This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3230312e3232322e36342e302f31382d3234203d3e203235363230.roa
File: 3230312e3232322e36342e302f31382d3234203d3e203235363230.roa (raw, json)
Hash identifier: eGnc//PpmqVKqnndFlepBb+iXYbBOoDFpfvylUCZqmc=
Subject key identifier: BC:13:36:D7:01:2F:AE:29:6E:7C:CB:F1:5B:2C:94:07:A4:3F:EF:2A
Certificate issuer: /CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Certificate serial: 4FE8B81DA1BD8EC827EF5CCEBDAAF430175EEC9C
Authority key identifier: 3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3230312e3232322e36342e302f31382d3234203d3e203235363230.roa
Signing time: Tue 06 Jan 2026 19:23:05 +0000
ROA not before: Tue 06 Jan 2026 19:18:05 +0000
ROA not after: Tue 05 Jan 2027 19:23:05 +0000
asID: 25620
IP address blocks: 201.222.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e8:b8:1d:a1:bd:8e:c8:27:ef:5c:ce:bd:aa:f4:30:17:5e:ec:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A46654D6F02CEC41EAA4339498486C609BF34EC
Validity
Not Before: Jan 6 19:18:05 2026 GMT
Not After : Jan 5 19:23:05 2027 GMT
Subject: CN=BC1336D7012FAE296E7CCBF15B2C9407A43FEF2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:4b:d3:c7:8d:b1:5f:a7:d3:57:09:f7:07:
7b:31:4f:bc:3b:01:c3:97:6b:05:8b:94:33:ff:8b:
15:66:65:d2:d0:38:83:4a:6f:da:aa:2d:c1:72:e9:
60:a6:7f:45:f9:f5:c4:68:82:85:1c:62:76:91:d2:
3b:19:ec:cb:a0:78:eb:eb:21:99:e6:d6:24:40:05:
78:b2:dd:f8:b9:24:89:a6:25:50:77:46:46:b2:61:
61:ef:bd:3b:dc:b3:74:bf:cb:32:73:bf:71:03:ea:
f3:4a:a0:2d:7a:9b:01:22:ef:b6:11:2b:4b:cc:d5:
db:f5:3d:f9:1b:e1:70:e6:68:03:32:f0:a4:04:78:
fe:a6:4c:0f:c6:01:45:ac:42:62:f7:2d:4d:ab:93:
f2:31:47:e0:3e:df:15:6e:27:b6:40:0e:c4:b6:68:
22:bc:5f:67:8a:2c:b4:9d:3e:ca:2e:27:fd:25:91:
c3:18:2e:52:96:48:60:09:61:10:07:dc:1b:1d:10:
1f:9f:46:28:5a:ea:c4:70:a1:19:8e:61:3f:43:7c:
00:b1:6d:db:5b:de:d4:86:11:de:1c:0c:98:e3:70:
24:b7:3f:0d:fb:81:82:4f:03:d0:66:42:c0:c8:45:
d1:ac:5a:92:a2:98:17:37:57:6e:2e:cd:9a:61:ef:
fc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:13:36:D7:01:2F:AE:29:6E:7C:CB:F1:5B:2C:94:07:A4:3F:EF:2A
X509v3 Authority Key Identifier:
keyid:3A:46:65:4D:6F:02:CE:C4:1E:AA:43:39:49:84:86:C6:09:BF:34:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A46654D6F02CEC41EAA4339498486C609BF34EC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00F1B8552988AC7B299C27056F4733C2303212CA2BA06B2A2CF2C5C8038CFF2C/0/3230312e3232322e36342e302f31382d3234203d3e203235363230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.222.64.0/18
Signature Algorithm: sha256WithRSAEncryption
56:02:e3:0b:99:e9:d6:42:f6:a8:5e:10:67:ac:39:84:e8:e1:
fc:62:72:8f:2e:5a:f0:32:ae:62:9d:f6:79:52:9d:06:bd:41:
22:5a:29:74:e2:6b:d9:48:e8:d3:8a:7b:18:4d:b6:b7:f5:d0:
ee:e4:75:f4:05:87:71:8f:1e:81:d0:19:3a:b0:a2:13:30:10:
d5:53:2f:da:9e:6c:39:31:68:8c:c6:94:77:bf:56:a9:ac:6a:
75:a4:41:90:3b:01:e0:2f:9e:14:00:58:47:be:07:5b:4c:b3:
63:36:a2:8b:56:3b:18:10:0e:87:27:90:13:74:ba:49:80:b9:
e9:d5:99:ff:9b:17:ae:40:00:d7:10:4d:fa:da:cc:a8:f8:94:
4a:a5:06:5d:48:9b:38:d4:16:db:34:83:95:57:55:62:57:81:
07:d2:d6:9b:bf:18:81:f7:30:27:e0:f9:0a:d0:ef:a4:7c:aa:
22:6c:7d:b9:25:78:5b:cb:52:67:60:de:01:29:ab:72:45:bd:
95:1e:80:cc:5b:e8:1f:47:0a:11:be:38:ff:4d:b7:9d:f3:c6:
59:21:2b:a0:39:d8:5f:84:46:05:35:6b:44:66:46:72:bf:62:
89:07:62:70:4b:67:a0:aa:44:dd:27:db:c2:24:ad:cd:1a:a8:
e2:e3:37:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:47 2026 by rpki-client