This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e33322e302f32322d3234203d3e203237373638.roa
File: 3230312e3231372e33322e302f32322d3234203d3e203237373638.roa (raw, json)
Hash identifier: +8RZLzHv9CY83x1jGtuVdRg230T5iNzO3DXN9gu++eM=
Subject key identifier: D7:32:0B:D0:77:F3:AB:F2:C9:57:22:C6:59:EF:34:72:11:A7:BC:19
Certificate issuer: /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial: 07722962B80527852C8EC965AEDB731107BD8558
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e33322e302f32322d3234203d3e203237373638.roa
Signing time: Tue 06 Jan 2026 19:26:00 +0000
ROA not before: Tue 06 Jan 2026 19:21:00 +0000
ROA not after: Tue 05 Jan 2027 19:26:00 +0000
asID: 27768
IP address blocks: 201.217.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:72:29:62:b8:05:27:85:2c:8e:c9:65:ae:db:73:11:07:bd:85:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Validity
Not Before: Jan 6 19:21:00 2026 GMT
Not After : Jan 5 19:26:00 2027 GMT
Subject: CN=D7320BD077F3ABF2C95722C659EF347211A7BC19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:a2:b3:80:21:38:ba:c3:71:ea:9b:c5:9c:
3f:69:56:1c:01:d3:4e:15:0b:0c:d4:ef:1d:f3:a7:
eb:10:59:e2:e4:4e:4f:3a:7b:6e:5d:11:57:0b:cb:
81:be:05:0c:65:a1:0a:2b:1f:bc:81:3f:b0:83:2e:
ad:96:ca:08:2d:a8:67:bd:68:31:1c:35:53:1d:a5:
1e:14:72:c1:80:f9:6d:24:ff:1e:7a:39:16:30:97:
8b:5d:b3:08:39:73:67:53:4d:2a:6b:27:b3:cd:cc:
52:d9:12:71:45:63:ad:28:0b:6c:d9:d8:b8:c2:ee:
29:89:82:d4:0a:01:f6:ae:23:4d:69:db:8a:c8:cb:
4a:eb:73:dc:75:2c:cf:1e:37:b2:2b:de:64:4b:e2:
02:2e:b3:ff:06:58:52:a8:0e:ab:0e:3f:17:55:23:
fb:62:2f:5e:81:66:e7:9b:aa:b5:9b:75:0d:23:7b:
29:d2:3b:5b:ee:da:93:c1:4d:77:b5:35:c0:78:28:
4c:05:66:a0:c6:b0:96:d6:0d:43:c9:cf:bc:4d:fa:
d6:0b:1b:28:03:6a:c1:93:ee:4d:45:5a:66:d0:d6:
89:52:7d:22:e4:ea:0c:ed:7d:8f:ed:98:7f:7d:2b:
a1:02:cb:6c:3f:fd:e0:82:b8:c7:f7:f2:15:ca:0c:
e9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:32:0B:D0:77:F3:AB:F2:C9:57:22:C6:59:EF:34:72:11:A7:BC:19
X509v3 Authority Key Identifier:
keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e33322e302f32322d3234203d3e203237373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.217.32.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:82:5f:10:3a:b7:1d:75:37:17:2f:a8:ba:5a:e0:c5:38:60:
50:ba:af:0f:98:7e:cb:85:94:30:69:3a:3f:28:76:35:11:56:
3b:3f:56:71:17:dc:b3:73:d6:ad:3b:74:2c:19:9f:6d:6f:99:
96:43:de:62:43:0a:c7:23:c4:41:8a:e2:a3:3c:88:76:97:b5:
12:02:24:59:67:74:89:5b:39:5e:92:63:1f:95:f5:92:8b:66:
87:cb:bb:e0:77:61:a3:b6:05:d0:92:69:75:2d:4d:b6:58:b5:
70:f6:a8:25:66:52:dc:9f:c2:72:23:77:e2:6d:ef:f5:4f:f9:
b2:6a:8f:9b:72:78:01:01:e3:84:5b:d5:64:a9:ee:4d:da:09:
d0:ae:53:52:3c:c7:d1:d7:ae:e1:e8:2d:b2:f1:0f:b0:ce:17:
ca:a2:49:12:f6:e7:8a:c6:d4:57:33:f4:e0:1f:de:1c:c7:a6:
3f:16:c4:d7:f1:37:36:ab:0b:8b:a0:94:95:78:ec:dc:88:cd:
5e:e1:bf:2c:5d:36:27:58:a4:cc:66:26:ec:09:b6:b9:cc:81:
bd:35:30:e6:6f:0f:0c:18:3d:97:e4:95:18:21:fe:91:d6:b2:
eb:34:34:21:11:9a:fd:8f:a8:86:93:fb:4e:88:bd:bb:17:7e:
cf:2d:1f:40
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUB3IpYrgFJ4UsjsllrttzEQe9hVgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUMyRUFFNUJGODgzRDNERkQ4QjI3MEQwODJGRjg5REQ4
MTA5MEM1MzAeFw0yNjAxMDYxOTIxMDBaFw0yNzAxMDUxOTI2MDBaMDMxMTAvBgNV
BAMTKEQ3MzIwQkQwNzdGM0FCRjJDOTU3MjJDNjU5RUYzNDcyMTFBN0JDMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4kaKzgCE4usNx6pvFnD9pVhwB
004VCwzU7x3zp+sQWeLkTk86e25dEVcLy4G+BQxloQorH7yBP7CDLq2WyggtqGe9
aDEcNVMdpR4UcsGA+W0k/x56ORYwl4tdswg5c2dTTSprJ7PNzFLZEnFFY60oC2zZ
2LjC7imJgtQKAfauI01p24rIy0rrc9x1LM8eN7Ir3mRL4gIus/8GWFKoDqsOPxdV
I/tiL16BZuebqrWbdQ0jeynSO1vu2pPBTXe1NcB4KEwFZqDGsJbWDUPJz7xN+tYL
GygDasGT7k1FWmbQ1olSfSLk6gztfY/tmH99K6ECy2w//eCCuMf38hXKDOlhAgMB
AAGjggLIMIICxDAdBgNVHQ4EFgQU1zIL0Hfzq/LJVyLGWe80chGnvBkwHwYDVR0j
BBgwFoAU7C6uW/iD09/YsnDQgv+J3YEJDFMwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9BM0E0RTBEMThEOTdEMzlDNTM5MEZGREUyNkZDNzhCRTRB
QjUwNjg5NjdCODg4QUQ5ODhFNEJCMEQ0OEY5ODE5LzAvRUMyRUFFNUJGODgzRDNE
RkQ4QjI3MEQwODJGRjg5REQ4MTA5MEM1My5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FQzJFQUU1QkY4ODNEM0RGRDhC
MjcwRDA4MkZGODlERDgxMDkwQzUzLmNlcjCBxwYIKwYBBQUHAQsEgbowgbcwgbQG
CCsGAQUFBzALhoGncnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQTNBNEUwRDE4RDk3RDM5QzUzOTBGRkRFMjZGQzc4QkU0QUI1MDY4OTY3
Qjg4OEFEOTg4RTRCQjBENDhGOTgxOS8wLzMyMzAzMTJlMzIzMTM3MmUzMzMyMmUz
MDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNzM3MzYzOC5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAsnZIDAN
BgkqhkiG9w0BAQsFAAOCAQEAX4JfEDq3HXU3Fy+oulrgxThgULqvD5h+y4WUMGk6
Pyh2NRFWOz9WcRfcs3PWrTt0LBmfbW+ZlkPeYkMKxyPEQYriozyIdpe1EgIkWWd0
iVs5XpJjH5X1kotmh8u74Hdho7YF0JJpdS1Ntli1cPaoJWZS3J/CciN34m3v9U/5
smqPm3J4AQHjhFvVZKnuTdoJ0K5TUjzH0deu4egtsvEPsM4XyqJJEvbnisbUVzP0
4B/eHMemPxbE1/E3NqsLi6CUlXjs3IjNXuG/LF02J1ikzGYm7Am2ucyBvTUw5m8P
DBg9l+SVGCH+kday6zQ0IRGa/Y+ohpP7Toi9uxd+zy0fQA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:30:21 2026 by rpki-client