This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3230312e3133312e3134382e302f32322d3234203d3e203134373534.roa
File: 3230312e3133312e3134382e302f32322d3234203d3e203134373534.roa (raw, json)
Hash identifier: t4z4caP0a7EonREotU58Hw6LeY09engGormwb7WSsiE=
Subject key identifier: 74:47:7B:66:AE:B4:D7:A9:50:A0:ED:B7:E9:EC:54:28:E0:C6:EC:FD
Certificate issuer: /CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Certificate serial: 26E67A7053DA843ED4C1685F547583DE647C9DCD
Authority key identifier: F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3230312e3133312e3134382e302f32322d3234203d3e203134373534.roa
Signing time: Tue 06 Jan 2026 20:50:52 +0000
ROA not before: Tue 06 Jan 2026 20:45:52 +0000
ROA not after: Tue 05 Jan 2027 20:50:52 +0000
asID: 14754
IP address blocks: 201.131.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 08:34:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e6:7a:70:53:da:84:3e:d4:c1:68:5f:54:75:83:de:64:7c:9d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F07AC2C3313D74F22585389241B3BE2A7B89D7BF
Validity
Not Before: Jan 6 20:45:52 2026 GMT
Not After : Jan 5 20:50:52 2027 GMT
Subject: CN=74477B66AEB4D7A950A0EDB7E9EC5428E0C6ECFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:39:f8:c9:2b:23:01:d3:05:2f:0d:b1:fa:
f3:b3:9a:08:65:e4:ec:cb:00:ee:3b:d8:8f:61:4c:
16:03:07:85:fa:55:00:5a:ce:b7:8c:06:89:dd:49:
38:79:69:b4:55:60:38:ae:07:24:1a:c9:9c:45:37:
50:ce:27:99:6e:ab:7e:92:e4:a6:9c:e5:5d:c9:3d:
79:2a:4a:7a:58:10:e2:51:92:8c:4b:19:88:dd:49:
74:55:19:6f:7e:da:ee:3e:b7:1b:9a:06:83:9b:7d:
96:6d:14:e6:00:f8:1e:69:af:5f:d9:14:c3:71:da:
06:1d:20:cd:d6:c3:e5:72:c1:36:10:c9:3f:d2:75:
b8:31:80:6c:08:eb:21:43:5e:75:d9:5b:33:6c:ec:
a0:5f:e9:89:8d:0a:f7:8f:04:78:6f:fb:5c:d7:0c:
a8:e5:ef:93:e8:a8:3e:fe:ca:eb:b5:8d:c4:0f:9a:
b6:25:09:07:6f:91:04:cb:df:df:8a:db:a9:ca:8f:
62:b5:5e:17:e5:82:ff:92:ec:65:45:4a:21:9a:a9:
0d:34:81:7f:e9:09:71:e9:57:97:b7:d2:b1:13:74:
44:3e:fd:65:e7:5a:13:c2:ce:4d:88:a4:bc:0a:ef:
69:e0:a8:83:c6:a9:7c:e6:52:18:ba:78:d6:0d:ce:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:47:7B:66:AE:B4:D7:A9:50:A0:ED:B7:E9:EC:54:28:E0:C6:EC:FD
X509v3 Authority Key Identifier:
keyid:F0:7A:C2:C3:31:3D:74:F2:25:85:38:92:41:B3:BE:2A:7B:89:D7:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F07AC2C3313D74F22585389241B3BE2A7B89D7BF.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04B2585B1DE5EF4EF7CF0720D78D521461F36D732862185DE75BD8B5896FD242/0/3230312e3133312e3134382e302f32322d3234203d3e203134373534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:ea:7f:f9:af:65:ae:a9:c3:62:e0:c7:72:c1:e5:f4:c0:78:
5f:99:b7:4f:2d:7a:7f:f3:c0:3f:61:0f:6b:23:17:7f:27:2a:
9b:19:0a:21:c1:2e:81:1a:f9:f5:2d:4e:aa:05:b6:3a:80:2e:
57:e3:97:a4:82:16:b4:fc:63:19:14:e7:3e:c1:d5:d0:70:1a:
3b:d9:d8:87:87:54:5a:f5:e4:11:6e:34:bf:2e:36:fc:ff:94:
e1:18:1a:40:76:4e:bf:fd:b3:fd:53:c1:b4:58:e4:1d:d0:cb:
30:61:72:c7:4e:5e:fa:e9:74:c6:2e:48:ae:5a:b1:fa:93:3a:
5f:5c:10:41:c7:09:e6:0a:d1:1d:5d:44:50:64:90:81:a0:47:
2c:eb:a6:b0:fe:d2:d4:4f:d2:08:6e:05:2a:7c:d1:68:f9:a1:
12:4a:6f:68:b8:97:91:f4:16:ca:f2:25:3d:2c:3b:60:ce:ef:
50:a2:c7:86:76:e2:95:b7:f2:1a:a2:38:5e:e1:52:df:6f:b5:
80:81:10:d8:0b:b5:0a:78:48:8a:c1:ee:03:c4:88:d5:49:36:
23:00:9e:08:5e:32:6e:dc:5e:67:a4:f0:42:57:e0:cc:87:54:
3a:fd:37:ab:4d:df:2d:1b:4d:52:22:51:73:97:af:b2:76:73:
b0:95:2b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:05:25 2026 by rpki-client