This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/16C311B8DB3911F090B142DEDAE4EC9C.roa
File: 16C311B8DB3911F090B142DEDAE4EC9C.roa (raw, json)
Hash identifier: oTycKqiylbUdKMVCBD4pMuYdWpoylPqw/eqePPTrrvM=
Subject key identifier: BA:CD:0E:0E:16:1C:5F:F1:C4:6D:4E:E4:3B:8A:40:57:47:F8:53:FB
Certificate issuer: /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial: 087E
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/16C311B8DB3911F090B142DEDAE4EC9C.roa
Signing time: Wed 17 Dec 2025 11:11:09 +0000
ROA not before: Wed 17 Dec 2025 11:11:05 +0000
ROA not after: Sun 17 Dec 2045 11:11:05 +0000
asID: 33771
IP address blocks: 196.97.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 20 Dec 2025 00:07:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2174 (0x87e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Validity
Not Before: Dec 17 11:11:05 2025 GMT
Not After : Dec 17 11:11:05 2045 GMT
Subject: CN=69428fcd-a53c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:f9:b5:9c:f8:90:21:68:25:04:70:92:8e:
ed:3e:e1:85:a9:54:b7:de:0d:f9:65:d9:14:82:44:
72:2f:ce:eb:ff:e3:73:b0:bf:52:7f:48:e5:9e:50:
27:cb:9a:9a:ef:80:e8:78:6e:c2:ac:e0:06:b8:5f:
ce:2a:84:41:83:34:f3:54:9c:53:57:e7:5d:f9:d6:
79:52:00:38:88:ff:9a:49:be:73:9f:5a:20:2c:1d:
cf:4c:5d:04:cb:4a:cf:f3:81:29:2f:b4:d0:be:41:
f6:c1:f9:cf:de:f3:36:3f:51:51:3a:a0:c0:8e:2e:
8c:2c:b6:ec:a6:0d:4b:58:67:f3:f7:9a:34:bb:d9:
21:fd:13:e5:48:3b:b4:da:05:92:2b:15:e2:b2:09:
dd:9e:4c:c1:9f:b0:59:07:5b:58:1f:d6:ad:b1:e3:
47:65:79:db:50:f5:32:c8:26:ac:d1:0f:e5:3f:87:
36:85:03:17:42:27:b3:b3:7e:d3:ea:64:d6:9e:2a:
4d:3a:50:b5:7b:49:7c:b5:44:10:fa:cd:3f:ac:3f:
c7:a2:00:bb:fe:84:00:e8:14:e4:93:b9:ea:a1:bb:
3b:9c:46:54:d5:1e:5d:65:d7:0f:9a:d8:86:62:39:
5f:de:41:4d:f9:35:c3:e9:5e:b9:60:98:dc:86:6c:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CD:0E:0E:16:1C:5F:F1:C4:6D:4E:E4:3B:8A:40:57:47:F8:53:FB
X509v3 Authority Key Identifier:
keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/16C311B8DB3911F090B142DEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
196.97.16.0/22
Signature Algorithm: sha256WithRSAEncryption
34:ed:66:d4:ae:0b:e2:9f:da:64:84:dd:e7:25:b7:e3:9f:bd:
82:32:17:c2:b9:a1:00:17:12:67:5d:62:84:94:00:90:b3:d9:
95:fa:fb:ae:c6:02:53:12:8f:b8:71:dc:b6:c5:35:52:f6:9f:
96:21:60:dd:b8:9e:fd:4a:3a:c8:e4:fd:ee:4d:53:48:10:e9:
bd:bd:6c:07:21:93:0d:1f:7b:6c:43:3a:69:3f:14:5f:8b:10:
68:06:f8:5f:da:77:b3:4c:f3:2c:6f:08:d5:d4:35:cc:4a:cd:
25:b4:77:22:16:16:b8:92:10:7e:7a:7d:28:4b:31:a3:8c:09:
2d:2f:54:cd:87:68:da:5c:ad:9e:2d:ae:62:2f:a7:1d:5e:58:
f1:7d:32:19:55:0e:a8:5e:c0:ed:87:00:22:be:e0:61:a1:56:
65:60:2c:63:38:6a:dd:6a:b1:f7:c3:af:f6:1c:7c:44:06:49:
71:c3:64:15:37:0f:34:6f:a4:02:c0:a0:9f:5c:38:a7:77:3a:
02:d0:3b:27:b3:00:9d:c3:46:e0:23:93:cf:ca:a2:9c:2e:5c:
01:33:fa:72:b3:2f:f5:b1:28:79:2c:6e:6c:c6:0b:16:bb:b9:
4f:b8:1f:4b:4d:b5:4c:09:ba:46:44:95:39:65:96:ed:84:a3:
e4:3c:1b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 18 22:33:29 2025 by rpki-client