This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AB8E3C20DCA911F0AB20B1E8DAE4EC9C.roa
File: AB8E3C20DCA911F0AB20B1E8DAE4EC9C.roa (raw, json)
Hash identifier: uK4Lq/dWHt6AuggiYwmzJ6Mp6KnWl2Wpx1kPECDTlEA=
Subject key identifier: 1C:71:CC:30:7D:52:A8:CE:60:6B:E8:58:04:57:A7:6C:53:98:AF:66
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1D47
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AB8E3C20DCA911F0AB20B1E8DAE4EC9C.roa
Signing time: Fri 19 Dec 2025 07:09:34 +0000
ROA not before: Fri 19 Dec 2025 07:09:29 +0000
ROA not after: Sun 19 Dec 2027 07:09:29 +0000
asID: 400909
IP address blocks: 154.16.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Dec 2025 00:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7495 (0x1d47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 19 07:09:29 2025 GMT
Not After : Dec 19 07:09:29 2027 GMT
Subject: CN=6944fa2e-c1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9b:79:9c:d3:c1:d2:74:f6:c4:5e:f8:3f:8b:
27:1d:2b:a9:b3:91:de:c2:ac:3f:4c:cd:6d:a0:24:
37:8e:9b:ac:14:8d:0d:98:92:57:d9:38:e7:22:9f:
d7:78:b6:83:b8:c5:a2:a9:ae:b4:d3:04:88:97:d8:
e6:77:87:85:ba:8d:84:82:15:26:e5:e6:63:fd:1d:
d6:d9:2a:6f:66:f2:ab:f4:a0:a3:9c:45:cf:fc:dc:
17:e4:e5:b1:7c:2a:02:01:3d:d3:98:54:50:1b:65:
7d:24:ad:8d:7f:c3:29:de:42:fd:8d:b4:f5:b9:ba:
6b:11:cd:12:fe:e9:37:b6:e8:41:df:93:c1:b3:a2:
ca:8a:f9:05:0b:f6:b4:d4:a0:d3:3d:f5:5e:b6:5f:
6c:8d:39:b6:d4:99:9c:ce:94:96:55:4a:d7:0a:eb:
3f:e8:53:f0:fa:11:fa:c0:46:45:0c:12:17:fe:7b:
b6:c2:9f:75:03:d2:4c:87:f2:f4:2f:7c:8c:50:b0:
b0:5d:8f:2c:d7:c9:f7:b3:11:66:f0:00:53:70:71:
0f:c3:e8:e5:d3:ac:27:6d:82:33:11:21:73:09:87:
c2:d0:55:df:c4:d2:66:7a:2c:36:00:35:a2:f8:e1:
b2:ac:96:69:38:d4:9b:e1:74:dc:0e:22:0a:12:ca:
b4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:71:CC:30:7D:52:A8:CE:60:6B:E8:58:04:57:A7:6C:53:98:AF:66
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/AB8E3C20DCA911F0AB20B1E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.18.0/24
Signature Algorithm: sha256WithRSAEncryption
62:b9:15:30:66:77:d1:44:67:22:4c:ad:66:68:f6:1b:27:88:
f4:af:09:f4:c3:aa:b6:c7:b5:3c:c1:d4:35:74:90:e4:42:27:
80:ce:de:8c:ed:92:c2:d0:fe:ff:3c:99:6d:d5:09:6e:ac:ad:
b4:fb:ab:1c:e2:27:7f:f8:3c:c0:4e:98:30:36:bb:67:69:48:
1d:45:ec:ca:36:3f:79:ae:38:f5:36:9e:d4:38:20:89:f4:4c:
14:29:89:02:73:d7:8d:e1:97:b5:0c:7c:e1:bd:07:4b:6e:84:
c8:aa:de:7c:df:7d:80:46:9f:10:be:93:d2:3c:c5:10:63:01:
67:4a:4a:23:28:21:24:65:d3:7d:ac:7a:0f:2c:47:46:75:d6:
6f:60:a2:b6:c1:22:c9:96:85:fe:17:4c:a5:b1:00:ba:11:0c:
91:d1:4b:af:52:2a:cf:57:fd:e0:4d:fe:34:ba:de:d9:60:a8:
77:a6:ad:95:63:c7:0b:18:ae:fc:62:59:4c:9a:0a:35:47:60:
25:d3:c0:e4:87:70:f6:45:ba:50:3e:c4:92:a1:e6:f1:34:5c:
e6:03:c2:d1:14:f0:ef:f8:a1:e0:aa:8b:62:24:cb:20:09:0e:
f0:ea:a4:76:f9:47:0d:67:50:82:48:db:b3:e2:5c:95:9b:f5:
59:fd:84:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 09:22:24 2025 by rpki-client