This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3138352e34322e32302e302f32322d3232203d3e20323632313931.roa
File: 3138352e34322e32302e302f32322d3232203d3e20323632313931.roa (raw, json)
Hash identifier: HLcRsYuwxg0bAy1Tanbo7fbPZi351rksolkIPcv2DXQ=
Subject key identifier: 7A:2E:A7:A8:A5:ED:DE:08:DA:BE:DF:F6:43:48:97:C0:D7:CF:6B:0B
Certificate issuer: /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial: 740340C1D2D4027D9D439901E53141931AE82B5A
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3138352e34322e32302e302f32322d3232203d3e20323632313931.roa
Signing time: Mon 15 Dec 2025 16:35:00 +0000
ROA not before: Mon 15 Dec 2025 16:30:00 +0000
ROA not after: Mon 14 Dec 2026 16:35:00 +0000
asID: 262191
IP address blocks: 185.42.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 21 Dec 2025 08:09:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:03:40:c1:d2:d4:02:7d:9d:43:99:01:e5:31:41:93:1a:e8:2b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Validity
Not Before: Dec 15 16:30:00 2025 GMT
Not After : Dec 14 16:35:00 2026 GMT
Subject: CN=7A2EA7A8A5EDDE08DABEDFF6434897C0D7CF6B0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:07:2a:85:51:f1:ac:cb:8b:aa:31:64:27:88:
38:9d:ec:df:d5:2a:9b:32:d8:3e:b5:c9:ee:bb:9e:
d8:1d:91:46:f6:2f:f7:57:40:82:0d:98:dd:12:56:
22:8c:b0:99:5e:81:d0:eb:32:27:69:47:06:de:b6:
42:a8:31:b5:31:a7:02:ee:b6:77:cb:39:a3:53:8c:
d1:2d:95:84:c8:13:85:08:bd:12:94:f2:e6:3f:a2:
78:2b:8f:f3:ec:5b:6a:f7:14:ec:d6:9f:b7:d8:6c:
a1:6b:0f:b3:51:99:8c:d6:c9:e9:4f:5a:d4:53:ce:
ac:26:83:7f:fb:e4:b1:a6:60:96:45:d3:fd:70:b6:
67:73:11:c2:05:74:e4:6c:d2:cf:bc:14:b5:a8:e8:
38:e0:0d:bf:6c:38:7f:21:18:42:22:3f:0f:0d:e5:
2f:62:cc:b4:ea:55:e4:63:8f:26:6a:02:65:66:dc:
ce:90:1b:f1:9e:25:14:b1:42:4e:4a:67:96:09:37:
d4:9d:88:aa:f8:3c:a0:74:e6:ef:d4:bc:70:66:b0:
85:dc:d4:d9:67:df:98:c3:0c:0c:e7:cd:6a:8e:79:
c8:c0:1a:cb:cc:75:d4:f7:01:b6:7e:c0:84:1b:97:
f4:be:d0:90:2e:fe:35:9d:63:06:1e:4a:4a:12:59:
71:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2E:A7:A8:A5:ED:DE:08:DA:BE:DF:F6:43:48:97:C0:D7:CF:6B:0B
X509v3 Authority Key Identifier:
keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/3138352e34322e32302e302f32322d3232203d3e20323632313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.20.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:ef:59:37:cc:6e:51:8a:54:c9:21:c3:b2:88:40:ef:8a:6d:
41:c1:25:b9:bb:2f:3c:75:3f:38:7b:21:32:29:9f:fc:8b:7a:
5c:25:cb:2d:19:44:b6:8d:7a:4a:23:21:a0:f7:22:96:e9:32:
db:c1:02:ac:07:c6:e3:6f:18:65:d9:ae:c4:85:7f:e7:87:b5:
76:d5:55:36:2b:cd:15:1a:ca:29:4d:d8:35:c6:20:af:ac:45:
29:f6:2d:0e:9d:61:3a:e7:11:f0:c7:ee:40:5e:c5:23:43:3f:
bf:b8:f5:48:6e:4c:5b:b0:30:ca:cd:18:2e:51:f0:ea:ad:9f:
3d:f9:e0:1f:21:c0:02:5b:d2:9a:a2:1c:32:bf:8b:f1:8e:d2:
14:89:66:66:1a:c7:bd:0d:35:e3:f6:03:1f:ca:c4:6b:06:3e:
eb:08:98:1a:04:0f:0f:f8:50:0d:e4:1b:7d:ed:c9:c4:2b:6a:
a1:47:32:24:e9:9b:9d:f4:f9:40:39:02:20:b7:cd:e2:60:60:
47:f7:20:c8:78:74:2a:6c:8d:f9:b5:3d:13:8e:7f:8a:ef:de:
17:ce:4b:33:cc:89:63:3d:3a:be:c7:ed:c3:e1:d2:7a:1e:5d:
85:a1:02:92:ab:ae:1c:2e:a1:34:76:72:4f:a1:ae:f5:3e:e9:
d7:bf:7c:38
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUdANAwdLUAn2dQ5kB5TFBkxroK1owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNTEyMTUxNjMwMDBaFw0yNjEyMTQxNjM1MDBaMDMxMTAvBgNV
BAMTKDdBMkVBN0E4QTVFRERFMDhEQUJFREZGNjQzNDg5N0MwRDdDRjZCMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMByqFUfGsy4uqMWQniDid7N/V
Kpsy2D61ye67ntgdkUb2L/dXQIINmN0SViKMsJlegdDrMidpRwbetkKoMbUxpwLu
tnfLOaNTjNEtlYTIE4UIvRKU8uY/ongrj/PsW2r3FOzWn7fYbKFrD7NRmYzWyelP
WtRTzqwmg3/75LGmYJZF0/1wtmdzEcIFdORs0s+8FLWo6DjgDb9sOH8hGEIiPw8N
5S9izLTqVeRjjyZqAmVm3M6QG/GeJRSxQk5KZ5YJN9SdiKr4PKB05u/UvHBmsIXc
1Nln35jDDAznzWqOecjAGsvMddT3AbZ+wIQbl/S+0JAu/jWdYwYeSkoSWXFVAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQUei6nqKXt3gjavt/2Q0iXwNfPawswHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMxMzgzNTJlMzQzMjJlMzIzMDJlMzAy
ZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzMjMxMzkzMS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEArkqFDAN
BgkqhkiG9w0BAQsFAAOCAQEADe9ZN8xuUYpUySHDsohA74ptQcElubsvPHU/OHsh
Mimf/It6XCXLLRlEto16SiMhoPciluky28ECrAfG428YZdmuxIV/54e1dtVVNivN
FRrKKU3YNcYgr6xFKfYtDp1hOucR8MfuQF7FI0M/v7j1SG5MW7Awys0YLlHw6q2f
PfngHyHAAlvSmqIcMr+L8Y7SFIlmZhrHvQ014/YDH8rEawY+6wiYGgQPD/hQDeQb
fe3JxCtqoUcyJOmbnfT5QDkCILfN4mBgR/cgyHh0KmyN+bU9E45/iu/eF85LM8yJ
Yz06vsftw+HSeh5dhaECkquuHC6hNHZyT6Gu9T7p1798OA==
-----END CERTIFICATE-----
Generated at Wed Dec 17 20:10:27 2025 by rpki-client