This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/84B90860C48911F08852EAF3DAE4EC9C.roa
File: 84B90860C48911F08852EAF3DAE4EC9C.roa (raw, json)
Hash identifier: LjDMcvqbvTa7NmZpKZHEfDd8figznSS8b15T9VE4Bqo=
Subject key identifier: EA:E2:EF:32:D4:01:5D:81:89:8F:1E:B4:25:24:88:15:50:DF:86:DE
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1CBC
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/84B90860C48911F08852EAF3DAE4EC9C.roa
Signing time: Tue 18 Nov 2025 14:18:57 +0000
ROA not before: Tue 18 Nov 2025 14:18:52 +0000
ROA not after: Sat 20 Nov 2027 14:18:52 +0000
asID: 212238
IP address blocks: 154.16.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 23 Nov 2025 01:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7356 (0x1cbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 18 14:18:52 2025 GMT
Not After : Nov 20 14:18:52 2027 GMT
Subject: CN=691c8051-d824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:72:e7:0c:db:61:3a:15:73:a4:cc:54:d5:e7:
7b:e9:ee:cf:1d:44:cf:c9:a6:e0:e9:d2:57:12:e1:
7e:7c:e2:54:66:b1:e8:2c:37:62:63:51:75:fc:bd:
48:f4:41:62:b9:ed:61:44:c9:dc:52:a1:a9:46:b0:
4b:ab:23:8d:7b:f8:91:9f:ae:28:1c:21:96:66:2c:
23:6e:99:cf:d8:49:d5:3c:b4:b7:65:7a:5f:7a:42:
6b:20:b1:2f:10:36:e9:4a:72:a2:59:cf:f0:b9:7c:
2c:d8:bd:db:e5:48:9f:ca:84:07:b9:83:32:b7:4a:
10:32:93:67:18:2d:38:4a:15:ce:9a:e5:d1:a2:55:
ce:3a:bd:3a:9b:aa:8e:0f:a3:40:ff:97:81:35:2f:
2b:34:c7:b6:51:ce:62:9e:dc:d7:d2:b6:40:25:01:
7c:db:6d:6f:24:1e:06:fb:f6:2e:88:5d:1d:17:38:
1c:9f:43:f0:d7:95:98:49:c3:f0:9f:46:1e:78:79:
4e:5c:b2:21:b9:06:b0:0f:f2:1b:e9:e6:24:1d:3c:
61:64:ec:4a:63:c1:1c:2e:cb:85:05:a4:8a:3f:12:
69:c5:a8:04:13:1b:56:de:dc:68:ca:e2:d7:60:cc:
80:7b:96:e1:7a:7a:b7:7e:61:1f:2b:b2:25:e4:2f:
5a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E2:EF:32:D4:01:5D:81:89:8F:1E:B4:25:24:88:15:50:DF:86:DE
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/84B90860C48911F08852EAF3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.25.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:78:47:77:e0:25:bc:5a:76:f6:90:48:bc:43:d1:f0:31:3a:
0b:6c:c7:f6:47:48:7f:67:c4:67:35:c7:66:88:30:f1:c1:48:
5d:f2:c8:f4:ec:c3:50:f9:e9:e0:22:d5:60:09:4c:20:ee:29:
9e:a5:ae:fc:d4:88:25:a4:e3:a6:bd:34:bd:a7:67:08:25:1b:
43:a5:9b:65:4e:36:06:e5:13:7c:97:ce:22:fa:09:95:46:45:
e7:b7:aa:7e:40:f9:fd:a0:46:0e:63:af:f4:c7:f9:2b:c6:14:
b4:9f:b8:6c:9e:a2:21:86:73:74:28:03:84:25:0a:b9:b6:c3:
cc:46:c2:24:14:86:6e:c9:26:aa:b4:b3:e0:a9:fa:d2:e2:3d:
9f:a2:ae:ec:b4:50:df:ef:0b:cf:65:5d:37:c6:7f:3e:01:45:
56:b5:7d:47:e2:c4:b5:bd:43:45:f6:45:55:bd:f9:c9:5a:b5:
e6:73:53:d5:80:89:c6:fd:34:bb:d9:6d:d7:6e:13:08:e1:5b:
63:25:f3:2a:44:2e:97:8e:18:1b:97:6c:fb:f3:f0:42:38:a6:
37:92:6e:58:e0:ba:e8:90:24:5f:05:fa:e9:6d:96:93:c0:bd:
ad:cf:09:1b:2a:e6:24:bd:1e:77:8a:25:05:19:f2:f5:05:2d:
cd:78:81:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 21 13:50:20 2025 by rpki-client