This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D4AE2AA2C48F11F09AEED29CDAE4EC9C.roa
File: D4AE2AA2C48F11F09AEED29CDAE4EC9C.roa (raw, json)
Hash identifier: 0azf6+4N4H9I41KGD1mUoRsdXrWAoX6YDefYgD1amuw=
Subject key identifier: FC:A6:6B:0D:8D:5B:FA:B4:6A:B5:72:41:26:82:19:29:39:4D:0D:3D
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1CD5
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D4AE2AA2C48F11F09AEED29CDAE4EC9C.roa
Signing time: Tue 18 Nov 2025 15:04:08 +0000
ROA not before: Tue 18 Nov 2025 15:04:03 +0000
ROA not after: Sat 20 Nov 2027 15:04:03 +0000
asID: 212238
IP address blocks: 154.16.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 23 Nov 2025 01:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7381 (0x1cd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Nov 18 15:04:03 2025 GMT
Not After : Nov 20 15:04:03 2027 GMT
Subject: CN=691c8ae8-66e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:57:ea:9d:21:99:51:85:ab:b6:37:c2:d4:8d:
e9:9c:f8:b5:cd:ee:bd:23:ed:08:8a:dc:19:91:c2:
15:dd:60:2a:05:0e:16:66:36:73:99:a5:73:e6:d9:
0f:54:0f:f6:a4:94:5d:76:ca:ce:9c:e8:1b:86:0e:
c6:97:09:c3:a4:6f:4d:4b:3c:32:b6:4f:3c:76:80:
0f:fb:01:8b:79:b2:0b:77:4b:45:75:24:5d:e9:0d:
97:8b:a9:ba:b5:c4:1f:72:50:f1:bd:b9:8f:a0:05:
bd:b5:e7:f5:ce:93:e6:ce:3d:41:ad:b6:f4:db:f5:
4e:8f:be:77:8c:31:24:0a:9f:62:41:48:06:42:9d:
2b:07:a5:68:64:66:70:ba:1a:b9:94:eb:95:a5:34:
d7:ec:72:02:94:ef:06:1f:63:2d:a6:a5:ed:3b:bd:
7a:94:69:91:ef:75:14:6c:a4:cf:b5:11:cb:b0:ef:
c7:7a:e8:64:b5:d4:39:cd:b3:ad:28:cd:1b:99:b7:
43:b7:aa:59:f7:5d:41:15:1c:0d:a9:e2:ed:8e:48:
a1:1b:1c:db:93:c0:e8:77:ea:14:ed:e1:d4:05:16:
6c:22:e8:ee:71:b5:90:79:f4:dd:6b:27:f0:b6:86:
55:0d:bf:36:a4:f5:58:a5:cb:42:07:3e:b1:7c:90:
b1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A6:6B:0D:8D:5B:FA:B4:6A:B5:72:41:26:82:19:29:39:4D:0D:3D
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/D4AE2AA2C48F11F09AEED29CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.85.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:be:49:69:85:1a:72:b0:27:dd:db:41:57:8b:17:44:11:3b:
fc:f5:cc:ca:db:31:78:97:6c:ba:18:3a:37:61:ef:99:b3:42:
e2:aa:da:de:ce:af:86:a3:87:8b:c5:9f:0e:ef:9e:3a:34:e1:
e1:7e:5f:01:3e:4a:29:bd:e1:30:2e:4f:57:fe:88:f9:41:55:
a7:ea:3b:4e:5d:a6:53:01:43:53:d2:28:75:56:ab:9f:14:5a:
2a:97:64:9c:db:0e:f5:de:b1:af:fd:d4:95:24:a1:17:cb:b1:
2e:5d:92:00:3a:85:84:03:46:a0:0f:95:2b:7b:94:f4:ca:7d:
40:b8:95:85:68:d3:16:4b:44:be:5a:c7:21:94:f6:28:85:41:
5b:54:68:32:d7:a8:53:64:1e:77:04:2d:69:90:23:41:40:6c:
97:10:b2:42:0f:9f:c1:5b:42:ae:f3:e4:1f:4e:32:05:95:23:
5c:80:ff:44:3c:ab:98:26:0d:d0:3b:b7:88:93:e9:1f:3f:e4:
fb:1e:ec:fe:28:a6:c0:1c:33:be:be:9f:f8:dd:42:26:eb:14:
68:86:a1:25:e3:bf:2c:aa:6b:e2:70:d8:ae:4c:21:f0:b9:76:
5e:ae:c3:75:1f:ad:5f:f9:03:0f:aa:6f:40:e9:51:1d:17:96:
59:1c:d1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 21 13:49:18 2025 by rpki-client