This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231382e302f32332d3233203d3e203532333238.roa
File: 3230312e3135392e3231382e302f32332d3233203d3e203532333238.roa (raw, json)
Hash identifier: dyWbHuzrRZnk4XOOPj654cV2cDkAZGmUFu5js2C8NUo=
Subject key identifier: 9A:16:A6:44:B7:9F:2B:F3:32:76:1D:86:65:32:CF:BD:56:DE:1E:C0
Certificate issuer: /CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Certificate serial: 343A1C800C66C9F9904731ABFF5AD00FD156FBA6
Authority key identifier: D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231382e302f32332d3233203d3e203532333238.roa
Signing time: Tue 06 Jan 2026 19:12:52 +0000
ROA not before: Tue 06 Jan 2026 19:07:52 +0000
ROA not after: Tue 05 Jan 2027 19:12:52 +0000
asID: 52328
IP address blocks: 201.159.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:3a:1c:80:0c:66:c9:f9:90:47:31:ab:ff:5a:d0:0f:d1:56:fb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3BEE2BC3DBF41E55940899128EEA1A38DD0778F
Validity
Not Before: Jan 6 19:07:52 2026 GMT
Not After : Jan 5 19:12:52 2027 GMT
Subject: CN=9A16A644B79F2BF332761D866532CFBD56DE1EC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:f3:c6:db:92:12:55:02:61:6f:09:f1:18:
82:70:61:63:57:41:22:3c:d6:2f:1e:57:43:04:81:
80:3b:7a:a9:50:cb:ac:fd:9e:1e:eb:81:1e:54:4b:
36:37:cb:5b:05:c0:84:d3:c7:d5:36:40:75:f7:82:
41:e3:ec:48:fc:ad:b9:d4:58:25:9e:93:fb:cf:9b:
77:6a:a5:ea:14:c9:54:08:59:74:8d:53:52:bc:d5:
05:ad:ba:3d:bd:9c:11:9d:61:45:bc:5d:c1:09:75:
38:ac:2f:9f:9f:af:6c:be:97:aa:a7:05:47:95:43:
34:0e:d7:d9:90:ba:07:2f:9c:fb:1a:0a:22:c8:ee:
1b:51:4e:ec:48:62:43:e3:02:e6:9e:14:da:3e:a4:
7f:f8:22:68:06:c4:58:d3:9d:a4:4b:eb:89:d9:a9:
af:f2:1a:b0:fe:02:9a:e7:9c:3d:96:be:dc:67:bb:
e2:75:dd:62:1f:64:af:cb:ed:0f:67:cb:f5:50:d4:
32:84:8a:2c:4b:70:35:f5:05:60:53:09:5c:04:2c:
f5:ea:02:a6:67:24:e3:49:8e:7e:2b:b5:f2:f6:9f:
50:bf:b0:8a:3d:0a:00:a4:23:f5:41:72:92:0b:39:
67:81:91:16:e1:8a:08:67:44:d1:2d:84:74:1d:9b:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:16:A6:44:B7:9F:2B:F3:32:76:1D:86:65:32:CF:BD:56:DE:1E:C0
X509v3 Authority Key Identifier:
keyid:D3:BE:E2:BC:3D:BF:41:E5:59:40:89:91:28:EE:A1:A3:8D:D0:77:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D3BEE2BC3DBF41E55940899128EEA1A38DD0778F.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93FCEDB9F6E2C46A3F82B14D50AE8F334AC64287131F1FF475AB64EB7F96E10D/0/3230312e3135392e3231382e302f32332d3233203d3e203532333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.159.218.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:42:92:c3:25:33:66:b9:8f:e8:e3:a3:c0:3c:67:38:b8:95:
48:aa:37:e7:01:3c:81:ed:b6:1d:28:4a:f1:94:ca:11:17:c9:
7e:00:06:56:74:e6:a3:8b:05:07:ca:12:72:51:bd:b9:9d:b3:
ac:c6:da:8e:49:49:68:25:00:51:2e:1f:36:bb:a0:7e:4d:8e:
1d:28:6e:0e:a7:b1:06:ee:bf:a0:0a:c8:e4:53:80:b1:d9:54:
14:f4:a3:16:fb:5c:e9:4d:ef:12:7c:88:99:bb:9b:24:9c:97:
98:08:2c:23:2b:c8:a8:49:46:69:53:5a:1b:df:88:30:73:58:
39:2a:6b:c8:97:77:b9:cb:4c:a8:c3:b8:b8:db:26:ac:76:06:
9d:55:01:46:55:7e:7d:e9:d6:7b:f9:43:27:c3:c7:c6:dd:bc:
a1:f0:78:6b:b4:d8:6b:24:48:bb:57:8c:4a:57:8c:1f:bc:45:
38:6f:11:8c:78:9e:90:11:ad:0f:67:1a:a3:5a:ad:02:19:f5:
1b:25:a6:e1:42:51:4d:6b:68:60:f1:a2:2f:69:cf:75:34:91:
e7:75:97:2e:dc:d2:a6:6f:0c:ef:a6:de:b6:6f:d8:ce:5e:28:
0e:be:e9:92:ad:e3:1f:6b:7b:56:ff:12:35:53:0e:3b:a9:c9:
56:1c:71:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:04:10 2026 by rpki-client