This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/2D0BAEFEE02E11F0BA05BDEBDAE4EC9C.roa
File: 2D0BAEFEE02E11F0BA05BDEBDAE4EC9C.roa (raw, json)
Hash identifier: czaOHjgQKar8k0qgvhJTFcM5RM/An5KUAmLnaz+XPoM=
Subject key identifier: F8:15:C2:37:03:12:5D:96:E4:82:9E:63:C1:47:4A:AB:B0:E1:43:A4
Certificate issuer: /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial: 5C
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/2D0BAEFEE02E11F0BA05BDEBDAE4EC9C.roa
Signing time: Tue 23 Dec 2025 18:35:38 +0000
ROA not before: Tue 23 Dec 2025 18:35:33 +0000
ROA not after: Mon 31 Dec 2035 18:35:33 +0000
asID: 24835
IP address blocks: 105.198.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Validity
Not Before: Dec 23 18:35:33 2025 GMT
Not After : Dec 31 18:35:33 2035 GMT
Subject: CN=694ae0fa-4e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:a6:96:5e:ac:ba:f3:98:f4:e3:79:d3:99:
1c:01:6d:94:53:6b:be:1d:76:55:94:47:a0:4d:a2:
af:13:b7:e4:f0:90:f8:08:b6:e4:fd:0d:95:ad:94:
ee:db:99:c7:22:4c:ed:3e:3f:44:9e:1e:57:46:29:
81:ab:3d:dd:8f:86:6e:bf:1c:51:43:2e:78:50:f9:
31:e7:4b:37:82:fb:e9:71:9a:0b:59:a3:b2:8b:ee:
27:ac:93:57:64:cc:c7:17:7b:d9:41:df:7c:9f:8f:
1d:14:7a:2d:de:87:b6:8c:3a:1d:1c:69:f6:ed:20:
ce:4f:f3:02:de:53:ac:4d:c0:ef:2e:99:9f:9c:b7:
47:12:bc:95:86:1c:f3:09:76:50:60:c8:59:76:c5:
4b:88:73:14:cc:df:70:6a:b5:5f:7d:96:f6:7b:76:
5f:ca:74:f7:4a:25:63:a4:30:ca:69:f5:8f:40:52:
28:5c:d2:59:39:92:d4:13:c5:86:cd:3b:4b:37:09:
b9:6b:38:79:b4:1b:f2:7e:64:3b:39:c6:a4:8a:eb:
ab:84:e7:14:71:21:d8:1d:cb:94:45:50:91:87:b5:
b8:d3:62:fd:b6:e8:c1:14:1a:97:e1:c1:e5:cd:3c:
5e:b7:f6:aa:f6:99:6f:75:2b:36:9e:f6:7f:5b:43:
ca:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:15:C2:37:03:12:5D:96:E4:82:9E:63:C1:47:4A:AB:B0:E1:43:A4
X509v3 Authority Key Identifier:
keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/2D0BAEFEE02E11F0BA05BDEBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.198.0.0/15
Signature Algorithm: sha256WithRSAEncryption
a8:16:57:df:71:8e:9a:9b:65:ae:2f:17:e8:7a:9b:24:d5:00:
2a:f1:77:77:92:c3:3d:cc:b6:aa:b2:fc:d8:e4:32:ba:c6:5a:
f3:e0:26:d3:09:4a:eb:30:55:7c:94:97:d3:32:1d:e6:46:ff:
8a:a3:41:27:31:b4:da:4d:ea:98:cf:14:64:8c:d9:16:e1:53:
13:a8:76:89:58:a7:84:96:23:bc:2f:9a:87:67:4a:e9:f7:c9:
65:35:73:25:bb:76:50:58:cb:9a:68:2b:8b:48:ae:4f:ef:0f:
b3:0e:e1:e4:b0:5d:c8:a8:b1:e5:5e:5e:d1:72:69:05:52:56:
8f:c3:04:7f:f8:e1:61:16:b6:26:91:3a:fb:ee:18:d1:33:16:
cc:84:f4:bb:88:cf:1d:58:9a:e7:e1:58:9b:25:e1:c0:f2:a9:
4e:f1:45:be:5e:49:c6:ad:19:f8:52:40:fc:fd:c1:b3:d4:65:
e8:15:9c:ce:22:bb:97:48:17:8b:6a:2d:47:dd:71:29:0f:ee:
90:ae:64:d1:38:f0:8e:29:5f:dd:11:89:24:5d:95:c8:02:fe:
ed:9b:18:8a:08:7d:45:69:61:df:93:58:26:61:25:04:7d:26:
2e:60:fd:1c:cd:c5:22:a1:34:6d:c4:53:a2:64:eb:b0:f4:13:
ad:10:a7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:31:18 2026 by rpki-client