Certificate
$ rpki-client -vvf rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
File: ripe-to-afrinic.cer (raw, json)
Hash identifier: qOOK6v0nyMVV1lv+XGJWWWNM1su1zDx80MOlipErK7Y=
Subject key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Certificate issuer: /CN=AfriNIC-Root-Certificate
Certificate serial: 63
Authority info access: rsync://rpki.afrinic.net/repository/AfriNIC.cer
Manifest: rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
caRepository: rsync://rpki.afrinic.net/repository/ripe/
Notify URL: https://rrdp.afrinic.net/notification.xml
Certificate not before: Tue 21 Apr 2026 06:25:26 +0000
Certificate not after: Mon 21 Apr 2031 00:00:00 +0000
Subordinate resources: IP: 62.8.64.0/19
IP: 62.12.96.0/19
IP: 62.24.96.0/19
IP: 62.61.192.0/18
IP: 62.68.32.0/19
IP: 62.68.224.0/19
IP: 62.114.0.0/16
IP: 62.117.32.0/19
IP: 62.135.0.0/17
IP: 62.139.0.0/16
IP: 62.140.64.0/18
IP: 62.173.32.0/19
IP: 62.193.64.0/18
IP: 62.193.160.0/19
IP: 62.240.32.0/19
IP: 62.240.96.0/19
IP: 62.241.128.0/19
IP: 62.251.128.0/17
IP: 77.220.0.0/19
IP: 80.67.128.0/20
IP: 80.72.96.0/20
IP: 80.75.160.0/19
IP: 80.87.64.0/19
IP: 80.88.0.0/20
IP: 80.95.0.0/20
IP: 80.240.192.0/20
IP: 80.246.0.0/20
IP: 80.248.0.0/20
IP: 80.248.64.0/20
IP: 80.249.64.0/20
IP: 80.250.32.0/20
IP: 81.4.0.0/18
IP: 81.10.0.0/17
IP: 81.21.96.0/20
IP: 81.22.64.0/19
IP: 81.26.64.0/20
IP: 81.29.96.0/20
IP: 81.91.224.0/20
IP: 81.192.0.0/16
IP: 82.101.128.0/18
IP: 82.128.0.0/17
IP: 82.129.128.0/17
IP: 82.151.64.0/19
IP: 82.201.128.0/17
IP: 83.143.24.0/21
IP: 84.36.0.0/16
IP: 84.205.96.0/19
IP: 84.233.0.0/17
IP: 87.255.96.0/19
IP: 193.17.215.0/24
IP: 193.19.232.0/22
IP: 193.41.146.0/23
IP: 193.95.0.0/17
IP: 193.108.23.0/24
IP: 193.108.28.0/24
IP: 193.108.214.0/24
IP: 193.108.252.0/22
IP: 193.109.66.0/23
IP: 193.110.104.0/23
IP: 193.188.7.0/24
IP: 193.189.0.0 -- 193.189.65.255
IP: 193.189.128.0/24
IP: 193.194.1.0 -- 193.194.5.255
IP: 193.194.32.0 -- 193.194.95.255
IP: 193.194.128.0/24
IP: 193.194.160.0/19
IP: 193.221.218.0/24
IP: 193.227.0.0/18
IP: 193.227.128.0/24
IP: 194.6.224.0/24
IP: 194.9.64.0/23
IP: 194.9.82.0/23
IP: 194.79.96.0/19
IP: 194.204.192.0/18
IP: 195.24.80.0/21
IP: 195.24.192.0/19
IP: 195.39.218.0/23
IP: 195.43.0.0/19
IP: 195.166.224.0/19
IP: 195.202.64.0/19
IP: 195.234.120.0/22
IP: 195.234.168.0/24
IP: 195.234.185.0/24
IP: 195.234.252.0/22
IP: 195.246.32.0/19
IP: 212.0.128.0/19
IP: 212.12.224.0/19
IP: 212.22.160.0/19
IP: 212.49.64.0/19
IP: 212.52.128.0/19
IP: 212.60.64.0/19
IP: 212.85.192.0/19
IP: 212.88.96.0/19
IP: 212.96.0.0/19
IP: 212.100.64.0/19
IP: 212.103.160.0/19
IP: 212.122.224.0/19
IP: 212.217.0.0/17
IP: 213.55.64.0/18
IP: 213.131.64.0/19
IP: 213.136.96.0/19
IP: 213.147.64.0/19
IP: 213.150.96.0/19
IP: 213.150.160.0 -- 213.150.223.255
IP: 213.152.64.0/19
IP: 213.154.32.0 -- 213.154.95.255
IP: 213.158.160.0/19
IP: 213.172.128.0/19
IP: 213.179.160.0/19
IP: 213.181.224.0/19
IP: 213.193.32.0/19
IP: 213.212.192.0/18
IP: 213.247.0.0/19
IP: 213.255.128.0/19
IP: 217.14.80.0/20
IP: 217.20.224.0/20
IP: 217.21.112.0/20
IP: 217.29.128.0/20
IP: 217.29.208.0/20
IP: 217.52.0.0/14
IP: 217.64.96.0/20
IP: 217.77.64.0/20
IP: 217.78.64.0/20
IP: 217.117.0.0/20
IP: 217.139.0.0/16
IP: 217.170.144.0/20
IP: 217.199.144.0/20
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 28 May 2026 06:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99 (0x63)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AfriNIC-Root-Certificate
Validity
Not Before: Apr 21 06:25:26 2026 GMT
Not After : Apr 21 00:00:00 2031 GMT
Subject: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:8f:6e:75:b0:3f:47:9b:27:91:6b:90:05:
5c:03:dd:44:85:3f:23:bb:04:77:62:a7:17:6a:84:
7a:98:52:c3:3e:9e:83:3b:b8:12:1d:69:6e:8b:30:
4b:c4:ec:e2:23:02:66:04:0d:50:92:26:7b:41:93:
d7:9e:ee:39:d4:1a:01:d5:04:2e:ac:a1:db:4c:09:
f7:f9:39:75:da:cd:d4:9a:51:3b:dc:3d:54:0f:c3:
5c:01:77:b3:51:a9:78:69:87:b0:78:69:01:1d:ec:
b6:e0:6f:ef:a4:cd:80:31:21:20:08:eb:4f:be:df:
2c:da:c8:7a:25:11:b7:ca:c6:e3:81:ee:2f:89:79:
28:fb:2a:98:28:d7:a1:65:90:15:18:4b:df:67:16:
7d:bb:96:ab:0e:53:81:e2:4b:68:26:ad:06:dc:98:
bf:75:0d:28:6a:7d:0f:b6:b7:f4:35:8b:a9:3f:2b:
8e:b0:2e:58:af:82:f1:da:64:c5:7b:11:c2:60:06:
9c:7a:f1:db:29:a3:6a:23:4f:ca:4e:d9:9c:f1:92:
13:3d:0b:ae:d1:f1:35:bf:4d:44:5e:02:65:22:f8:
d5:d0:0c:63:38:1e:07:44:44:16:45:7c:6b:3d:e5:
5a:e7:19:df:bb:20:65:14:3b:6d:c6:3e:cf:34:df:
e4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
X509v3 Authority Key Identifier:
keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.afrinic.net/repository/ripe/
RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
62.8.64.0/19
62.12.96.0/19
62.24.96.0/19
62.61.192.0/18
62.68.32.0/19
62.68.224.0/19
62.114.0.0/16
62.117.32.0/19
62.135.0.0/17
62.139.0.0/16
62.140.64.0/18
62.173.32.0/19
62.193.64.0/18
62.193.160.0/19
62.240.32.0/19
62.240.96.0/19
62.241.128.0/19
62.251.128.0/17
77.220.0.0/19
80.67.128.0/20
80.72.96.0/20
80.75.160.0/19
80.87.64.0/19
80.88.0.0/20
80.95.0.0/20
80.240.192.0/20
80.246.0.0/20
80.248.0.0/20
80.248.64.0/20
80.249.64.0/20
80.250.32.0/20
81.4.0.0/18
81.10.0.0/17
81.21.96.0/20
81.22.64.0/19
81.26.64.0/20
81.29.96.0/20
81.91.224.0/20
81.192.0.0/16
82.101.128.0/18
82.128.0.0/17
82.129.128.0/17
82.151.64.0/19
82.201.128.0/17
83.143.24.0/21
84.36.0.0/16
84.205.96.0/19
84.233.0.0/17
87.255.96.0/19
193.17.215.0/24
193.19.232.0/22
193.41.146.0/23
193.95.0.0/17
193.108.23.0/24
193.108.28.0/24
193.108.214.0/24
193.108.252.0/22
193.109.66.0/23
193.110.104.0/23
193.188.7.0/24
193.189.0.0-193.189.65.255
193.189.128.0/24
193.194.1.0-193.194.5.255
193.194.32.0-193.194.95.255
193.194.128.0/24
193.194.160.0/19
193.221.218.0/24
193.227.0.0/18
193.227.128.0/24
194.6.224.0/24
194.9.64.0/23
194.9.82.0/23
194.79.96.0/19
194.204.192.0/18
195.24.80.0/21
195.24.192.0/19
195.39.218.0/23
195.43.0.0/19
195.166.224.0/19
195.202.64.0/19
195.234.120.0/22
195.234.168.0/24
195.234.185.0/24
195.234.252.0/22
195.246.32.0/19
212.0.128.0/19
212.12.224.0/19
212.22.160.0/19
212.49.64.0/19
212.52.128.0/19
212.60.64.0/19
212.85.192.0/19
212.88.96.0/19
212.96.0.0/19
212.100.64.0/19
212.103.160.0/19
212.122.224.0/19
212.217.0.0/17
213.55.64.0/18
213.131.64.0/19
213.136.96.0/19
213.147.64.0/19
213.150.96.0/19
213.150.160.0-213.150.223.255
213.152.64.0/19
213.154.32.0-213.154.95.255
213.158.160.0/19
213.172.128.0/19
213.179.160.0/19
213.181.224.0/19
213.193.32.0/19
213.212.192.0/18
213.247.0.0/19
213.255.128.0/19
217.14.80.0/20
217.20.224.0/20
217.21.112.0/20
217.29.128.0/20
217.29.208.0/20
217.52.0.0/14
217.64.96.0/20
217.77.64.0/20
217.78.64.0/20
217.117.0.0/20
217.139.0.0/16
217.170.144.0/20
217.199.144.0/20
Signature Algorithm: sha256WithRSAEncryption
23:2c:a7:ca:e7:22:f5:dc:31:ea:94:b6:b0:ce:e8:53:69:b9:
da:ac:3f:0f:eb:66:27:1f:e1:cf:8b:af:08:26:22:37:87:65:
63:af:40:fd:2a:c0:8f:55:3a:59:fc:19:73:d6:02:8f:d8:e4:
53:51:45:a2:31:fe:b3:7d:cb:fe:4e:1d:37:06:60:b9:5e:06:
f5:4e:c2:4b:e3:ed:ba:36:b8:dd:ad:38:db:ef:13:b0:40:ec:
2e:06:5b:f5:84:03:28:d6:07:77:f7:15:c8:90:1e:e0:f5:0d:
6c:ff:3a:40:b0:9a:e6:f0:97:bb:44:87:28:1a:67:80:e1:0b:
4f:17:0b:73:08:4c:e6:2a:21:27:4d:fd:ec:1e:f3:a8:22:a5:
59:3b:d9:bd:d3:33:3f:94:9f:78:55:6f:74:83:87:8e:59:d9:
91:15:8f:0d:06:13:20:fb:22:c8:da:97:b2:2f:02:ea:f6:b8:
88:7f:5c:69:ec:42:24:6a:b7:95:e5:89:ad:4e:6d:af:ce:cb:
eb:91:16:01:fe:a0:62:c7:7d:a8:a8:45:8d:07:a0:7d:7a:88:
bb:3d:5b:cb:88:f1:0c:6f:90:8c:d8:c6:26:ce:54:22:90:ad:
fc:1d:56:f4:d7:da:d8:18:d1:37:e3:b2:46:22:35:15:48:51:
4c:a8:a9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:14:59 2026 by rpki-client