This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34342e302f32322d3234203d3e20323731373833.roa
File: 3230312e3232322e34342e302f32322d3234203d3e20323731373833.roa (raw, json)
Hash identifier: Nt4jfmyAEcdnwgdPSnZdXkg81hhcsU0nN3xFgczaiM8=
Subject key identifier: 24:D2:25:29:FA:AF:E4:C6:B6:13:6F:A5:9C:3C:7D:20:45:69:DA:AF
Certificate issuer: /CN=C3D02995E170CE622F60579EB13D9DD037B46A52
Certificate serial: 44457E74A2673E325B5DD3AF8092E64E8232DEE5
Authority key identifier: C3:D0:29:95:E1:70:CE:62:2F:60:57:9E:B1:3D:9D:D0:37:B4:6A:52
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34342e302f32322d3234203d3e20323731373833.roa
Signing time: Tue 06 Jan 2026 19:17:51 +0000
ROA not before: Tue 06 Jan 2026 19:12:51 +0000
ROA not after: Tue 05 Jan 2027 19:17:51 +0000
asID: 271783
IP address blocks: 201.222.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.crl
rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:45:7e:74:a2:67:3e:32:5b:5d:d3:af:80:92:e6:4e:82:32:de:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3D02995E170CE622F60579EB13D9DD037B46A52
Validity
Not Before: Jan 6 19:12:51 2026 GMT
Not After : Jan 5 19:17:51 2027 GMT
Subject: CN=24D22529FAAFE4C6B6136FA59C3C7D204569DAAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8d:ac:ea:e9:94:87:61:16:8f:21:09:d8:99:
05:8f:7d:0e:17:69:d7:73:21:9b:35:e2:08:b7:3a:
7e:dc:22:2f:73:e0:bc:e5:17:3a:d3:9e:d3:92:26:
0f:43:b1:1d:9e:2d:60:5b:a7:3c:11:67:5f:a2:a3:
70:b8:49:b5:7d:ba:59:77:1c:5a:76:6d:a0:7c:b0:
56:ef:96:38:7c:56:ff:f4:f0:88:aa:40:09:f0:54:
92:e1:9c:6f:ef:90:0f:df:14:95:bd:bd:6c:ba:d6:
d8:af:db:23:c6:7d:9d:fb:fb:2f:fe:24:30:41:72:
70:c8:bc:c9:ae:c9:80:1e:d1:ec:eb:ee:c4:97:39:
b1:62:77:51:4d:58:d7:4b:16:23:7f:2a:90:c9:d0:
f1:3f:03:67:17:d0:9b:ad:33:ca:cf:c4:7e:a7:f6:
72:7c:33:2b:10:c7:24:8d:d2:2a:6c:6d:e3:45:3b:
1c:55:be:f1:8a:3c:a1:20:cc:85:b0:35:81:10:e8:
17:31:85:86:8b:44:0f:5c:db:aa:dc:de:e1:d3:d6:
b5:10:3e:58:84:a5:18:70:9f:5e:06:39:ec:42:bd:
6b:d4:88:a5:2a:65:f4:5b:3f:99:e7:2d:e5:a1:51:
14:bd:62:f7:10:c4:99:cb:13:77:c1:e8:34:e6:4d:
99:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D2:25:29:FA:AF:E4:C6:B6:13:6F:A5:9C:3C:7D:20:45:69:DA:AF
X509v3 Authority Key Identifier:
keyid:C3:D0:29:95:E1:70:CE:62:2F:60:57:9E:B1:3D:9D:D0:37:B4:6A:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34342e302f32322d3234203d3e20323731373833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.222.44.0/22
Signature Algorithm: sha256WithRSAEncryption
77:fb:a2:40:d8:88:e2:9c:c8:b2:cc:65:8e:47:83:09:1e:21:
73:6c:f0:55:f5:28:32:e1:61:ae:cf:04:2c:75:6f:3c:9a:70:
b7:ce:a0:30:58:ad:6a:b7:ab:75:7d:5a:1a:e5:25:9f:fa:27:
fd:dd:a8:9d:ac:04:f5:f3:a6:f0:f1:80:c8:b5:46:e3:cb:70:
78:2e:6d:4e:68:d9:d8:c8:c7:82:28:a5:a0:aa:1f:48:82:3a:
46:79:4b:7b:fc:09:29:8d:79:05:2a:3d:10:38:74:0a:2d:cf:
9b:58:59:37:ab:a8:63:fc:f9:d8:36:36:2f:46:9c:6e:6b:65:
5a:b5:66:88:91:f5:6e:de:42:fb:37:66:4b:e4:9b:fb:d2:51:
f7:43:94:99:63:53:81:6a:70:e2:09:b8:e7:e6:ea:db:b1:3e:
68:ec:3b:0f:50:6b:23:3f:d4:da:23:68:ff:67:1e:91:77:9e:
e2:67:d1:5c:ab:90:c3:f5:7e:e6:58:42:e9:b3:ae:d5:47:de:
6e:6f:c7:d6:41:db:de:4d:45:bf:3b:1e:7c:80:f9:a6:8a:41:
6d:bb:e9:cd:dc:cd:b4:59:0f:cb:6b:1f:4b:9a:a0:24:78:12:
72:b2:c1:f4:d7:62:39:b8:02:cb:48:16:85:a8:8e:31:fa:00:
b2:57:4e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:18:19 2026 by rpki-client