This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/678DD4CECFE111F0BD278CAEDAE4EC9C.roa
File: 678DD4CECFE111F0BD278CAEDAE4EC9C.roa (raw, json)
Hash identifier: +RuqPven+NHEM2Si5h21IV25PaXZhNuO+WJIWyUztcI=
Subject key identifier: CE:4C:F7:95:06:29:FC:BB:FD:8F:D3:E7:34:6E:15:49:DA:EF:CF:37
Certificate issuer: /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial: 39
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/678DD4CECFE111F0BD278CAEDAE4EC9C.roa
Signing time: Wed 03 Dec 2025 00:45:46 +0000
ROA not before: Wed 03 Dec 2025 00:00:41 +0000
ROA not after: Mon 31 Dec 2035 00:00:41 +0000
asID: 24835
IP address blocks: 105.199.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57 (0x39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Validity
Not Before: Dec 3 00:00:41 2025 GMT
Not After : Dec 31 00:00:41 2035 GMT
Subject: CN=692f883a-8eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:95:57:af:6f:04:63:0d:5a:ef:55:a3:c1:
ba:c7:af:22:c5:b9:e2:b0:a0:9f:4d:4f:ef:b8:9f:
05:16:5a:4d:23:24:93:2c:34:a9:66:32:c0:9d:42:
66:ab:9f:73:79:6b:d1:9d:f8:20:9e:a6:6c:7b:d9:
de:01:0c:b2:87:4c:5c:86:c8:17:5c:55:a9:27:04:
97:75:07:e4:45:25:c3:e0:cf:26:3e:c0:3a:d1:82:
11:01:95:d4:7b:e7:11:8e:d5:50:e0:19:32:99:a6:
f7:75:d8:32:0b:17:d7:76:96:1b:af:94:5d:e7:35:
fd:0f:ac:ed:a7:56:a3:9f:b9:38:61:be:c1:21:86:
46:84:9d:14:c7:94:50:cb:bf:ac:8f:c6:9b:34:83:
57:15:f3:78:28:03:1b:42:fb:7f:aa:4f:cf:2c:43:
58:40:d6:ab:bf:3d:86:eb:10:15:ca:ba:02:5e:aa:
07:0e:0f:3e:97:cc:87:e2:cc:54:82:98:cd:b0:ed:
b7:93:cf:bd:6a:16:c9:6d:f7:7f:69:18:87:08:cd:
78:ac:7e:a8:82:ba:5d:95:71:79:0e:41:fe:bf:7a:
72:fc:af:f4:b6:d7:6d:54:14:b3:07:b0:72:5b:30:
9d:99:21:7d:6f:cd:dd:25:7b:74:ab:3b:36:46:fd:
03:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4C:F7:95:06:29:FC:BB:FD:8F:D3:E7:34:6E:15:49:DA:EF:CF:37
X509v3 Authority Key Identifier:
keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/678DD4CECFE111F0BD278CAEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
105.199.245.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:c7:68:4e:50:85:ae:c4:11:37:95:28:3c:a6:58:7e:c1:bb:
fb:4b:a0:74:9d:80:5a:17:d9:77:2d:d9:1a:14:08:db:4b:e2:
e5:2e:d8:9f:6e:5f:2a:1a:98:09:71:a5:bb:91:86:eb:82:01:
80:e1:14:fa:d8:ff:56:e2:52:a3:c8:fd:1c:99:0a:32:61:80:
3a:8b:8a:19:b6:16:36:53:fd:f0:2e:55:4d:05:88:86:12:ba:
bd:bc:0c:a6:4d:d1:13:02:da:71:77:0a:24:64:ec:50:0c:cf:
0c:b5:bb:b2:41:4b:2c:66:68:f3:2a:c3:0e:8b:2d:d8:c2:98:
f1:0c:fe:da:d9:90:85:3f:7f:19:09:03:93:95:f9:e2:64:5b:
b2:36:0f:cc:47:eb:6d:0f:69:91:81:78:a7:e8:dd:46:b8:32:
6b:1c:0f:9e:79:1a:87:49:1e:0e:14:e1:c0:0b:75:03:9d:8c:
e1:2e:67:25:08:55:21:fe:a0:23:0a:7a:8b:6c:53:e1:c2:02:
cc:1c:4e:68:fb:25:e5:a0:7d:a5:9e:a3:fb:47:99:93:b1:d2:
7b:86:74:de:94:40:85:b1:e2:c4:14:d3:9b:3c:92:15:83:a7:
ef:d1:35:3f:96:a8:a0:22:ff:e8:39:b1:a0:ee:76:e9:32:1d:
63:42:d9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:47 2025 by rpki-client