This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/3138362e3138392e3234302e302f32322d3234203d3e203631343831.roa
File: 3138362e3138392e3234302e302f32322d3234203d3e203631343831.roa (raw, json)
Hash identifier: XXAb4s56oObfUvBVgYNZC8yyf5inJnjYBfKroaRCvtE=
Subject key identifier: DE:14:ED:CE:1E:DD:6E:F2:31:3E:F9:5C:74:88:63:A2:D6:63:DA:8D
Certificate issuer: /CN=CF2E2C753A200707CD61AACD7110A7372C505538
Certificate serial: 3D8F9ABC56619B08545D2E3106C273F1D55D0C60
Authority key identifier: CF:2E:2C:75:3A:20:07:07:CD:61:AA:CD:71:10:A7:37:2C:50:55:38
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/3138362e3138392e3234302e302f32322d3234203d3e203631343831.roa
Signing time: Fri 07 Nov 2025 18:15:00 +0000
ROA not before: Fri 07 Nov 2025 18:10:00 +0000
ROA not after: Fri 06 Nov 2026 18:15:00 +0000
asID: 61481
IP address blocks: 186.189.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.crl
rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 09 Dec 2025 22:41:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8f:9a:bc:56:61:9b:08:54:5d:2e:31:06:c2:73:f1:d5:5d:0c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF2E2C753A200707CD61AACD7110A7372C505538
Validity
Not Before: Nov 7 18:10:00 2025 GMT
Not After : Nov 6 18:15:00 2026 GMT
Subject: CN=DE14EDCE1EDD6EF2313EF95C748863A2D663DA8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:4e:bf:27:09:d6:35:f5:e5:04:fe:57:6f:
41:02:3b:3e:ad:18:20:b9:8e:59:82:92:22:43:9d:
d8:b5:40:11:f9:29:cb:7b:f3:df:8c:8a:2f:ad:36:
0d:ce:27:13:ab:03:eb:2a:99:c5:9d:04:74:c7:38:
f0:bc:f1:cf:37:9e:ca:31:00:96:2d:66:74:14:de:
75:87:ce:33:00:e4:33:1e:ae:24:8c:7f:04:e2:b6:
16:e0:15:4f:4e:f4:5a:a8:f5:39:49:aa:e2:4f:4d:
44:d8:a8:46:a6:61:26:85:69:b0:8b:3f:d8:f0:c2:
dc:be:67:0e:b3:1e:77:9f:1e:52:4e:2b:a8:cc:35:
f1:01:22:a8:6c:18:24:a7:56:39:fd:7a:83:c9:1e:
26:cf:5e:40:13:01:bc:7c:ad:a9:48:38:2b:0c:c4:
5a:b0:e3:e8:65:c3:43:a2:aa:23:03:c1:18:94:6f:
8a:b2:d0:d8:fb:a6:58:17:2a:7c:1e:5c:da:8d:de:
cb:86:cb:3a:f6:39:25:cb:c5:53:d9:8b:33:89:d7:
9d:a9:8b:6b:0e:3c:76:0c:c1:1e:fa:63:d2:51:ab:
30:b6:bc:d2:a1:e2:0c:e3:db:11:bd:ea:96:22:a2:
e3:f4:0b:29:33:f0:2d:6e:69:f2:f5:34:28:fa:9f:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:14:ED:CE:1E:DD:6E:F2:31:3E:F9:5C:74:88:63:A2:D6:63:DA:8D
X509v3 Authority Key Identifier:
keyid:CF:2E:2C:75:3A:20:07:07:CD:61:AA:CD:71:10:A7:37:2C:50:55:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/CF2E2C753A200707CD61AACD7110A7372C505538.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF2E2C753A200707CD61AACD7110A7372C505538.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/308E26FF4B570E3B0CA88E840F57870C2A4658EC0CF835A3CF49B3B530A58374/0/3138362e3138392e3234302e302f32322d3234203d3e203631343831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
186.189.240.0/22
Signature Algorithm: sha256WithRSAEncryption
21:0a:8d:bb:f5:d9:8f:c8:7a:40:28:9e:6d:97:9c:d1:bd:8b:
cd:9e:3d:02:2e:63:83:2b:74:a5:15:56:4f:ec:9f:f5:03:17:
ee:10:a9:b2:cb:c8:f0:61:4b:1c:7f:65:ed:be:83:2e:e0:c8:
65:24:30:a8:b9:04:8d:90:f9:6a:08:57:fa:a6:08:ba:85:c7:
26:12:8a:e3:50:05:48:c7:92:a7:fe:59:59:61:cf:22:ac:2a:
62:44:c2:f2:97:f9:e7:15:61:17:57:1b:40:5d:bc:b6:25:9d:
b4:5a:71:f7:8c:2e:15:42:69:26:63:98:e2:8f:a5:0f:6c:6a:
a7:59:e1:55:48:da:89:09:97:9e:c6:ae:d4:eb:b0:92:55:95:
e5:87:1d:be:ee:28:2a:de:77:a8:8a:51:6b:16:b6:a9:ea:15:
6e:98:0d:30:d5:d1:e3:49:58:fb:9b:3b:11:b6:75:8f:18:d3:
da:6c:df:9b:1e:bc:46:66:d5:d0:f0:af:b6:09:39:97:51:e0:
13:54:42:64:39:bf:07:a1:35:f7:bd:dd:a1:c9:39:5d:08:9d:
ee:88:12:ce:e6:cc:68:b7:ea:2d:28:ad:3b:1c:de:90:b6:92:
47:a1:fe:b2:64:7a:e7:12:1e:63:eb:d7:63:35:38:e9:e3:a4:
ee:c4:42:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 23:22:03 2025 by rpki-client