This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3138392e3230312e3232382e302f32322d3234203d3e2037343338.roa
File: 3138392e3230312e3232382e302f32322d3234203d3e2037343338.roa (raw, json)
Hash identifier: 4+Z/EB38EYzxEXVDOUyph4nN4PdBnEJQphP1lgjc6jA=
Subject key identifier: DD:9D:8C:0C:64:E4:55:3C:8D:FE:0E:06:59:2B:C7:7E:6A:CD:87:28
Certificate issuer: /CN=C2B40785E3A240A257500C1EAC949A26103A8210
Certificate serial: 701A0FD2ED3C4C8565580DCA18C51661FF9E9AFA
Authority key identifier: C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3138392e3230312e3232382e302f32322d3234203d3e2037343338.roa
Signing time: Tue 06 Jan 2026 20:56:36 +0000
ROA not before: Tue 06 Jan 2026 20:51:36 +0000
ROA not after: Tue 05 Jan 2027 20:56:36 +0000
asID: 7438
IP address blocks: 189.201.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl
rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:1a:0f:d2:ed:3c:4c:85:65:58:0d:ca:18:c5:16:61:ff:9e:9a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2B40785E3A240A257500C1EAC949A26103A8210
Validity
Not Before: Jan 6 20:51:36 2026 GMT
Not After : Jan 5 20:56:36 2027 GMT
Subject: CN=DD9D8C0C64E4553C8DFE0E06592BC77E6ACD8728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:13:b9:32:81:42:bf:c0:03:cf:12:ef:d0:7d:
b9:4c:9e:23:69:48:77:72:ea:f7:51:c2:31:db:54:
7e:0d:19:c7:e8:bf:fb:88:f1:aa:98:cd:6c:aa:86:
e6:5d:62:72:97:c1:9b:71:16:1e:76:01:40:55:b3:
87:1e:8b:ac:a9:b8:35:a2:20:0d:83:83:82:ad:16:
0f:94:86:97:4d:54:a5:bc:55:b2:44:61:39:d5:24:
96:cd:72:92:89:e5:40:f4:e6:df:dc:20:e7:17:9f:
11:41:d4:9a:0f:72:2b:1d:ce:f5:32:c9:a5:8a:c1:
32:56:47:d4:9c:67:42:be:9a:ba:08:6c:b7:5d:9d:
7d:fb:94:54:7d:ca:08:fc:d4:3f:fe:e7:32:d7:5d:
90:f0:e4:a9:f9:78:82:08:f5:a9:bf:d6:90:2e:27:
23:ea:4b:1a:78:a8:72:9a:5b:f4:1d:f8:65:8d:fa:
74:21:e7:5e:ae:07:83:c9:36:aa:fb:73:7b:99:47:
5d:54:25:0d:13:be:cf:6d:2b:a6:ad:e5:59:14:e7:
48:08:e1:bb:c8:1e:dc:f4:3f:42:c8:c3:8a:c4:1b:
f5:f7:d3:83:97:8c:d5:0f:82:64:b6:6d:4d:44:73:
4f:39:d9:07:b3:9d:f1:6a:2d:29:2a:ce:cb:c6:e2:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9D:8C:0C:64:E4:55:3C:8D:FE:0E:06:59:2B:C7:7E:6A:CD:87:28
X509v3 Authority Key Identifier:
keyid:C2:B4:07:85:E3:A2:40:A2:57:50:0C:1E:AC:94:9A:26:10:3A:82:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/C2B40785E3A240A257500C1EAC949A26103A8210.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C2B40785E3A240A257500C1EAC949A26103A8210.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9304D5CA07D3CC675C76036A94D76DECE534B211210B0CB9EAA2E904CD2F7E1E/0/3138392e3230312e3232382e302f32322d3234203d3e2037343338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.201.228.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:db:93:6d:fc:b7:42:00:f4:72:48:fb:dd:29:b0:12:4b:b6:
3a:52:8f:c2:7f:b6:c9:c5:3b:cb:fc:f7:7a:fa:fa:65:a6:be:
a4:57:84:b9:2e:2a:6b:bc:72:52:56:70:3b:db:9b:43:22:f1:
a4:56:ab:0b:c9:26:38:d0:be:af:7d:81:a4:1a:21:c4:3e:72:
18:7b:3c:8e:19:3f:23:eb:c0:b7:c8:f6:65:8b:87:54:e8:d1:
38:f5:64:62:30:b7:e6:7d:13:51:88:d5:21:b7:47:3b:2f:f4:
34:e5:2a:10:3a:9b:63:05:fd:ef:9a:74:69:8b:78:f7:cf:e6:
57:45:f8:77:ba:d7:a3:98:2c:43:b3:a5:3d:90:e8:eb:f6:31:
61:fb:58:1d:46:df:a2:a3:ef:9d:3b:fa:3e:91:2f:3f:b0:ac:
4d:3b:1b:f1:f3:e9:e2:84:2d:03:d3:53:80:c9:ed:3d:dd:b6:
fc:31:13:b8:fb:f0:b9:19:e1:37:22:51:75:6a:7a:71:f3:11:
69:23:5c:0e:fd:a6:80:85:d7:67:67:bd:12:1e:8e:15:4c:71:
00:0b:a9:40:63:61:b4:7e:ce:ce:e9:77:35:ff:8e:9f:b1:b9:
ca:36:ac:ca:52:87:e5:ef:73:40:09:0f:10:ff:0a:87:a2:4a:
9f:c2:70:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:57:33 2026 by rpki-client