This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4B4A8E74E64311F099A1D2E3DAE4EC9C.roa
File: 4B4A8E74E64311F099A1D2E3DAE4EC9C.roa (raw, json)
Hash identifier: uqUiBa58m/oC+y5I8h0R2p0L6qWhQAxyUOIwGnr8g7E=
Subject key identifier: 2E:52:76:19:7E:49:85:FE:83:C2:1C:4B:10:DC:43:B5:B5:83:F7:B9
Certificate issuer: /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial: 8D
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4B4A8E74E64311F099A1D2E3DAE4EC9C.roa
Signing time: Wed 31 Dec 2025 12:21:55 +0000
ROA not before: Wed 31 Dec 2025 12:21:50 +0000
ROA not after: Mon 31 Dec 2035 12:21:50 +0000
asID: 24835
IP address blocks: 197.132.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Validity
Not Before: Dec 31 12:21:50 2025 GMT
Not After : Dec 31 12:21:50 2035 GMT
Subject: CN=69551563-d5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:f2:31:97:15:3e:29:b3:bf:05:98:ef:05:
09:37:00:f1:0f:3e:d9:da:bb:97:07:78:51:e9:be:
90:67:ba:66:7f:29:34:ad:5d:c1:6f:d3:6e:74:0d:
a0:f5:57:40:c0:a2:bc:7b:21:a1:95:f7:5e:45:04:
c2:3b:a6:68:4e:71:c3:1e:cb:3e:39:89:da:2e:cb:
aa:e1:b4:0b:3f:6f:1a:4e:ca:a9:2c:99:35:b3:da:
23:5b:3e:68:6b:73:e3:52:d6:f3:d1:8f:6c:79:c7:
65:ba:1a:cd:68:83:b2:e3:59:1b:91:86:f1:be:8b:
54:2c:57:68:3b:56:42:cc:fc:8b:30:d3:a3:d9:cb:
a0:74:f0:70:f6:7e:b1:2d:1f:85:3e:7b:a5:e0:6c:
0e:e8:df:4d:af:e8:e6:d3:79:38:6b:d2:8f:a2:53:
03:ae:a6:19:fc:f7:e0:98:4d:39:3f:10:6a:cd:c4:
27:4b:a0:2e:75:c4:f3:a4:6d:6b:5a:3f:95:e2:53:
b1:80:62:f0:3c:e5:df:cf:b5:9a:cb:2a:ba:a0:cb:
42:b7:15:be:42:d9:12:e3:c6:38:c6:3e:ba:9f:55:
c9:86:66:52:a6:93:d2:d8:04:01:75:a0:a4:c8:75:
ae:18:de:31:8b:4b:a0:e5:e4:c2:33:38:19:2c:29:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:52:76:19:7E:49:85:FE:83:C2:1C:4B:10:DC:43:B5:B5:83:F7:B9
X509v3 Authority Key Identifier:
keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4B4A8E74E64311F099A1D2E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
197.132.0.0/14
Signature Algorithm: sha256WithRSAEncryption
0f:f0:4a:8b:e8:28:8e:00:1b:ea:3c:02:1a:47:07:11:09:85:
45:02:58:2a:c4:3b:17:52:9a:63:e5:cc:2d:7a:95:7c:b5:c1:
7e:d4:b9:65:9d:65:a5:8a:ca:b1:77:55:49:70:c1:5e:28:1f:
3c:9f:a3:4d:83:e4:77:50:56:4b:89:25:fc:b3:e3:b5:23:15:
af:e2:37:2f:c3:24:a6:6b:31:77:1d:79:36:0d:c0:07:b5:43:
b7:46:82:0c:70:7b:1d:d2:84:c2:4a:c1:00:ce:4b:b9:97:6f:
19:6c:ff:24:08:2a:9d:76:fd:a2:6d:45:de:45:e0:3f:fd:87:
b2:b3:a0:14:c0:35:18:ab:e8:3f:dd:b5:eb:34:f2:ee:d0:c1:
75:53:36:38:bc:38:f2:01:c6:13:de:31:fd:a2:d6:ec:f4:23:
29:7e:b1:cb:4b:db:e1:2c:fa:5d:eb:17:23:40:9c:7a:7e:c3:
2e:1a:32:b6:ae:dc:34:13:d1:57:01:ff:5f:a9:89:01:ca:9a:
db:b8:78:c8:6e:d1:24:02:bf:6b:33:d8:f1:7f:cc:85:2b:2f:
34:46:05:e5:05:40:52:cd:67:30:00:d8:68:97:d8:7c:d6:42:
c9:e8:24:91:1c:f7:57:ad:af:86:5a:e5:04:69:57:a6:cb:fd:
55:a9:78:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:04:33 2026 by rpki-client