This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32352e302f32342d3234203d3e203237373638.roa
File: 3230312e3231372e32352e302f32342d3234203d3e203237373638.roa (raw, json)
Hash identifier: kX3yfHtLIyeNJ8mYM8KjpqCxnATHIiuOWz9PVB9Ixvk=
Subject key identifier: 1C:70:9C:D8:01:99:19:A1:7A:D2:AD:2C:FA:36:7D:42:4D:21:D1:DC
Certificate issuer: /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial: 55DB34DFD7D2A418F37AC4991F9B307E702BE689
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32352e302f32342d3234203d3e203237373638.roa
Signing time: Sat 08 Nov 2025 23:52:05 +0000
ROA not before: Sat 08 Nov 2025 23:47:05 +0000
ROA not after: Sat 07 Nov 2026 23:52:05 +0000
asID: 27768
IP address blocks: 201.217.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 12:39:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:db:34:df:d7:d2:a4:18:f3:7a:c4:99:1f:9b:30:7e:70:2b:e6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Validity
Not Before: Nov 8 23:47:05 2025 GMT
Not After : Nov 7 23:52:05 2026 GMT
Subject: CN=1C709CD8019919A17AD2AD2CFA367D424D21D1DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:68:a4:58:c7:2f:e3:90:1f:48:bc:dc:93:
bb:9f:9f:8c:08:d3:09:0d:e2:4d:61:5d:76:3d:8c:
bb:57:64:99:dc:cc:e5:dd:a6:7f:6b:cc:79:98:0e:
e0:4b:78:ed:41:bb:00:db:7d:a9:f5:54:25:a0:d4:
55:32:0b:65:c8:e5:89:5e:b1:4d:46:52:31:35:f5:
91:b1:f6:65:41:c0:77:3a:1a:e4:10:ec:51:ef:7a:
6d:a5:73:26:46:84:4d:55:e1:5e:ab:8a:e7:76:ce:
d7:0b:65:c3:9f:39:11:a1:4d:1b:71:7a:a1:75:e3:
bc:9f:47:33:c5:bf:d4:3b:1c:a3:ae:4c:d7:c5:8a:
79:c6:74:f4:d0:eb:4f:1f:24:e2:ca:cd:f8:09:10:
13:75:b3:b3:3f:c0:b4:f8:31:58:96:0b:b2:00:39:
1a:aa:68:65:90:ff:a0:e3:97:23:11:b9:6e:15:8d:
0f:e3:05:92:db:05:62:48:55:a8:c4:c2:b1:ea:6c:
de:2f:3d:fb:1e:39:5b:ac:0c:d8:4f:55:23:fe:b2:
f0:bd:07:26:3a:e6:ae:df:45:80:da:f5:62:04:71:
fa:ee:1a:5c:c0:26:0f:82:6b:35:05:a6:83:99:6b:
cc:d4:4d:50:da:84:a5:93:be:a5:d3:8a:31:f6:a1:
d7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:70:9C:D8:01:99:19:A1:7A:D2:AD:2C:FA:36:7D:42:4D:21:D1:DC
X509v3 Authority Key Identifier:
keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e32352e302f32342d3234203d3e203237373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.217.25.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:22:f1:97:07:30:a3:4c:b8:2f:d8:dd:cd:94:11:91:7f:11:
89:76:d0:cc:75:14:47:5d:e5:24:d1:43:ee:78:de:34:11:fb:
3d:78:d2:c1:38:4c:17:4b:2c:87:14:1f:5f:1d:65:9b:f5:47:
81:01:d0:97:f9:ce:dd:3d:fc:a8:46:45:5b:b4:57:50:18:50:
c4:55:b5:ee:52:99:ef:01:98:43:a6:c5:03:a6:42:3d:c4:91:
f4:8d:4f:22:27:ec:87:dc:3b:ac:16:de:c9:85:05:ca:99:6f:
7e:1f:71:02:30:d6:b9:35:99:7b:80:ea:c2:90:95:b8:d6:dc:
2c:75:86:ca:e7:22:2c:4f:e2:72:b3:aa:39:b1:38:bc:d8:14:
4f:67:5d:94:13:8d:ce:54:b0:76:af:e2:54:72:09:e9:c8:8b:
9b:05:47:e0:1b:dc:52:f1:e0:30:cd:f1:b4:a3:0d:32:43:52:
1e:e0:48:d0:23:84:b9:37:6a:3b:38:ea:21:05:b5:79:1f:1b:
e3:ff:26:ab:a1:6d:7f:7c:2f:1c:05:94:08:43:48:d9:d4:7b:
cc:ba:8e:3c:fe:60:27:7c:69:d8:4f:3d:71:62:69:91:ba:25:
1e:ea:74:7b:56:54:d7:8b:7d:e7:23:b7:90:f8:f9:a9:58:43:
73:73:8e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 18:31:27 2025 by rpki-client