This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/348ADDB6DD0A11F0BC9CCCBBDAE4EC9C.roa
File: 348ADDB6DD0A11F0BC9CCCBBDAE4EC9C.roa (raw, json)
Hash identifier: N22acFSQsXyjxhKorUA5XDVJ5jLIt1Un/EsFZoIoznw=
Subject key identifier: 7D:8E:AE:10:44:67:79:0B:BC:BE:1B:B5:94:0B:10:88:E8:FA:9D:0B
Certificate issuer: /CN=F3674376AF/serialNumber=5A8F1BB960808858FC424A9FC9C06D4812DBA5C9
Certificate serial: 65
Authority key identifier: 5A:8F:1B:B9:60:80:88:58:FC:42:4A:9F:C9:C0:6D:48:12:DB:A5:C9
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/348ADDB6DD0A11F0BC9CCCBBDAE4EC9C.roa
Signing time: Fri 19 Dec 2025 18:40:35 +0000
ROA not before: Fri 19 Dec 2025 18:40:31 +0000
ROA not after: Wed 19 Dec 2035 18:40:31 +0000
asID: 329631
IP address blocks: 2c0f:78c0::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.crl
rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.mft
rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 27 Jan 2026 00:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101 (0x65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3674376AF, serialNumber=5A8F1BB960808858FC424A9FC9C06D4812DBA5C9
Validity
Not Before: Dec 19 18:40:31 2025 GMT
Not After : Dec 19 18:40:31 2035 GMT
Subject: CN=69459c23-ac8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:c2:6c:03:39:01:7b:51:8e:8e:b6:cd:b3:
16:95:36:4d:8a:be:12:51:49:92:7e:7a:ae:ea:4c:
09:53:e3:d0:04:4d:1d:98:85:c6:a2:75:a7:1c:2c:
f1:e1:9f:a0:14:81:ee:86:97:a5:10:db:72:e4:ab:
c7:a1:c7:97:31:d8:a9:90:76:77:9c:55:ab:d4:8d:
b3:22:0c:70:5f:b3:26:f2:c0:81:46:be:8c:ce:0b:
f2:f2:7a:ad:9d:f5:a4:ee:1e:21:8c:f4:f3:5f:ee:
be:94:c3:7f:c4:3d:01:e3:00:99:c5:e8:43:4d:08:
9e:2a:1b:5e:0a:56:00:40:73:de:63:93:a0:2d:95:
ad:b6:22:4b:b1:03:b0:a7:53:79:e1:d6:3b:3f:06:
24:9d:c2:28:2d:5d:5f:7d:f5:9a:b9:67:f3:ae:83:
c1:27:d0:fd:ce:97:de:2e:1d:61:b9:ea:1f:69:66:
93:ed:22:a5:94:11:5b:de:50:c0:01:63:92:a8:4f:
b2:1c:e8:fa:a2:86:03:ea:93:ec:e8:de:10:32:1f:
6d:d5:95:b5:b4:84:a3:97:ed:67:60:59:69:b6:c8:
4e:c1:0f:27:53:43:45:33:5e:30:70:77:93:19:c9:
8d:21:07:cd:c2:c2:89:10:03:87:5d:ec:b6:ba:8a:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:8E:AE:10:44:67:79:0B:BC:BE:1B:B5:94:0B:10:88:E8:FA:9D:0B
X509v3 Authority Key Identifier:
keyid:5A:8F:1B:B9:60:80:88:58:FC:42:4A:9F:C9:C0:6D:48:12:DB:A5:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/Wo8buWCAiFj8QkqfycBtSBLbpck.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wo8buWCAiFj8QkqfycBtSBLbpck.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674376/1340A870A5A611F0B96EAFD7DAE4EC9C/348ADDB6DD0A11F0BC9CCCBBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2c0f:78c0::/33
Signature Algorithm: sha256WithRSAEncryption
8a:ed:c5:6c:af:50:e2:c0:eb:0e:74:82:b9:a0:fd:61:7d:51:
72:d6:53:c6:ed:b2:35:10:b9:3f:e4:fc:0f:6c:f0:ef:ba:08:
3f:77:97:85:f8:b0:8b:87:7b:9f:1d:60:4e:21:7e:46:90:f5:
b7:34:31:8c:cc:98:96:91:12:cf:06:9f:f9:de:08:24:15:3f:
44:fc:e3:cf:5a:52:77:50:ea:2a:54:97:a7:3d:a2:ac:29:17:
ac:a5:97:b6:f5:2f:7e:fc:54:09:ae:aa:1e:21:18:a8:44:0d:
a2:bf:93:ff:6f:3c:11:6c:40:bd:29:54:e6:c4:2c:7b:57:8e:
96:6c:f9:4a:a2:4a:d6:f1:1c:f8:0b:63:dc:d4:1f:c9:92:73:
5a:cd:64:f6:5a:e4:10:3b:ae:4e:53:d0:8d:8d:23:4a:54:7d:
16:1d:17:3f:52:01:59:3b:bd:3d:13:52:74:87:ad:71:60:76:
13:25:bc:01:88:a0:47:d0:88:01:73:1c:68:de:3c:8f:a6:41:
e1:b9:08:83:cf:8e:b0:62:e7:2f:cc:33:31:15:71:9c:f8:7d:
b6:17:01:ff:a1:c5:49:b3:5f:de:9c:93:f6:2f:bd:1e:e2:47:
0d:1b:46:26:1d:8f:fa:65:9b:1a:21:e3:15:91:6d:bf:23:48:
ab:dd:4e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:03:56 2026 by rpki-client