This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/C43CA8C6CFB411F0A80C339CDAE4EC9C.roa
File: C43CA8C6CFB411F0A80C339CDAE4EC9C.roa (raw, json)
Hash identifier: YU0Mz0+xBwbICuOKhPlbTNIIJa5T3xaQhk9igOv4NOo=
Subject key identifier: 82:E4:E1:F2:65:5D:C0:D6:04:52:3F:0E:4F:8D:2E:02:86:EC:3D:69
Certificate issuer: /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial: 23
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/C43CA8C6CFB411F0A80C339CDAE4EC9C.roa
Signing time: Tue 02 Dec 2025 19:26:14 +0000
ROA not before: Tue 02 Dec 2025 19:26:10 +0000
ROA not after: Mon 31 Dec 2035 19:26:10 +0000
asID: 36935
IP address blocks: 41.223.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 10 Dec 2025 00:06:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Validity
Not Before: Dec 2 19:26:10 2025 GMT
Not After : Dec 31 19:26:10 2035 GMT
Subject: CN=692f3d56-22c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d1:e1:b3:00:8d:fa:1b:85:4b:a3:7d:20:94:
e8:54:3d:85:3a:8a:e9:6a:8c:f3:17:56:d8:a7:07:
e9:e3:f8:f4:f6:74:bd:9d:5f:54:8d:7d:73:d8:ae:
de:9c:7f:49:45:14:8d:0a:61:8d:30:6d:ee:03:09:
40:0b:a5:63:61:54:3f:4d:8d:b4:ef:ff:65:46:cb:
4a:e7:7c:1a:2c:6e:e0:07:21:12:a0:cd:ae:7f:3b:
4a:03:44:78:bb:25:ff:c9:d2:63:9a:6a:01:04:8e:
86:bb:00:6e:36:a1:9c:7d:f7:84:7d:f8:e5:e8:3b:
a8:bc:01:1f:c0:df:46:c3:99:c4:16:24:61:45:f1:
e0:ab:42:99:ef:b8:cc:1b:69:bd:16:bd:cf:dd:4e:
76:ca:17:97:3d:49:5b:e8:22:38:2b:2e:95:05:67:
0f:ec:39:f1:7b:88:ce:c5:3f:e0:5a:08:1c:7c:4e:
96:ad:54:62:d5:2c:76:3a:e3:15:45:52:c2:8f:7b:
b5:bc:90:89:c2:7a:cf:6b:62:ba:9d:39:0a:0e:ea:
df:ea:de:f3:a6:af:b2:16:ae:ef:2e:3a:df:d8:2d:
3d:19:16:e6:85:7d:64:af:aa:90:9c:29:ad:8f:c0:
f2:61:0b:0e:17:d8:3d:c2:94:17:5b:3a:44:f6:c4:
2d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E4:E1:F2:65:5D:C0:D6:04:52:3F:0E:4F:8D:2E:02:86:EC:3D:69
X509v3 Authority Key Identifier:
keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/C43CA8C6CFB411F0A80C339CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.223.20.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:7b:cf:5b:e2:8b:7b:fa:be:d4:9e:54:07:71:dc:2d:94:2e:
23:04:ae:f3:c2:b4:03:60:6a:ec:03:37:5a:73:3d:1d:07:81:
db:67:ff:60:a7:03:03:b5:7c:b6:9a:2d:33:ab:05:56:48:01:
bc:c9:76:01:43:ef:ec:4b:37:64:29:93:df:1b:86:3a:c7:52:
f7:67:58:0e:4c:ad:e7:f7:d2:c0:c5:0c:a3:b3:b9:e0:73:26:
90:fc:ec:bf:6a:ba:ba:35:df:7b:ea:50:78:e4:ce:49:a1:be:
e9:38:d6:31:de:e8:14:50:4c:b3:1f:51:53:22:1e:48:54:e4:
f7:1d:8a:cb:fb:1f:aa:de:75:e4:61:36:92:a9:fb:78:25:73:
b8:89:f1:16:4b:cb:e5:6b:2d:ef:93:d9:5c:04:3a:ac:f2:ac:
d4:d9:ca:4f:90:dd:1d:e9:cf:87:34:6c:b1:cd:36:99:67:bc:
58:92:91:68:50:a2:4f:83:e4:d2:59:c2:ba:6a:37:9e:4f:cc:
63:be:83:ba:c1:28:af:2a:5f:4d:c1:0a:2f:ec:98:cd:4b:01:
03:3c:06:13:23:58:e2:27:f2:82:c5:6e:a4:87:83:66:0c:ab:
2b:07:d7:81:4b:e2:fe:19:d3:40:d0:ac:2e:4c:dd:94:7d:a5:
fb:08:14:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 8 18:04:46 2025 by rpki-client