This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/2A7F58C0E64111F084C774D7DAE4EC9C.roa
File: 2A7F58C0E64111F084C774D7DAE4EC9C.roa (raw, json)
Hash identifier: CRFSAdvu7nT9K3BwjIvIKrNt1IE5IvnknvLaaNH+GVc=
Subject key identifier: F6:E9:70:5A:DF:B5:78:4C:E0:46:64:AF:A4:CF:32:4B:41:62:03:10
Certificate issuer: /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial: 83
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/2A7F58C0E64111F084C774D7DAE4EC9C.roa
Signing time: Wed 31 Dec 2025 12:06:41 +0000
ROA not before: Wed 31 Dec 2025 12:06:36 +0000
ROA not after: Mon 31 Dec 2035 12:06:36 +0000
asID: 36935
IP address blocks: 41.68.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Validity
Not Before: Dec 31 12:06:36 2025 GMT
Not After : Dec 31 12:06:36 2035 GMT
Subject: CN=695511d1-e0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:d3:1c:27:c5:fb:7a:a6:e0:bd:b1:a0:b2:
70:e4:6e:4b:8d:ec:95:04:5b:40:26:d7:50:0f:92:
6b:a4:e1:8e:fb:f7:e4:12:9a:4b:35:63:1a:98:68:
68:72:da:ab:5f:25:f8:9b:4b:9b:d6:34:41:b8:77:
6c:9a:b3:50:a8:6a:d7:48:7f:0f:47:5b:d3:56:82:
cd:5f:6f:5d:b4:93:32:61:f1:c3:31:8d:34:72:1c:
7c:e1:7f:0e:78:fd:fc:7c:ab:fd:3a:5a:b3:dd:2b:
19:5d:36:dd:b2:67:6d:9c:6b:01:6b:39:1e:6a:44:
ab:b1:8d:88:6f:81:56:6f:d8:f9:45:67:8a:9d:a3:
e5:3a:10:4f:87:e6:30:30:ff:bd:14:d8:85:8a:8e:
d7:d7:50:59:41:42:ee:52:97:39:a6:5a:9c:4d:1d:
34:89:2d:68:b9:79:51:33:f9:e9:c8:86:10:68:43:
4f:31:e4:93:a9:cd:1a:32:64:84:01:06:0c:c7:f7:
db:f7:2e:f2:9a:61:49:84:01:3d:b5:0b:c5:4f:ef:
e2:ef:48:28:bd:3b:7b:9e:c5:9a:f4:1d:a8:17:3e:
a8:1f:90:a9:4b:7b:35:95:b0:32:fd:ef:d4:fc:fb:
90:8b:f6:2b:ab:25:37:10:da:0f:e3:e6:75:cd:dd:
b0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E9:70:5A:DF:B5:78:4C:E0:46:64:AF:A4:CF:32:4B:41:62:03:10
X509v3 Authority Key Identifier:
keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/2A7F58C0E64111F084C774D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.68.0.0/15
Signature Algorithm: sha256WithRSAEncryption
8a:e7:78:96:f9:f7:ad:ac:1b:0c:a4:2c:69:c6:94:40:d1:0d:
ab:ae:51:ed:a0:52:d8:64:0b:70:40:cd:c7:9d:82:80:c9:2e:
fb:a8:2d:c6:db:f2:4a:27:7c:23:bf:9a:e6:44:d7:33:c5:f4:
ad:24:c5:b1:34:24:89:27:ac:03:ab:a5:66:8f:aa:89:6f:98:
9e:6e:a3:54:88:b5:53:53:d2:0e:08:03:69:60:83:0d:14:78:
7d:67:91:24:0e:c1:6f:2f:8d:16:48:db:17:ea:d7:a6:29:2d:
dc:21:5f:2d:34:85:43:45:2e:5a:6c:af:82:d4:14:7e:29:d3:
29:f9:e7:b6:2d:60:f1:2a:b9:12:c5:67:cd:70:bc:61:29:4d:
64:05:c5:c8:8e:09:6f:5c:b2:2c:4e:13:2f:46:dc:4c:6e:da:
4a:16:2c:8e:99:64:4a:17:22:8a:30:d1:af:b8:35:fb:bf:df:
a7:da:98:a2:40:dd:b2:09:3a:c3:77:ea:fd:26:9a:08:a8:3f:
c3:45:8f:3b:22:90:e8:8e:85:23:99:a7:47:47:04:b7:df:e8:
83:aa:54:00:74:2e:bc:1c:5a:ae:70:e1:96:fd:10:56:19:29:
fe:c4:15:82:9e:4b:1f:12:9b:a3:f1:dd:a8:45:eb:39:62:c3:
ea:75:81:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:29:58 2026 by rpki-client