98:17:
6b:f4:81:9f:ce:5b:ee:3c:1e:40:44:ee:c6:1c:21:fe:ae:4e:
05:6d:e8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:01:59 2026 by rpki-client