This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/DFC57B3EE64511F0880A3BF4DAE4EC9C.roa
File: DFC57B3EE64511F0880A3BF4DAE4EC9C.roa (raw, json)
Hash identifier: QUcAXH6eBDcHLO7OTf8jf8YtX4XaBoqh4tCsAIXOlfA=
Subject key identifier: 89:8C:F7:7F:DF:4E:51:97:9F:E0:DE:E5:F1:CE:ED:4D:49:75:C2:C9
Certificate issuer: /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial: 9F
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/DFC57B3EE64511F0880A3BF4DAE4EC9C.roa
Signing time: Wed 31 Dec 2025 12:40:23 +0000
ROA not before: Wed 31 Dec 2025 12:40:19 +0000
ROA not after: Mon 31 Dec 2035 12:40:19 +0000
asID: 24835
IP address blocks: 102.217.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159 (0x9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Validity
Not Before: Dec 31 12:40:19 2025 GMT
Not After : Dec 31 12:40:19 2035 GMT
Subject: CN=695519b7-a494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:37:16:b3:81:ab:6a:59:50:c1:cf:71:c4:
2f:0a:f9:2e:e6:a7:b0:f1:66:f7:3d:85:89:e0:f7:
c1:60:2e:03:62:af:cc:62:2f:dd:26:32:d5:8f:05:
f1:8c:47:b9:d5:63:b2:b2:57:f9:cf:63:eb:2c:78:
36:e0:7f:3a:5e:ac:28:cd:f6:7d:9e:50:1f:75:e3:
dc:5d:a6:b6:58:a5:d1:6d:f0:ec:dc:50:11:85:4d:
18:74:44:e2:40:9c:bd:87:2b:44:aa:f6:bd:b8:05:
40:4e:eb:5d:ac:e4:ca:04:59:5e:32:43:dd:0e:2d:
6a:d9:40:fb:82:77:f5:42:cf:d5:5e:80:2d:f2:35:
fe:f7:fc:79:4d:d0:58:d8:e6:7a:78:4b:52:95:ef:
c5:e8:74:f9:b5:ca:4c:d0:da:c4:c2:4d:4a:b5:6f:
18:07:56:f8:a5:6b:c9:59:10:08:03:d1:5f:49:16:
97:8c:d5:bb:68:10:b3:c2:63:85:09:23:13:80:37:
d2:2a:1a:ef:03:76:30:db:ec:a5:46:ac:83:b2:f9:
ad:69:0c:4b:0f:dd:0d:72:d1:a1:85:8f:c3:8c:b6:
2d:a5:4f:71:bb:05:ae:67:0b:27:c1:71:04:ef:6d:
9f:f0:96:91:74:c9:ad:a6:d1:7a:ef:96:9e:53:43:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8C:F7:7F:DF:4E:51:97:9F:E0:DE:E5:F1:CE:ED:4D:49:75:C2:C9
X509v3 Authority Key Identifier:
keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/DFC57B3EE64511F0880A3BF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.217.112.0/22
Signature Algorithm: sha256WithRSAEncryption
13:20:68:5b:28:e0:84:ec:54:f0:74:8e:e2:d6:d6:28:05:77:
99:ec:59:b5:3f:54:b6:91:88:30:73:a9:cc:8c:7a:f9:47:f6:
3a:4f:6d:52:cf:bb:45:ff:57:4f:d7:e7:10:dd:6a:f6:91:ef:
dd:e4:8b:fd:de:f4:5b:90:1b:de:34:db:7c:53:53:e4:a8:d3:
7f:9b:36:6d:df:58:47:7d:43:32:8e:d6:b9:b9:f9:9b:ab:ee:
a6:58:fd:29:47:35:d8:49:3a:34:20:e1:8f:3c:d3:55:fa:f9:
85:38:5f:39:9a:5b:66:0a:09:10:44:70:0f:03:ee:95:e1:21:
ff:d7:d9:05:ec:e1:d4:cf:4b:65:63:4b:60:96:38:e6:8c:37:
71:9a:22:0a:0d:8e:f9:c6:df:3b:24:54:14:8d:43:f2:79:0c:
c2:14:23:f0:5f:bd:7d:a1:f8:3f:79:7b:ea:7e:1c:11:0f:ed:
44:74:d3:7a:af:50:1d:c8:c2:ac:e8:17:2b:90:3b:18:f6:ba:
dd:fb:f1:af:f7:e0:22:69:24:27:ba:b2:01:c1:c3:85:7b:84:
72:27:6a:8b:f1:2e:5e:90:81:94:32:5e:5c:ef:69:7f:bb:0a:
5c:a6:2f:00:82:e8:4b:1b:7f:04:eb:8f:f5:11:da:4d:5b:ab:
70:70:63:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:30:16 2026 by rpki-client