This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e302e302f32312d3234203d3e203237373638.roa
File: 3230312e3231372e302e302f32312d3234203d3e203237373638.roa (raw, json)
Hash identifier: f4/XjHWbJWh4ldcqWVYmybPkgYNQ1mHpmBd2e8guIMI=
Subject key identifier: 47:E7:41:04:D8:C5:1E:35:6E:1F:D5:06:1E:8B:1E:67:39:9A:F2:0C
Certificate issuer: /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial: 3BD5197FE810998576199F7ABCC8B347DDF09CC2
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e302e302f32312d3234203d3e203237373638.roa
Signing time: Tue 06 Jan 2026 19:25:58 +0000
ROA not before: Tue 06 Jan 2026 19:20:58 +0000
ROA not after: Tue 05 Jan 2027 19:25:58 +0000
asID: 27768
IP address blocks: 201.217.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d5:19:7f:e8:10:99:85:76:19:9f:7a:bc:c8:b3:47:dd:f0:9c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Validity
Not Before: Jan 6 19:20:58 2026 GMT
Not After : Jan 5 19:25:58 2027 GMT
Subject: CN=47E74104D8C51E356E1FD5061E8B1E67399AF20C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fa:e3:b2:37:31:84:77:fb:11:c8:2d:4f:de:
b4:bd:47:24:fb:df:8e:58:f3:28:24:ba:8d:be:91:
35:74:5f:6e:3d:56:be:48:20:8d:77:31:07:14:9d:
d5:6f:95:bc:ba:bc:6c:48:84:13:4c:80:37:e5:54:
e2:97:e9:9b:43:b5:2c:79:52:7b:53:dd:09:4f:13:
f4:56:12:fe:40:e2:a0:ed:af:92:32:c5:0d:84:13:
f1:8e:90:09:fc:1d:41:27:66:bf:a1:fc:5c:5a:6f:
10:fa:66:b5:23:63:b3:9f:d7:81:b7:b0:c3:3e:5c:
71:d8:09:43:b3:d7:cc:a4:8a:39:81:72:a8:2d:57:
50:a0:07:f3:be:26:1e:e1:98:6d:04:49:62:df:5c:
e8:ac:be:ed:cc:0a:8d:fe:b9:16:a2:31:9b:af:3b:
b2:2d:6b:b5:70:da:bf:64:dd:c3:1f:6d:00:9f:82:
a4:35:6c:f0:b2:b9:75:47:42:e6:36:1c:df:ab:bf:
d3:e0:7c:31:eb:58:d2:2c:17:9f:14:9d:96:ad:8c:
f3:49:74:ca:f7:33:5c:5e:b3:7b:43:fd:85:b6:08:
0f:7f:d9:5e:60:be:c7:16:62:29:04:ce:ed:a2:0c:
28:76:1c:e3:af:2b:d4:66:ef:49:5a:1b:31:93:d2:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E7:41:04:D8:C5:1E:35:6E:1F:D5:06:1E:8B:1E:67:39:9A:F2:0C
X509v3 Authority Key Identifier:
keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e302e302f32312d3234203d3e203237373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.217.0.0/21
Signature Algorithm: sha256WithRSAEncryption
65:fc:db:63:2c:cd:cc:ee:67:d4:8e:b4:d8:b6:5b:7b:a0:61:
b5:76:fc:9a:05:b8:b3:82:bb:87:c7:8b:4f:8b:fa:ab:55:5b:
17:4d:bc:57:22:13:c1:95:5d:b3:78:4d:29:6b:f8:07:c8:95:
95:e5:e2:91:8a:bb:e5:dc:0c:1b:99:59:59:56:a4:46:67:e4:
1f:90:39:cf:e5:72:68:4b:07:3a:d8:f1:fa:23:d7:d2:0a:17:
e3:44:e6:7f:aa:e1:57:0d:97:01:c6:6c:a9:60:b9:f6:1b:36:
97:62:61:ef:78:87:be:1b:e6:c1:c7:94:b7:6a:19:bf:e6:af:
4e:40:d3:53:87:3d:23:15:f4:66:51:c6:af:40:4f:5b:43:d1:
f7:d1:53:eb:58:d7:6c:ab:ed:ba:f1:64:06:60:fc:1e:4d:53:
e5:a6:a4:f4:32:42:1d:46:19:61:e0:f3:34:2b:49:d9:57:d6:
59:35:bb:5b:7a:65:ea:6d:05:3a:32:da:88:5b:6c:0e:05:52:
10:53:e3:be:79:8c:6f:5b:fa:35:c2:dc:a7:c3:ce:f9:47:fe:
2a:35:8d:04:8e:c2:96:90:b6:25:29:bf:2e:4a:55:31:d2:d4:
b8:cc:8a:9d:eb:62:81:5a:de:20:87:d7:18:c6:7d:fc:fd:e7:
f3:cd:1f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:31:05 2026 by rpki-client