This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa
File: 3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa (raw, json)
Hash identifier: yID5IXtt+1VWbbRYBNze5PWYtWy1MT88oh9ww7MrBWs=
Subject key identifier: 23:9F:57:09:D2:E8:CA:15:4A:AF:CC:BF:62:05:40:E6:C3:42:BA:1F
Certificate issuer: /CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Certificate serial: 73B84334BB4345F68D0219133E7579625133CD30
Authority key identifier: AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa
Signing time: Tue 06 Jan 2026 19:37:32 +0000
ROA not before: Tue 06 Jan 2026 19:32:32 +0000
ROA not after: Tue 05 Jan 2027 19:37:32 +0000
asID: 272970
IP address blocks: 201.158.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl
rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 13:52:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:b8:43:34:bb:43:45:f6:8d:02:19:13:3e:75:79:62:51:33:cd:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8
Validity
Not Before: Jan 6 19:32:32 2026 GMT
Not After : Jan 5 19:37:32 2027 GMT
Subject: CN=239F5709D2E8CA154AAFCCBF620540E6C342BA1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:de:34:11:f7:7c:76:a4:98:49:44:57:57:
a2:2c:54:c9:e3:9c:ce:f0:eb:04:50:fb:ae:1a:04:
86:39:4c:3e:eb:06:d7:7d:c3:0c:6c:be:e2:f6:1f:
43:9c:6b:de:9a:f2:6a:5f:6d:33:ae:d7:97:43:ac:
80:50:bc:6a:2f:e8:ea:65:03:87:26:7d:20:99:3f:
18:f4:21:f9:46:98:b8:9f:34:05:03:e2:9b:1b:53:
e5:74:05:a2:f6:83:45:b9:fb:89:c9:f5:62:8a:a7:
4d:21:4a:a5:97:c5:21:32:5a:9d:53:e3:4d:80:0d:
35:99:30:19:67:aa:d3:f4:7f:91:b4:9f:49:7f:27:
b2:bc:88:a8:45:99:6f:d7:3b:ff:50:f9:63:4a:ee:
20:56:35:dc:e7:f0:dd:2b:a5:91:66:6c:a4:f4:4a:
9d:ae:ff:68:40:d3:ee:84:a4:6d:1e:79:6a:d4:10:
52:ec:f6:df:5e:5c:6e:a6:68:c9:5d:fb:13:9f:fc:
7c:16:57:b0:2b:25:0b:0f:5d:88:d9:76:93:03:eb:
d1:8d:2a:d0:37:06:e4:be:d8:00:92:ed:83:a8:72:
9b:cd:1c:93:41:8d:75:f9:11:d8:3c:72:3b:5d:d3:
72:19:c0:fe:66:96:92:5a:5f:60:98:04:b7:83:bc:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:9F:57:09:D2:E8:CA:15:4A:AF:CC:BF:62:05:40:E6:C3:42:BA:1F
X509v3 Authority Key Identifier:
keyid:AA:21:B8:1A:35:BA:F7:E5:F1:0E:0C:8A:BE:16:46:67:45:C3:7B:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AA21B81A35BAF7E5F10E0C8ABE16466745C37BF8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/724424E852450082B9B54381D3A94A81D59CD4E663DDA85A42C9B05177D783E2/0/3230312e3135382e39392e302f32342d3234203d3e20323732393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.158.99.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:38:92:4f:af:1a:08:c8:7c:9a:e9:13:e7:72:ec:c6:f8:99:
3d:97:42:15:32:f1:61:b9:a1:09:9d:49:bf:77:09:2e:38:0c:
29:7e:94:f1:58:28:ab:a1:f7:1c:1b:8f:09:67:70:c1:fd:da:
c7:83:f9:46:b4:cd:bc:50:f6:98:64:ab:b6:e6:1d:13:1a:2d:
54:ae:06:31:44:9b:8a:f9:1a:ed:ac:f7:b1:e7:ce:f3:06:7b:
6a:fe:26:b6:e5:55:d2:b0:99:42:f1:2e:aa:e2:4e:87:15:13:
80:27:b2:f3:64:28:11:cd:7d:76:29:c0:eb:39:33:f7:71:fd:
76:1c:b5:c4:7d:39:77:3d:21:e8:6f:bb:8c:7e:99:ed:10:d1:
48:06:6d:da:ce:b0:e9:8c:0c:8a:ee:a5:8d:d9:5f:5f:b9:0f:
16:ef:8a:51:06:8a:d5:3f:c4:a8:55:01:00:b3:d3:c7:d4:4f:
fe:ca:6d:05:9c:50:0c:54:ce:9f:a2:88:42:46:d8:a3:17:d2:
6b:e0:5f:90:a5:e3:2f:1d:c4:d9:3b:23:4f:1a:e2:5a:23:0a:
98:a1:9a:62:24:32:49:df:15:c6:ad:8d:cb:17:95:3a:c3:ae:
0b:59:7b:8e:19:72:84:b8:8e:aa:e1:f6:70:79:22:6d:a0:28:
e0:82:c8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:41:00 2026 by rpki-client