This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/ACF641FED6AD11F0812BC7D7DAE4EC9C.roa
File: ACF641FED6AD11F0812BC7D7DAE4EC9C.roa (raw, json)
Hash identifier: DefvG2gqn0YRx/oaaDEF9oWtrWF+Hp3FFyLDWRXzv1k=
Subject key identifier: 6D:C2:94:B3:2D:61:FE:41:91:BB:E9:92:DE:F0:54:CA:A9:A7:59:32
Certificate issuer: /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial: 075B
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/ACF641FED6AD11F0812BC7D7DAE4EC9C.roa
Signing time: Thu 11 Dec 2025 16:23:07 +0000
ROA not before: Thu 11 Dec 2025 16:23:02 +0000
ROA not after: Tue 11 Dec 2035 16:23:02 +0000
asID: 30823
IP address blocks: 41.216.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Dec 2025 00:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1883 (0x75b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Validity
Not Before: Dec 11 16:23:02 2025 GMT
Not After : Dec 11 16:23:02 2035 GMT
Subject: CN=693aefeb-c304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:80:5b:67:be:63:e2:cf:a8:28:5f:f6:10:
51:f0:2b:02:1e:90:4c:43:eb:c3:0d:5b:ca:29:3c:
e5:87:f0:a3:8e:b7:fa:ac:8c:01:1c:6a:79:58:a0:
a1:0f:47:82:d9:3c:1e:d6:d4:05:7b:d6:d3:74:83:
d6:e7:56:b4:f0:0a:01:c5:bb:d7:75:a9:7e:75:ba:
59:96:72:84:4e:8a:a9:74:da:67:c6:c5:4e:22:be:
4f:05:d1:a0:c8:e6:9b:19:3a:08:e5:42:2a:72:3f:
4f:1f:38:e5:13:5b:91:1e:36:63:a4:c7:ce:4d:2b:
a3:8c:15:0d:4f:7d:7b:cd:ed:f3:89:bd:40:5a:4c:
dc:92:c8:ee:ca:46:13:2c:6c:ac:14:b1:cc:64:86:
9a:e2:a5:fa:3c:44:50:a7:21:f5:04:13:55:e0:a8:
ad:01:a3:7a:08:84:8f:c3:6e:90:2e:87:7e:ea:50:
62:77:ab:25:7c:ad:ce:b3:36:44:03:1a:88:c9:2f:
e2:f2:39:e1:2d:37:19:69:1e:6f:4f:d7:e4:9c:5f:
de:49:3b:48:6b:ae:d0:2f:83:5a:db:a8:0a:85:1b:
db:30:a3:d4:07:35:44:7d:41:06:1d:2a:4a:a1:9a:
71:c3:83:c6:a2:8a:a4:0e:5f:51:92:ea:8f:3b:10:
29:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C2:94:B3:2D:61:FE:41:91:BB:E9:92:DE:F0:54:CA:A9:A7:59:32
X509v3 Authority Key Identifier:
keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/ACF641FED6AD11F0812BC7D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
41.216.188.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:b5:17:35:6c:e4:c5:3a:02:47:a9:83:2f:53:42:86:cb:ce:
aa:03:c2:3f:01:69:98:21:48:42:85:8d:77:4b:f0:d9:bd:74:
5f:f1:e6:83:3f:d9:de:e7:64:b5:f2:35:7c:8c:9c:46:c8:56:
54:6c:30:4b:cf:6a:62:ff:fc:ea:91:e8:e7:50:c2:15:8c:8d:
51:c6:56:ed:71:82:69:81:66:a5:5e:0b:f0:91:17:56:9e:29:
c0:16:83:72:4b:99:79:35:92:0d:a3:7c:12:24:2a:f6:de:4f:
52:75:5a:6e:c2:c2:54:7c:7e:d1:78:0d:13:fd:c9:b1:62:55:
75:db:cc:b6:c9:4d:0b:da:3f:72:b8:7d:2a:93:e1:fe:df:7d:
2e:fe:d9:e9:33:ef:80:17:ef:ac:32:a5:c9:34:97:00:cf:2a:
e5:d7:ae:0f:cc:34:e1:3c:73:c2:23:98:af:49:8b:44:bf:6e:
ab:d8:26:92:bd:8f:b3:c4:f3:db:e7:98:92:b0:54:5a:d4:fb:
a7:cf:07:4f:ef:be:43:e6:20:bd:ec:e0:d4:54:29:68:db:5e:
5c:d9:21:63:0c:72:87:ca:58:b2:11:0a:54:f3:37:13:c1:cf:
1f:a3:81:c2:83:e1:6e:82:d9:36:8b:d4:aa:04:7c:88:8d:b9:
ee:8d:5b:fe
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgICB1swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUFGRERBRjExMC8GA1UEBRMoRTdDNjgwMzYwMDI0RURCOUYzNDUxREM5MTNFQTMz
MDU5QkM5MDRBNTAeFw0yNTEyMTExNjIzMDJaFw0zNTEyMTExNjIzMDJaMBgxFjAU
BgNVBAMTDTY5M2FlZmViLWMzMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCQYBbZ75j4s+oKF/2EFHwKwIekExD68MNW8opPOWH8KOOt/qsjAEcanlY
oKEPR4LZPB7W1AV71tN0g9bnVrTwCgHFu9d1qX51ulmWcoROiql02mfGxU4ivk8F
0aDI5psZOgjlQipyP08fOOUTW5EeNmOkx85NK6OMFQ1PfXvN7fOJvUBaTNySyO7K
RhMsbKwUscxkhpripfo8RFCnIfUEE1XgqK0Bo3oIhI/DbpAuh37qUGJ3qyV8rc6z
NkQDGojJL+LyOeEtNxlpHm9P1+ScX95JO0hrrtAvg1rbqAqFG9swo9QHNUR9QQYd
KkqhmnHDg8aiiqQOX1GS6o87ECknAgMBAAGjggKlMIICoTAdBgNVHQ4EFgQUbcKU
sy1h/kGRu+mS3vBUyqmnWTIwHwYDVR0jBBgwFoAU58aANgAk7bnzRR3JE+ozBZvJ
BKUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4QUVBMjI4LzU4YUFO
Z0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzU4YUFOZ0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4
QUVBMjI4L0FDRjY0MUZFRDZBRDExRjA4MTJCQzdEN0RBRTRFQzlDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAp2LwwDQYJKoZIhvcNAQEL
BQADggEBALK1FzVs5MU6Akepgy9TQobLzqoDwj8BaZghSEKFjXdL8Nm9dF/x5oM/
2d7nZLXyNXyMnEbIVlRsMEvPamL//OqR6OdQwhWMjVHGVu1xgmmBZqVeC/CRF1ae
KcAWg3JLmXk1kg2jfBIkKvbeT1J1Wm7CwlR8ftF4DRP9ybFiVXXbzLbJTQvaP3K4
fSqT4f7ffS7+2ekz74AX76wypck0lwDPKuXXrg/MNOE8c8IjmK9Ji0S/bqvYJpK9
j7PE89vnmJKwVFrU+6fPB0/vvkPmIL3s4NRUKWjbXlzZIWMMcofKWLIRClTzNxPB
zx+jgcKD4W6C2TaL1KoEfIiNue6NW/4=
-----END CERTIFICATE-----
Generated at Sat Dec 20 10:59:28 2025 by rpki-client