This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBCD1E7ADCAB11F0B123C5F5DAE4EC9C.roa
File: FBCD1E7ADCAB11F0B123C5F5DAE4EC9C.roa (raw, json)
Hash identifier: WcKM5tajBtO8/7c5cnAwDxTQ2QYXWpczq1UWovW55jI=
Subject key identifier: F6:6D:12:A9:10:B9:53:A8:65:12:1D:E9:EE:47:E8:16:7E:C0:63:42
Certificate issuer: /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial: 1D4B
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBCD1E7ADCAB11F0B123C5F5DAE4EC9C.roa
Signing time: Fri 19 Dec 2025 07:26:07 +0000
ROA not before: Fri 19 Dec 2025 07:26:03 +0000
ROA not after: Sun 19 Dec 2027 07:26:03 +0000
asID: 400909
IP address blocks: 154.16.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Dec 2025 00:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7499 (0x1d4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F3682B65AF, serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Validity
Not Before: Dec 19 07:26:03 2025 GMT
Not After : Dec 19 07:26:03 2027 GMT
Subject: CN=6944fe0f-784c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:df:d2:f4:2b:4d:c1:78:eb:7f:b0:4b:87:
5d:e8:63:fd:1f:fd:f2:53:0d:72:38:7f:8f:ac:56:
4f:42:c3:e4:cc:ea:1b:86:eb:d0:4a:d6:e1:3f:47:
df:1d:35:20:76:21:e5:39:89:d7:c9:5f:92:13:f9:
76:b4:d9:9f:4d:4d:45:a4:93:1d:95:37:67:d3:76:
76:f6:ff:3a:f5:92:dd:83:7e:9b:14:f3:66:42:71:
47:29:b7:a2:1d:69:0f:52:d8:65:9b:5c:e1:c7:4d:
d5:e7:75:98:98:4d:1d:90:56:0d:e6:0f:88:66:f1:
93:07:10:de:6c:6d:7e:82:a5:d3:f1:4c:fe:bb:ca:
ec:bb:38:38:0d:87:d3:87:d2:49:c0:6d:6a:dc:07:
30:b6:09:58:2a:b1:6e:d3:33:6c:2d:d3:49:da:cc:
7f:87:40:fb:0e:77:71:83:df:93:bf:77:7a:f4:82:
2e:71:6f:df:e7:0b:9b:18:96:8e:54:c5:52:c8:95:
67:ae:3c:2d:80:3f:0d:75:be:c1:f4:f9:5c:fe:5d:
73:3b:86:89:71:99:db:38:c6:54:56:0e:b8:25:70:
0c:70:44:c7:1d:24:22:29:56:7e:b0:4c:2a:a7:1b:
a5:4f:28:dd:38:31:32:d1:fd:12:b1:10:01:7f:ba:
61:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6D:12:A9:10:B9:53:A8:65:12:1D:E9:EE:47:E8:16:7E:C0:63:42
X509v3 Authority Key Identifier:
keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/FBCD1E7ADCAB11F0B123C5F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.16.76.0/24
Signature Algorithm: sha256WithRSAEncryption
54:52:43:f2:83:7b:24:24:76:1a:8e:f7:2b:76:46:77:f3:bd:
da:f9:72:8b:4b:99:77:28:f9:db:7e:af:a3:8f:e4:a1:e9:b6:
78:a0:ac:e0:e1:02:6d:3a:ab:43:5c:f2:c2:e2:6a:77:c4:c5:
37:f1:98:7d:76:37:e4:32:a9:b8:c1:07:66:a1:0e:fa:c5:3d:
41:90:97:ef:f2:d3:f6:1e:1a:0b:d3:d8:01:36:75:e0:2e:37:
4d:2e:ae:37:b2:b6:b4:7d:44:4c:de:b4:85:c1:8b:a9:de:76:
fc:87:2e:1a:b4:87:d4:f5:e9:b6:02:2e:31:28:6d:05:8f:53:
b3:8c:5f:68:15:a1:c7:be:5a:1a:65:0d:ad:a8:b8:53:ca:0d:
0a:de:5a:08:6d:92:9b:2f:43:70:ff:fe:f7:c1:02:3a:54:b1:
63:7c:6b:7b:09:e0:60:e6:f8:39:8f:b8:ba:b4:8b:05:18:31:
eb:77:9b:d7:dd:7f:6b:34:85:6f:50:d0:c9:da:6d:0e:0f:b0:
11:d0:c7:0b:fd:d2:c4:d4:ac:61:03:e0:19:80:c2:b6:40:c5:
ca:c3:84:95:72:f4:c2:38:b4:a9:0b:eb:1e:1e:b2:24:dd:f1:
f2:f8:3d:80:f4:79:af:8e:4e:ea:cb:7f:4c:b4:75:ff:64:4e:
ce:0c:57:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 05:59:36 2025 by rpki-client