This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230312e3230382e302e302f31342d3234203d3e2038303438.roa
File: 3230312e3230382e302e302f31342d3234203d3e2038303438.roa (raw, json)
Hash identifier: E42cf56fJcqqZU8YlEknHbbv3w2xsGgm7nrgC3T4TDI=
Subject key identifier: 8C:A3:76:F0:4E:3C:0A:0E:0D:2A:B3:A7:5D:F4:C5:8F:7F:BA:AB:93
Certificate issuer: /CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Certificate serial: 4E74420676B3732874ED5A2E16E60EEDC310AEF2
Authority key identifier: 9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230312e3230382e302e302f31342d3234203d3e2038303438.roa
Signing time: Tue 06 Jan 2026 19:47:35 +0000
ROA not before: Tue 06 Jan 2026 19:42:35 +0000
ROA not after: Tue 05 Jan 2027 19:47:35 +0000
asID: 8048
IP address blocks: 201.208.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 04:24:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:74:42:06:76:b3:73:28:74:ed:5a:2e:16:e6:0e:ed:c3:10:ae:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4
Validity
Not Before: Jan 6 19:42:35 2026 GMT
Not After : Jan 5 19:47:35 2027 GMT
Subject: CN=8CA376F04E3C0A0E0D2AB3A75DF4C58F7FBAAB93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c7:5b:90:59:a2:73:61:65:b9:31:c1:74:03:
0d:9b:63:7a:2b:9c:4f:20:e3:32:fa:ca:3a:0c:d5:
d3:53:5a:ee:ed:ad:89:7e:3a:44:2d:29:1a:b0:a6:
23:00:c5:d8:22:02:13:bd:f0:67:29:6d:2a:03:4f:
9a:28:4a:1d:6f:4b:0b:f9:1b:1b:0a:95:44:ce:54:
fc:6d:48:4f:d3:4a:bc:0d:f0:a2:de:4a:96:c3:fa:
a1:d3:24:03:b3:b8:10:ef:8d:4e:b0:c5:58:86:33:
aa:42:eb:65:a6:90:9c:19:2d:b0:ab:d1:0c:c7:14:
9d:95:6f:3a:23:ca:76:1b:9f:a8:0e:0e:9d:e7:88:
fc:22:9a:08:e9:fa:8e:8f:0f:52:5d:a9:28:7f:84:
b7:f6:ff:c5:21:bc:19:a9:64:25:24:a5:55:f4:d0:
8d:1e:3c:df:17:d6:9f:6e:75:38:4f:3d:09:00:b8:
6d:8b:de:54:3d:3b:ec:ae:e4:29:4a:e2:13:98:fc:
9d:9d:d3:69:34:33:0d:4e:f4:c8:ab:75:26:7e:0d:
fb:45:81:bb:14:da:68:59:eb:44:12:bf:02:2e:c7:
ef:fa:d8:3a:c5:71:c2:34:8b:b0:55:b2:e4:df:05:
0c:77:33:e3:11:db:91:2c:e0:6a:87:6a:a7:4b:3e:
a0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A3:76:F0:4E:3C:0A:0E:0D:2A:B3:A7:5D:F4:C5:8F:7F:BA:AB:93
X509v3 Authority Key Identifier:
keyid:9F:56:FC:23:A8:C5:FC:06:7B:7D:0B:FD:60:5C:0F:5A:33:D0:36:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9F56FC23A8C5FC067B7D0BFD605C0F5A33D036B4.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43CC570423FAF8163D86CC21F1BA03D89502AE9C124FEF89AF61F402EAEE8B83/0/3230312e3230382e302e302f31342d3234203d3e2038303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.208.0.0/14
Signature Algorithm: sha256WithRSAEncryption
1f:68:ea:99:3a:2b:3a:53:fc:5b:19:bd:29:36:ed:a6:40:2b:
63:9d:19:eb:d9:a5:d3:9b:fd:f4:4b:34:03:cd:f8:48:db:3b:
a2:3c:ce:17:70:2d:55:7c:7a:cc:76:b1:d5:d7:2d:1f:57:70:
65:73:85:a3:21:2a:19:8a:17:79:c0:c0:91:2e:74:25:02:59:
7b:8a:bc:c9:69:c6:8f:60:44:d8:24:dc:29:d7:a6:30:9e:d9:
e1:55:0b:69:07:7f:b0:37:bb:aa:45:2f:a2:32:5e:8c:37:5d:
f1:f8:97:35:b6:4d:ae:40:e0:90:e4:fb:9c:9a:d0:ce:4a:81:
50:ce:24:21:2b:b5:f6:3d:91:e9:34:01:2a:d3:9f:8d:7d:e3:
ee:ef:d4:39:f4:39:d3:e4:2e:3f:b5:c0:48:9c:44:07:16:29:
a6:cb:09:5b:af:66:55:df:f6:da:2b:a0:b9:03:67:01:f1:77:
0d:cb:3f:63:d4:44:8c:f3:4a:4e:91:ba:d5:26:17:e1:dd:3d:
37:95:f0:65:ba:4a:10:66:e4:1a:c0:bf:37:60:f7:44:f6:c6:
36:74:4e:b6:3b:76:cf:29:99:c8:4e:58:8a:8e:92:50:36:64:
3d:f2:67:c7:11:30:f4:56:5f:40:9e:2c:f5:dc:72:af:8a:b4:
81:9b:18:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:58:30 2026 by rpki-client