This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133322e3235352e3233362e302f32322d3234203d3e203532343339.roa
File: 3133322e3235352e3233362e302f32322d3234203d3e203532343339.roa (raw, json)
Hash identifier: nH3EY/vbgd/FgpoVUV4knNkAe39hX3Sq5Er52FQ7PsQ=
Subject key identifier: 40:84:83:5E:7C:F1:D7:A4:CC:BE:62:D1:42:BA:22:16:80:8D:FF:04
Certificate issuer: /CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Certificate serial: 5A54779D03AE6D8AA2EE844AD208DAF7FBCEB258
Authority key identifier: A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133322e3235352e3233362e302f32322d3234203d3e203532343339.roa
Signing time: Tue 06 Jan 2026 19:40:56 +0000
ROA not before: Tue 06 Jan 2026 19:35:56 +0000
ROA not after: Tue 05 Jan 2027 19:40:56 +0000
asID: 52439
IP address blocks: 132.255.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:54:77:9d:03:ae:6d:8a:a2:ee:84:4a:d2:08:da:f7:fb:ce:b2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD
Validity
Not Before: Jan 6 19:35:56 2026 GMT
Not After : Jan 5 19:40:56 2027 GMT
Subject: CN=4084835E7CF1D7A4CCBE62D142BA2216808DFF04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:d8:07:ed:82:6c:ea:24:93:d3:75:2b:ed:
26:8f:a8:57:aa:af:e9:26:e7:f6:1e:fe:00:a3:3a:
08:52:3f:57:b3:42:71:76:d5:ae:6a:1e:67:0b:ba:
3a:f5:9f:56:9a:c8:04:2c:83:97:22:af:35:78:1f:
29:74:6e:3a:e5:a8:f3:78:f8:df:fb:ed:ae:c0:7c:
5e:45:0d:e3:16:7d:1b:6d:b3:0e:f4:13:a8:47:a0:
3d:f1:08:08:03:74:5f:51:25:fd:49:c2:d9:14:de:
b3:6d:17:3a:d9:6d:2d:3f:0f:2f:16:c9:83:98:6d:
6d:27:0f:5b:a0:be:01:0b:db:2a:0a:f2:7c:d2:be:
49:fb:ff:f6:6e:18:ed:dd:79:cc:c5:df:c1:69:99:
31:a8:66:d8:94:48:d4:a0:09:a5:6e:23:04:5e:32:
a4:8a:4c:c3:1d:b5:ee:dc:2e:b8:03:46:b2:d3:91:
fb:0e:5e:92:a9:59:27:6d:1f:be:7f:32:cb:ba:fb:
e9:71:9e:2d:b8:11:0d:86:ed:83:85:52:9c:85:fc:
df:e9:42:74:1c:69:5a:73:34:5c:8f:f6:1e:c9:8f:
1c:2e:51:90:2c:8c:fa:b1:89:1b:e8:45:87:c9:5c:
34:8a:a6:2d:c7:f5:11:6b:0f:25:06:41:fd:ed:25:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:84:83:5E:7C:F1:D7:A4:CC:BE:62:D1:42:BA:22:16:80:8D:FF:04
X509v3 Authority Key Identifier:
keyid:A5:AD:A8:47:94:7F:FC:AA:F2:9C:2E:41:F2:DE:F2:3F:E8:2B:94:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5ADA847947FFCAAF29C2E41F2DEF23FE82B94DD.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1E17080BF341711B27BE627D469BC3FEC4C5DD66588222F5E5558083B67A36C8/0/3133322e3235352e3233362e302f32322d3234203d3e203532343339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.236.0/22
Signature Algorithm: sha256WithRSAEncryption
58:a1:df:48:6f:eb:7d:24:65:14:70:a0:8d:e7:f4:89:2d:4d:
cd:dc:29:43:61:10:4e:32:57:d5:51:4f:a0:b8:d4:84:0c:97:
58:43:e9:1e:5a:34:97:20:87:fb:56:af:46:0a:6f:a0:4b:ea:
13:aa:89:74:1e:27:de:15:4f:b5:f4:96:2b:d6:20:78:c8:3e:
59:30:85:48:79:9b:81:2a:cf:db:89:e1:63:9e:b1:10:28:2d:
d9:83:19:bd:3a:13:09:3e:fa:a0:51:be:10:ff:97:a0:ce:63:
c7:ef:06:1f:a4:43:af:0a:58:cc:6b:15:98:15:24:a7:ad:40:
6c:55:83:c5:79:a1:f8:6a:34:a0:82:97:f7:72:cb:56:ea:63:
89:65:fd:b5:30:93:2e:6d:61:c5:2e:58:f6:05:c2:bb:69:db:
8c:13:c8:d3:b2:17:a9:63:7a:5f:23:ef:51:8b:c5:95:e3:ee:
6f:c2:d6:25:93:42:12:b7:8f:90:c9:d1:32:77:ad:7a:2b:42:
e1:ee:b1:ea:40:91:d1:8b:55:59:db:0b:47:fd:b2:41:89:09:
af:29:83:e4:c5:01:07:6b:69:82:24:6a:b6:77:3d:8e:66:7a:
d9:2e:81:d7:19:82:ec:92:e1:57:54:e4:57:ad:3a:da:20:ba:
78:47:7e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:23 2026 by rpki-client