This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/32342e3135322e35382e302f32342d3234203d3e20323637383233.roa
File: 32342e3135322e35382e302f32342d3234203d3e20323637383233.roa (raw, json)
Hash identifier: jgBze/jmeh2v8+bMljHQkUjs8a8oh8boOWHDBwF4F08=
Subject key identifier: 35:0E:3B:88:35:B7:7A:C6:52:8E:4B:F2:86:67:66:BE:CD:38:07:4F
Certificate issuer: /CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Certificate serial: 312E0AD810F54E3507C518419AC3FF17848B1AE9
Authority key identifier: CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/32342e3135322e35382e302f32342d3234203d3e20323637383233.roa
Signing time: Tue 20 Jan 2026 17:26:20 +0000
ROA not before: Tue 20 Jan 2026 17:21:20 +0000
ROA not after: Tue 19 Jan 2027 17:26:20 +0000
asID: 267823
IP address blocks: 24.152.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 14:33:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:2e:0a:d8:10:f5:4e:35:07:c5:18:41:9a:c3:ff:17:84:8b:1a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9
Validity
Not Before: Jan 20 17:21:20 2026 GMT
Not After : Jan 19 17:26:20 2027 GMT
Subject: CN=350E3B8835B77AC6528E4BF2866766BECD38074F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:47:aa:14:e8:be:cc:7c:38:da:ae:45:cf:9f:
bd:a4:80:e8:65:e8:23:5a:50:c8:2e:1b:63:34:18:
36:a0:05:00:ac:b5:42:48:ee:8e:f8:63:ad:f8:11:
86:33:b2:86:5e:53:2b:76:05:1e:aa:d7:84:83:5f:
1e:44:54:1e:38:57:6d:14:ec:4f:51:29:6e:a7:1c:
ec:44:b0:9d:f6:0b:47:83:81:17:4d:21:ed:23:97:
fc:75:22:d9:a3:40:c7:e5:2b:b1:e0:63:1d:33:d5:
7c:97:e8:5d:77:68:98:ca:69:08:69:20:d6:1f:2b:
3c:a1:77:1b:ef:26:7a:c2:51:e7:d8:cc:c8:5f:eb:
02:f0:47:a0:ea:ff:25:9c:48:b9:b8:42:c0:64:cd:
61:eb:f4:00:42:f6:01:96:98:17:70:9b:ec:b3:c6:
d5:57:ec:26:07:d4:58:e0:f9:61:b3:49:40:06:52:
38:0a:5c:0c:da:76:46:27:7c:58:88:50:81:df:7f:
9b:25:05:ee:31:6c:44:98:91:db:2d:33:86:22:35:
f0:2e:61:71:5f:8d:47:19:53:11:23:43:3a:e2:42:
1e:b7:ea:af:24:53:aa:f9:45:c0:c6:ed:50:e3:a1:
63:40:54:48:7e:10:02:cc:b2:54:82:25:d9:a6:71:
e3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0E:3B:88:35:B7:7A:C6:52:8E:4B:F2:86:67:66:BE:CD:38:07:4F
X509v3 Authority Key Identifier:
keyid:CC:09:DF:FD:6B:D8:4B:61:71:B7:62:7F:BC:F1:28:7D:AC:4D:C9:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CC09DFFD6BD84B6171B7627FBCF1287DAC4DC9E9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/685A8A8C5FF1C0108DD37782678E510CF98541D9627870C6D3FC413CB70BF3C9/0/32342e3135322e35382e302f32342d3234203d3e20323637383233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.58.0/24
Signature Algorithm: sha256WithRSAEncryption
75:69:7f:b5:76:8a:51:ff:3e:8a:b5:ff:17:44:9a:9a:5d:2a:
c0:0f:06:00:01:29:4b:bb:c6:e1:44:3e:a8:a5:d9:ba:b7:6d:
89:1d:35:58:f2:d0:58:d0:d0:82:93:8a:ad:c0:9c:10:24:4e:
80:15:83:6d:62:c7:87:cb:14:24:66:a4:17:7d:bd:7a:3f:46:
02:c5:77:76:e5:e6:36:64:8a:fb:d6:c1:ba:e1:a1:66:02:d6:
bf:cb:45:b8:9f:9b:3b:82:c1:2d:1f:5c:86:ce:8e:c8:07:3e:
0a:4e:ae:4f:05:df:64:bc:c4:73:03:13:ae:01:f3:60:a1:81:
ea:9a:50:e2:c9:31:d0:d4:0c:fb:0f:7a:a2:d5:75:69:44:ad:
e4:fb:43:33:87:41:2e:4a:f5:fd:6d:e8:b9:cc:c6:2d:8d:40:
64:f7:29:ad:7b:29:5a:49:7d:d9:b2:9a:46:ee:d9:62:b2:40:
a7:47:bb:90:3b:bd:9f:ea:85:8b:de:00:7f:ea:a8:55:df:ca:
2e:b1:02:75:8c:8f:29:71:fd:4b:d7:9d:53:24:85:42:cd:bc:
60:82:af:1e:d8:4e:96:ee:96:5f:86:1b:8e:f6:d2:f5:85:dc:
8a:b8:41:cc:c6:1a:14:36:cb:05:33:63:71:2e:de:a2:46:12:
df:ec:dd:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:59:11 2026 by rpki-client