This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34362e302f32342d3239203d3e20323733303937.roa
File: 3230312e3232322e34362e302f32342d3239203d3e20323733303937.roa (raw, json)
Hash identifier: M7xS6dM8XaHE01ja5pSRgAbKLbCH8W+mhmOSnenoDK8=
Subject key identifier: C0:71:40:BD:72:8C:7D:78:9E:B2:52:90:BC:57:51:A4:C1:90:49:9A
Certificate issuer: /CN=C3D02995E170CE622F60579EB13D9DD037B46A52
Certificate serial: 2BB942E158795BAB1EA4E6B79141EDDD5EBE1F92
Authority key identifier: C3:D0:29:95:E1:70:CE:62:2F:60:57:9E:B1:3D:9D:D0:37:B4:6A:52
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34362e302f32342d3239203d3e20323733303937.roa
Signing time: Mon 10 Nov 2025 16:52:10 +0000
ROA not before: Mon 10 Nov 2025 16:47:10 +0000
ROA not after: Mon 09 Nov 2026 16:52:10 +0000
asID: 273097
IP address blocks: 201.222.46.0/24 maxlen: 29
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.crl
rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 19:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:b9:42:e1:58:79:5b:ab:1e:a4:e6:b7:91:41:ed:dd:5e:be:1f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3D02995E170CE622F60579EB13D9DD037B46A52
Validity
Not Before: Nov 10 16:47:10 2025 GMT
Not After : Nov 9 16:52:10 2026 GMT
Subject: CN=C07140BD728C7D789EB25290BC5751A4C190499A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7b:d8:e1:d3:e3:49:bf:19:25:ee:05:0b:de:
22:1e:ea:40:06:82:c0:3e:aa:e3:9d:e0:9e:ba:a3:
be:9a:4d:0e:c2:aa:a9:34:02:3d:09:02:f6:ee:f0:
aa:f1:27:6c:97:67:dd:df:a1:ce:69:26:d5:92:18:
89:68:16:46:4d:bb:74:1c:e7:7e:6f:ae:28:4e:aa:
fd:5f:5e:61:1a:ff:ef:42:30:0a:73:8a:e0:c6:1e:
2f:5f:1f:14:9d:6a:d0:65:af:ac:52:b3:73:d6:e5:
15:b6:a4:4e:1e:d9:b2:16:4e:d7:2d:08:18:7c:e5:
a4:c0:c8:f6:6f:61:7f:01:2f:dc:59:83:04:0a:dc:
ec:9c:84:2e:c7:6f:68:f2:0c:db:f7:31:7c:52:d4:
f8:dc:37:e6:0f:a1:f3:9c:6e:c4:a5:64:b9:f0:cf:
92:ed:bc:a2:37:51:5b:4e:0e:d6:85:2d:da:4e:1d:
c7:f7:62:c4:95:b9:29:91:2f:6b:7e:c9:1a:60:94:
55:fb:3d:eb:8b:6c:74:44:70:45:92:30:e5:ad:29:
4c:3b:f6:7a:14:d8:3e:28:3e:42:7b:99:a1:8a:20:
d1:16:45:8b:94:00:06:47:ae:3f:22:ae:8d:2c:b7:
6f:55:f3:de:89:80:b6:ba:ee:47:b1:a4:9d:38:65:
29:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:71:40:BD:72:8C:7D:78:9E:B2:52:90:BC:57:51:A4:C1:90:49:9A
X509v3 Authority Key Identifier:
keyid:C3:D0:29:95:E1:70:CE:62:2F:60:57:9E:B1:3D:9D:D0:37:B4:6A:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/C3D02995E170CE622F60579EB13D9DD037B46A52.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C3D02995E170CE622F60579EB13D9DD037B46A52.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0023B76248CCE07DA25B146284D499148051C29A42F304266149914C14A10507/0/3230312e3232322e34362e302f32342d3239203d3e20323733303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.222.46.0/24
Signature Algorithm: sha256WithRSAEncryption
03:13:f2:bc:b0:36:28:70:a8:93:bf:ab:1e:34:a3:56:f9:46:
ce:90:1b:12:be:aa:8e:7d:50:c4:05:55:43:7f:42:df:4b:f6:
1f:e6:77:2f:a5:14:50:b0:2b:84:47:e6:33:76:e9:75:0f:d5:
50:24:67:62:76:f7:6f:2f:57:49:15:3f:31:87:bb:6b:98:a1:
ce:88:54:db:7c:9f:4a:00:00:34:88:d8:25:a5:77:b7:8d:53:
37:19:c8:13:07:e7:ca:b0:29:b9:49:cf:70:6f:59:20:1b:23:
40:ed:91:2a:7d:4e:1e:e6:76:ef:e0:26:82:80:08:4e:ef:53:
aa:fe:ac:65:aa:e9:55:0f:ad:29:bd:f2:51:21:f2:e1:d3:89:
fe:69:72:a7:7d:88:c9:dc:0d:e2:05:b1:4f:76:d5:ef:96:42:
4b:a8:87:bd:8a:ee:60:54:eb:c8:ee:27:ea:5e:c0:aa:65:6e:
26:6a:c0:4c:de:d1:be:77:bd:f6:bb:87:1f:b5:0a:5d:ba:57:
f8:52:57:ee:0a:b9:c4:05:24:13:d8:ee:e0:8e:78:ca:9d:8a:
f1:9c:1e:5a:b8:00:c0:54:7e:68:10:96:71:1f:1c:be:fa:a1:
0a:86:d4:e2:35:53:c1:26:9e:15:2e:b9:d5:0d:52:91:81:e8:
b9:8d:fe:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:53:34 2025 by rpki-client