This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/3138312e3130332e36342e302f32302d3234203d3e20323733383534.roa
File: 3138312e3130332e36342e302f32302d3234203d3e20323733383534.roa (raw, json)
Hash identifier: myZ3QiGD5CedJIxyEKez4w+aVQLqbflJL3K48IYKhX8=
Subject key identifier: AA:A6:E2:C7:80:00:98:86:5E:EF:E6:FA:89:41:B9:21:01:08:52:59
Certificate issuer: /CN=C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB
Certificate serial: 2D5C665F643651ECD9AC3689E4FF5453E24988BE
Authority key identifier: C4:28:A3:D0:57:5F:8E:3D:CF:AE:1A:A3:CC:79:39:22:47:C8:7F:DB
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/3138312e3130332e36342e302f32302d3234203d3e20323733383534.roa
Signing time: Mon 10 Nov 2025 14:52:09 +0000
ROA not before: Mon 10 Nov 2025 14:47:09 +0000
ROA not after: Mon 09 Nov 2026 14:52:09 +0000
asID: 273854
IP address blocks: 181.103.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl
rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 19:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:5c:66:5f:64:36:51:ec:d9:ac:36:89:e4:ff:54:53:e2:49:88:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB
Validity
Not Before: Nov 10 14:47:09 2025 GMT
Not After : Nov 9 14:52:09 2026 GMT
Subject: CN=AAA6E2C7800098865EEFE6FA8941B92101085259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:8b:88:72:65:e1:b1:78:f0:37:e7:45:72:
c3:48:65:f5:5e:c5:19:b9:b2:8f:e5:b3:0d:dc:8f:
cd:c7:9e:84:cc:89:b1:7c:bf:bb:39:d7:93:60:67:
85:4d:2e:b0:2e:1d:60:bd:60:c4:18:24:3b:e8:ee:
36:61:71:1f:cd:2a:0c:c7:a3:54:9d:b5:c8:29:03:
e6:dd:1c:af:de:6f:c2:8c:a7:67:ab:71:91:8c:9b:
cd:17:d0:f3:13:3a:03:1f:de:6f:c7:5f:18:ec:a6:
54:ad:eb:6c:af:8f:c6:ca:95:01:59:5f:77:27:58:
ea:d0:77:1e:63:47:49:90:78:a7:c6:15:49:63:bb:
9f:9c:ca:df:41:8d:80:4a:72:1b:e2:bc:91:28:07:
3e:62:d2:ec:74:3b:fc:23:04:fb:29:d8:62:c6:0c:
de:0e:e0:0f:a3:67:a2:63:c9:e2:38:d8:ef:61:95:
b8:e9:41:74:70:88:62:4b:b2:6d:b5:e5:73:f5:3e:
88:5c:8c:a0:2e:c5:27:fe:72:87:3a:76:3e:12:14:
67:40:61:29:54:9e:47:6d:49:d6:a2:32:cc:53:9a:
fa:26:a0:55:8c:56:a1:00:a5:bb:06:19:84:3b:a3:
9c:84:32:08:e4:a0:e9:4e:37:1e:9c:91:d9:a9:81:
20:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A6:E2:C7:80:00:98:86:5E:EF:E6:FA:89:41:B9:21:01:08:52:59
X509v3 Authority Key Identifier:
keyid:C4:28:A3:D0:57:5F:8E:3D:CF:AE:1A:A3:CC:79:39:22:47:C8:7F:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C428A3D0575F8E3DCFAE1AA3CC79392247C87FDB.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5042DB5CF7D3C40B803088BE38572D9D50D857C5883AE22EAD906FCF37468959/0/3138312e3130332e36342e302f32302d3234203d3e20323733383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.103.64.0/20
Signature Algorithm: sha256WithRSAEncryption
76:5d:62:9e:a5:a6:8e:4b:83:90:45:60:08:4a:70:a8:b3:31:
a8:15:0b:fa:6d:68:4f:74:93:54:95:c7:b4:c2:b3:47:ae:ff:
8f:5d:1f:76:33:e5:23:a0:69:6d:94:87:bb:d9:60:19:19:34:
71:f7:8a:48:9e:93:e3:57:aa:72:17:f1:80:f6:6e:fb:fc:af:
6c:34:5f:05:b4:37:2d:9d:e0:9a:3b:e5:e5:30:6a:b5:a3:a7:
9b:dc:3a:0c:0c:17:68:d0:09:45:62:f5:09:76:85:68:09:b6:
fc:6b:45:43:e5:a4:1b:e7:cd:e6:3e:29:ea:cc:d8:27:30:7b:
e8:ba:3d:86:b3:1e:ab:b6:28:3e:ae:96:f8:35:ca:22:be:e2:
97:6a:6d:01:e4:26:ee:ee:ef:0f:ce:d3:8b:f8:b2:f0:8b:14:
c4:03:e3:38:08:7b:27:c5:dd:38:a5:00:32:53:38:a2:aa:a2:
e1:77:04:da:fb:62:de:ae:d1:cb:2c:0f:f2:36:58:3f:9d:fa:
03:d7:69:1f:69:9b:46:45:52:d4:c9:10:75:b1:a0:53:33:0b:
80:47:e8:7a:a6:c2:95:eb:c5:1c:87:68:07:45:24:37:50:ea:
15:35:27:c6:68:4c:45:d6:f9:96:d2:f7:48:24:2a:78:d0:9e:
77:cc:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 06:22:19 2025 by rpki-client