This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3135322e3233312e3132382e302f31372d3234203d3e203532323238.roa
File: 3135322e3233312e3132382e302f31372d3234203d3e203532323238.roa (raw, json)
Hash identifier: Ahn52UqUM4kWZ+J3z28iTqRbp7InytbisdPhxKp9xsc=
Subject key identifier: 8F:4B:C5:CE:BF:38:B2:2A:C4:FE:48:26:68:A1:8D:BB:C2:65:19:D0
Certificate issuer: /CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Certificate serial: 5D57C85E3409B631DE076D638FEABEE7469742F2
Authority key identifier: F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3135322e3233312e3132382e302f31372d3234203d3e203532323238.roa
Signing time: Tue 06 Jan 2026 19:00:06 +0000
ROA not before: Tue 06 Jan 2026 18:55:06 +0000
ROA not after: Tue 05 Jan 2027 19:00:06 +0000
asID: 52228
IP address blocks: 152.231.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:57:c8:5e:34:09:b6:31:de:07:6d:63:8f:ea:be:e7:46:97:42:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F511ACBA72E80C00FEC13D30AC676138A7AC48C7
Validity
Not Before: Jan 6 18:55:06 2026 GMT
Not After : Jan 5 19:00:06 2027 GMT
Subject: CN=8F4BC5CEBF38B22AC4FE482668A18DBBC26519D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:67:d1:50:bb:d7:56:36:da:e5:44:30:e7:
96:2e:dc:88:d8:a2:ce:e2:02:78:19:c5:df:f3:88:
a6:b5:e0:14:93:5b:91:a0:18:dd:41:90:95:d4:05:
ff:4f:e9:0a:64:5f:25:93:e7:10:bd:14:c4:d4:5f:
47:0c:a1:fe:71:94:dc:48:33:c9:fd:e8:5d:92:6c:
0a:d8:cb:ab:97:26:f0:df:d3:64:cd:c7:bd:26:d7:
e5:b0:e1:e3:78:0d:17:b7:da:7f:1d:d6:44:66:2c:
78:a8:7b:3a:1f:6a:08:69:eb:a0:b7:07:79:ea:60:
f6:e4:7e:b6:ff:19:b2:7e:51:14:d9:8b:d1:81:0e:
80:fd:a2:29:14:db:d9:35:4b:b9:e7:94:96:89:5a:
45:78:d3:65:c8:2a:df:0c:e1:dd:21:7f:2b:f3:94:
79:fa:e9:29:25:02:8f:f6:64:cb:02:75:c9:a2:37:
16:bc:db:98:64:fb:48:99:f4:4d:e3:44:f5:19:f5:
49:1e:74:70:10:a3:0d:25:7a:11:9b:11:e8:01:ae:
bd:b0:9f:48:23:b5:02:66:46:3e:5b:6c:10:d9:52:
a5:70:14:f0:7b:5a:d1:e2:67:75:56:b6:60:ac:88:
92:92:6b:47:f9:b9:01:4d:9b:f9:12:3a:36:d5:3d:
54:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4B:C5:CE:BF:38:B2:2A:C4:FE:48:26:68:A1:8D:BB:C2:65:19:D0
X509v3 Authority Key Identifier:
keyid:F5:11:AC:BA:72:E8:0C:00:FE:C1:3D:30:AC:67:61:38:A7:AC:48:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F511ACBA72E80C00FEC13D30AC676138A7AC48C7.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35A1A47C82E544353E4BD3679D25528DD336C0C3BE7F9C8B88454E7C417B69FF/0/3135322e3233312e3132382e302f31372d3234203d3e203532323238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.231.128.0/17
Signature Algorithm: sha256WithRSAEncryption
98:dd:87:93:fe:14:43:aa:78:a5:59:17:71:99:6d:d0:81:2d:
82:82:50:6b:24:98:fd:40:c5:40:92:f4:52:4c:f9:5d:30:78:
b2:3d:94:7d:5d:f3:1c:19:91:80:9a:5b:67:39:8f:2b:b2:c1:
9e:41:13:cd:07:7f:79:5f:7e:0a:ab:b8:f9:73:5d:c7:cf:51:
3c:42:86:2a:2f:56:32:42:64:d1:33:46:b7:78:d7:9a:da:b1:
14:84:76:79:c1:a4:09:36:66:41:85:b3:58:f6:9a:84:27:ff:
31:31:25:63:c0:b2:b8:ae:89:7c:19:fd:da:86:bb:31:b8:2a:
53:d5:5b:c2:b8:d9:26:ab:ff:e6:98:af:06:d4:36:ef:fb:bc:
8d:fb:ad:64:92:7d:86:19:ee:fc:f2:e9:e0:f9:48:5c:78:65:
91:57:d9:41:41:08:0d:02:80:71:0d:a2:52:66:ba:3d:83:d3:
c6:7e:ba:e5:08:c4:d9:1e:03:76:f6:85:f0:dc:26:35:9c:23:
b1:88:a7:fd:e4:ab:75:e9:1a:93:82:3b:b5:ac:c4:ce:aa:45:
74:bb:12:ce:22:f0:98:f1:43:eb:5c:66:32:35:64:ff:72:96:
5c:48:28:9c:62:2b:61:d8:6d:42:6f:4e:a4:15:ab:0c:1c:b3:
8c:6f:b5:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:04:58 2026 by rpki-client