This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3230342e302f32322d3232203d3e203634313132.roa
File: 3136382e3233312e3230342e302f32322d3232203d3e203634313132.roa (raw, json)
Hash identifier: PNVrvmuvpilJn5VWcFRCJZkh6nOcEN2noj2NE0Tbr4s=
Subject key identifier: 92:19:18:23:7A:F8:40:50:D1:17:49:D0:2A:5E:19:ED:75:01:C0:FD
Certificate issuer: /CN=2EEA5CACCAFE22736FD46CB2A532C287D9472855
Certificate serial: 756F0760DDBC1A47BEAF9C5DB888266F2A868309
Authority key identifier: 2E:EA:5C:AC:CA:FE:22:73:6F:D4:6C:B2:A5:32:C2:87:D9:47:28:55
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3230342e302f32322d3232203d3e203634313132.roa
Signing time: Mon 29 Dec 2025 18:15:00 +0000
ROA not before: Mon 29 Dec 2025 18:10:00 +0000
ROA not after: Mon 28 Dec 2026 18:15:00 +0000
asID: 64112
IP address blocks: 168.231.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.crl
rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 19:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:6f:07:60:dd:bc:1a:47:be:af:9c:5d:b8:88:26:6f:2a:86:83:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EEA5CACCAFE22736FD46CB2A532C287D9472855
Validity
Not Before: Dec 29 18:10:00 2025 GMT
Not After : Dec 28 18:15:00 2026 GMT
Subject: CN=921918237AF84050D11749D02A5E19ED7501C0FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:84:06:11:bd:31:f8:2d:3d:e6:d2:ef:62:
b2:3c:63:65:56:96:7d:d3:ee:cf:c5:0b:55:c1:9c:
e8:fa:d7:47:f9:4b:6e:4b:ab:b2:05:7a:f8:02:63:
86:69:72:fe:9d:4d:3a:32:9c:f2:28:5a:2c:76:20:
6b:63:c2:12:9f:ff:75:bd:ea:90:09:bf:67:c2:28:
97:13:55:5d:f5:4e:b5:c6:f4:cd:39:c5:ce:38:7e:
6f:31:75:51:c6:7d:a2:7c:32:e8:79:a4:3d:a2:29:
5c:aa:b1:a3:00:73:dd:b5:d6:5d:0e:dd:8b:74:29:
32:d1:ba:bc:8d:e0:09:19:c3:25:c4:fc:f0:97:cf:
73:5e:9f:88:48:b1:9c:98:c6:aa:ea:f9:99:0d:fc:
cf:44:e0:17:40:2d:2d:25:01:7b:b2:d1:7d:b9:e2:
c0:a8:77:3e:d8:42:4d:4e:bd:f1:3f:0b:57:8c:45:
88:a5:f5:91:e4:f1:91:6b:ed:9c:41:0f:1b:89:fa:
68:e2:d0:d2:c4:8a:9d:b5:68:14:8a:f4:dc:44:33:
a6:3a:f0:5a:d3:42:29:ba:60:75:98:59:63:4d:3f:
20:4c:5a:ac:d7:68:85:48:7d:3a:3d:ff:7a:6f:20:
0f:67:ed:82:5e:09:df:40:e2:42:b6:3b:07:f4:53:
41:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:19:18:23:7A:F8:40:50:D1:17:49:D0:2A:5E:19:ED:75:01:C0:FD
X509v3 Authority Key Identifier:
keyid:2E:EA:5C:AC:CA:FE:22:73:6F:D4:6C:B2:A5:32:C2:87:D9:47:28:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2EEA5CACCAFE22736FD46CB2A532C287D9472855.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/297686047B9AE81F406B469105F682CB4EF837E53211B833FA1F371B9B43D68E/0/3136382e3233312e3230342e302f32322d3232203d3e203634313132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.231.204.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:a4:66:7c:85:34:55:cb:52:a8:8f:62:2e:26:c2:e9:91:55:
c4:5e:1c:64:c6:23:46:51:49:5f:6f:aa:14:c3:31:28:08:88:
e7:37:4a:46:60:3c:12:9c:e3:41:df:1e:13:12:f5:b2:dd:24:
40:6f:7e:86:47:bb:0a:6c:90:36:6f:3a:dd:f6:98:0e:4e:f0:
08:d7:36:65:e4:11:98:2b:20:60:1b:54:5a:ad:04:c8:4b:f0:
42:27:e1:eb:a5:30:b5:e2:a3:90:b4:f8:27:cb:36:d8:57:fe:
9e:1e:ce:28:f9:66:3b:77:35:17:b6:2f:3d:8b:b6:52:8a:a4:
e4:73:33:3b:93:34:b1:66:d4:8c:a8:15:9a:8b:16:15:62:17:
2c:7e:f1:56:83:fa:8d:90:a0:74:77:2e:6f:f2:d3:83:af:b7:
62:ff:5d:2c:82:ca:a1:38:8b:f5:35:65:f0:70:57:5a:f1:4b:
3d:95:f3:0a:30:00:db:e9:c0:db:45:5b:cf:9c:c9:97:e9:4a:
5b:12:4e:3c:ee:9b:43:ba:2f:b9:c9:25:2f:ce:d1:db:b0:0b:
c4:94:78:f4:13:99:7a:16:c2:7e:f1:51:23:c8:1f:17:0b:59:
12:6a:29:cd:b7:6e:6d:27:76:9a:19:b6:04:99:41:11:ab:61:
ec:b0:33:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:47:45 2026 by rpki-client