This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/3133312e3235352e3139322e302f32322d3234203d3e20323632323130.roa
File: 3133312e3235352e3139322e302f32322d3234203d3e20323632323130.roa (raw, json)
Hash identifier: EJKsKq06r/6s6LIFcIaQVUThV2qundaxJe8IG+Web0g=
Subject key identifier: ED:62:E1:43:3A:12:64:C0:91:82:DF:F8:B3:1D:C2:96:FF:CB:7A:FA
Certificate issuer: /CN=2AB6FC0008E3CB5A059B1D935090BD3A42310F93
Certificate serial: 0F2D03A8D43AEC09BFC8E882F6DFF89D34938025
Authority key identifier: 2A:B6:FC:00:08:E3:CB:5A:05:9B:1D:93:50:90:BD:3A:42:31:0F:93
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/3133312e3235352e3139322e302f32322d3234203d3e20323632323130.roa
Signing time: Mon 24 Nov 2025 15:35:00 +0000
ROA not before: Mon 24 Nov 2025 15:30:00 +0000
ROA not after: Mon 23 Nov 2026 15:35:00 +0000
asID: 262210
IP address blocks: 131.255.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.crl
rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 11 Dec 2025 12:24:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:2d:03:a8:d4:3a:ec:09:bf:c8:e8:82:f6:df:f8:9d:34:93:80:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AB6FC0008E3CB5A059B1D935090BD3A42310F93
Validity
Not Before: Nov 24 15:30:00 2025 GMT
Not After : Nov 23 15:35:00 2026 GMT
Subject: CN=ED62E1433A1264C09182DFF8B31DC296FFCB7AFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:78:a1:c5:1c:aa:ee:d9:cf:04:a8:b8:a1:
66:7e:a9:99:a5:6e:46:d5:f7:18:96:c8:8c:0c:5c:
be:ab:5e:29:2b:ff:0f:1f:85:ee:f1:dc:d2:ca:82:
ff:93:0b:78:b5:3f:f3:48:3e:66:2d:8e:ec:e4:90:
b7:81:f9:9c:a2:88:8b:50:56:08:f0:dc:a7:4d:86:
03:58:8f:a5:24:f8:90:59:ce:4a:1b:db:15:dc:df:
01:24:99:e0:a2:7d:f0:48:f3:6c:b6:5d:1d:96:4d:
af:81:52:4c:ac:4a:30:6b:92:e8:05:71:87:e2:fd:
e0:0c:0a:1f:4d:6d:e4:fe:96:52:93:b8:51:b8:b0:
b9:dc:4f:30:72:ef:0b:c6:f0:2d:12:ab:1c:6c:51:
42:2f:0c:da:29:b9:a2:9f:e0:91:62:ce:64:fc:38:
33:91:94:f1:86:21:2c:06:56:22:d3:07:df:8e:20:
63:80:72:5e:05:5d:68:69:14:f6:d8:fc:ca:a9:ca:
1a:c3:d5:9a:66:ee:fb:f1:fc:8e:49:1e:89:b6:57:
e4:44:85:e0:4b:b9:b7:b5:1f:18:40:ba:dd:c2:9f:
5c:d9:88:3a:8a:20:3d:70:6d:ca:f1:76:44:59:6c:
fc:b3:b8:57:bb:55:af:3a:50:9c:c4:36:0b:c7:6a:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:62:E1:43:3A:12:64:C0:91:82:DF:F8:B3:1D:C2:96:FF:CB:7A:FA
X509v3 Authority Key Identifier:
keyid:2A:B6:FC:00:08:E3:CB:5A:05:9B:1D:93:50:90:BD:3A:42:31:0F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AB6FC0008E3CB5A059B1D935090BD3A42310F93.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9D7DD4937B63A683B9BF81631E20DBA403FFE434FD4861D98DE839478345B033/0/3133312e3235352e3139322e302f32322d3234203d3e20323632323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.192.0/22
Signature Algorithm: sha256WithRSAEncryption
77:fd:1a:5c:31:7d:bf:6a:a5:43:4b:f2:8e:eb:cc:8f:fc:7e:
86:7d:b4:68:d2:fa:87:1b:30:2e:39:b1:4e:76:10:3f:c1:00:
50:6b:87:e5:3f:78:66:18:50:83:71:87:83:44:18:0b:71:2f:
32:27:53:83:c0:97:d5:5c:64:e1:b7:13:04:ac:d2:93:cf:f5:
55:26:13:77:c3:b5:be:60:60:ed:fa:7b:38:c4:44:e9:7c:42:
42:59:3a:9a:25:bd:cb:ab:57:1a:22:61:97:ca:cb:0d:ae:5e:
7a:37:95:c4:9e:a6:e3:02:b3:d1:50:d9:33:c2:aa:71:47:d1:
f4:b5:fd:54:e0:2e:86:9d:c8:99:27:79:9d:20:ca:c4:d7:c2:
01:ce:dc:6d:a3:bd:bd:26:3d:00:f8:bf:ea:ab:cb:db:fd:a0:
bf:87:f3:5b:24:1f:ef:9e:35:81:8b:4d:ad:58:ea:b9:a9:77:
1d:0f:20:a5:47:25:b9:2b:38:40:3d:72:43:36:c6:e5:d3:b3:
f0:9e:b7:43:66:f1:92:8a:c4:9b:f4:76:17:6e:3a:86:52:55:
b5:52:6f:56:d9:95:71:90:2f:75:f8:15:c2:01:67:2e:64:ea:
30:3f:11:cb:05:4b:18:8e:8e:b3:e3:98:00:7a:2c:3e:86:19:
e6:f4:8c:af
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgIUDy0DqNQ67Am/yOiC9t/4nTSTgCUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFCNkZDMDAwOEUzQ0I1QTA1OUIxRDkzNTA5MEJEM0E0
MjMxMEY5MzAeFw0yNTExMjQxNTMwMDBaFw0yNjExMjMxNTM1MDBaMDMxMTAvBgNV
BAMTKEVENjJFMTQzM0ExMjY0QzA5MTgyREZGOEIzMURDMjk2RkZDQjdBRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjG3ihxRyq7tnPBKi4oWZ+qZml
bkbV9xiWyIwMXL6rXikr/w8fhe7x3NLKgv+TC3i1P/NIPmYtjuzkkLeB+ZyiiItQ
Vgjw3KdNhgNYj6Uk+JBZzkob2xXc3wEkmeCiffBI82y2XR2WTa+BUkysSjBrkugF
cYfi/eAMCh9NbeT+llKTuFG4sLncTzBy7wvG8C0SqxxsUUIvDNopuaKf4JFizmT8
ODORlPGGISwGViLTB9+OIGOAcl4FXWhpFPbY/MqpyhrD1Zpm7vvx/I5JHom2V+RE
heBLube1HxhAut3Cn1zZiDqKID1wbcrxdkRZbPyzuFe7Va86UJzENgvHaso9AgMB
AAGjggLMMIICyDAdBgNVHQ4EFgQU7WLhQzoSZMCRgt/4sx3Clv/LevowHwYDVR0j
BBgwFoAUKrb8AAjjy1oFmx2TUJC9OkIxD5MwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy85RDdERDQ5MzdCNjNBNjgzQjlCRjgxNjMxRTIwREJBNDAz
RkZFNDM0RkQ0ODYxRDk4REU4Mzk0NzgzNDVCMDMzLzAvMkFCNkZDMDAwOEUzQ0I1
QTA1OUIxRDkzNTA5MEJEM0E0MjMxMEY5My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8yQUI2RkMwMDA4RTNDQjVBMDU5
QjFEOTM1MDkwQkQzQTQyMzEwRjkzLmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvOUQ3REQ0OTM3QjYzQTY4M0I5QkY4MTYzMUUyMERCQTQwM0ZGRTQzNEZE
NDg2MUQ5OERFODM5NDc4MzQ1QjAzMy8wLzMxMzMzMTJlMzIzNTM1MmUzMTM5MzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2MzIzMjMxMzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKD
/8AwDQYJKoZIhvcNAQELBQADggEBAHf9Glwxfb9qpUNL8o7rzI/8foZ9tGjS+ocb
MC45sU52ED/BAFBrh+U/eGYYUINxh4NEGAtxLzInU4PAl9VcZOG3EwSs0pPP9VUm
E3fDtb5gYO36ezjEROl8QkJZOpolvcurVxoiYZfKyw2uXno3lcSepuMCs9FQ2TPC
qnFH0fS1/VTgLoadyJkneZ0gysTXwgHO3G2jvb0mPQD4v+qry9v9oL+H81skH++e
NYGLTa1Y6rmpdx0PIKVHJbkrOEA9ckM2xuXTs/Cet0Nm8ZKKxJv0dhduOoZSVbVS
b1bZlXGQL3X4FcIBZy5k6jA/EcsFSxiOjrPjmAB6LD6GGeb0jK8=
-----END CERTIFICATE-----
Generated at Sun Dec 7 07:42:11 2025 by rpki-client