This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32312e302f32342d3234203d3e20323635373430.roa
File: 3132382e3230312e32312e302f32342d3234203d3e20323635373430.roa (raw, json)
Hash identifier: OBwb5kyWS7RAQ1ltYkQZ8xkwR5//Aiq8scAZz9Pd8CM=
Subject key identifier: 67:A1:E3:3F:31:B2:20:23:97:9F:50:6E:B0:D2:6D:28:7E:27:5E:0E
Certificate issuer: /CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
Certificate serial: 4DC86CE252FEAAB5CBAB55FC02A34D8BD289AEBD
Authority key identifier: 25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32312e302f32342d3234203d3e20323635373430.roa
Signing time: Tue 06 Jan 2026 19:29:09 +0000
ROA not before: Tue 06 Jan 2026 19:24:09 +0000
ROA not after: Tue 05 Jan 2027 19:29:09 +0000
asID: 265740
IP address blocks: 128.201.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl
rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:c8:6c:e2:52:fe:aa:b5:cb:ab:55:fc:02:a3:4d:8b:d2:89:ae:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25AA12EC2868B90A693EEAD25632B15E24525ED3
Validity
Not Before: Jan 6 19:24:09 2026 GMT
Not After : Jan 5 19:29:09 2027 GMT
Subject: CN=67A1E33F31B22023979F506EB0D26D287E275E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bd:b2:85:e9:ab:47:ec:71:a6:44:0b:6e:c1:
6b:de:94:c5:5f:52:c5:88:e2:a1:33:ae:bc:85:bf:
a5:e9:44:90:64:91:d7:cb:5f:28:b9:5c:2b:e8:91:
12:bd:f1:5d:b6:ab:b9:22:44:08:66:82:6c:83:0d:
b4:50:b1:37:72:82:d2:d2:e8:b2:b3:68:29:47:79:
32:59:eb:f6:4c:c5:8d:d1:52:bd:e5:84:1e:dc:95:
d2:f9:fa:a6:42:46:f2:96:7d:e9:2a:44:b0:29:62:
79:59:3c:f1:0e:77:09:24:ab:dd:78:37:44:4e:5d:
c4:c4:66:b5:70:d1:77:03:6f:cc:f8:ef:a3:1d:11:
20:8c:50:9e:35:fd:e5:d5:c4:a4:e7:45:51:1c:93:
e2:d1:31:4f:4f:a3:af:08:85:ac:a0:f1:ea:d7:05:
ce:c9:88:af:78:f8:24:2b:14:df:0e:c5:84:cf:ea:
45:e2:14:4e:96:a0:06:5b:7f:ed:fa:a0:57:57:ea:
4d:a7:c2:cc:f7:a8:98:9b:0c:7e:a7:01:3b:81:b4:
f7:c1:f1:fc:b4:5a:17:7b:94:33:60:0d:22:7c:52:
ac:f1:61:b4:7d:be:8a:49:44:c6:c7:84:11:48:50:
b5:72:de:1f:29:22:02:34:6d:b7:31:28:64:e0:f5:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:E3:3F:31:B2:20:23:97:9F:50:6E:B0:D2:6D:28:7E:27:5E:0E
X509v3 Authority Key Identifier:
keyid:25:AA:12:EC:28:68:B9:0A:69:3E:EA:D2:56:32:B1:5E:24:52:5E:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/25AA12EC2868B90A693EEAD25632B15E24525ED3.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8715877014D6A3562B90597EC394B914F16FD3A53C58939A770388B3FE7D727A/0/3132382e3230312e32312e302f32342d3234203d3e20323635373430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.21.0/24
Signature Algorithm: sha256WithRSAEncryption
71:10:1c:f9:10:3c:44:50:bc:2c:49:17:0f:e1:97:a5:ad:24:
a3:8f:6c:a1:69:8a:76:64:d8:23:e9:44:3e:d7:cd:da:ee:18:
21:5f:32:7a:94:c6:91:65:c3:1d:b9:2f:4d:bc:53:20:06:64:
39:94:dc:18:c1:07:43:3c:6d:6c:8d:56:52:48:66:91:69:43:
dd:b9:f5:21:c7:4a:23:9c:b0:27:89:09:9e:9f:6c:89:9c:4b:
44:ec:2a:42:5b:b2:e4:7e:0f:a0:70:f5:1f:7f:b8:1b:57:af:
75:44:e8:9c:23:ae:5c:18:be:cb:15:35:9f:f3:fb:d4:cc:24:
cb:c8:7e:f9:5a:ba:9c:82:29:91:83:14:33:b4:d5:e9:a6:6d:
19:8a:92:2f:f7:6f:a0:92:9d:71:5a:e0:01:54:62:c7:14:08:
9d:d3:32:f8:a8:9e:2d:74:1c:1e:62:0c:f6:f6:82:91:51:06:
86:41:f8:90:50:9e:e4:18:d7:ca:7a:7b:ca:fc:f9:12:5b:e3:
dc:a4:75:4a:5c:8b:e6:30:04:60:c9:4e:89:97:68:e7:31:91:
a2:c8:f3:93:0e:fe:2c:85:af:0d:bf:1a:8c:cf:40:f5:13:c9:
8f:2d:23:d1:5e:6c:5f:e2:d7:62:18:40:27:58:a6:af:aa:f6:
07:93:fd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:04:29 2026 by rpki-client