This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230312e3136312e3132302e302f32312d3234203d3e203139333733.roa
File: 3230312e3136312e3132302e302f32312d3234203d3e203139333733.roa (raw, json)
Hash identifier: /5R+AvwctFTxYFfMTOV/cVCx2KFR2Mc2cLqsYzo6m+I=
Subject key identifier: 9E:7C:9A:F1:5A:0D:E6:95:A0:4B:A4:86:B1:64:DF:17:AB:10:13:3A
Certificate issuer: /CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Certificate serial: 28A7981489BEEDA82CAB5EDD185B173D8A2178A5
Authority key identifier: 54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230312e3136312e3132302e302f32312d3234203d3e203139333733.roa
Signing time: Sun 18 Jan 2026 07:25:49 +0000
ROA not before: Sun 18 Jan 2026 07:20:49 +0000
ROA not after: Sun 17 Jan 2027 07:25:49 +0000
asID: 19373
IP address blocks: 201.161.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 07:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a7:98:14:89:be:ed:a8:2c:ab:5e:dd:18:5b:17:3d:8a:21:78:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54A62863B5EBDF6C27B56741C3B8B2624E379119
Validity
Not Before: Jan 18 07:20:49 2026 GMT
Not After : Jan 17 07:25:49 2027 GMT
Subject: CN=9E7C9AF15A0DE695A04BA486B164DF17AB10133A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:d2:aa:17:05:a6:be:84:dd:4e:ba:68:5f:
1a:02:67:44:fa:d2:ed:9f:9f:17:1f:44:36:8c:92:
8d:27:08:e7:0e:4f:f0:40:60:45:55:85:ad:ad:1b:
d9:f3:77:b9:14:09:9a:e2:b9:86:ca:a6:a3:04:da:
ea:60:90:57:d5:a2:4a:05:f2:5c:a3:dc:8a:f4:48:
a1:7e:38:1d:9f:e6:f1:63:15:35:a4:45:f3:2c:f5:
4a:f5:67:65:c5:22:f0:3f:42:21:66:a9:41:0d:fe:
07:90:bc:37:76:25:2d:bf:99:e5:07:43:14:65:cc:
eb:76:ec:a4:a5:09:df:59:ab:2b:d1:64:b4:ba:01:
ae:40:61:0d:30:c7:21:00:37:55:19:a1:68:30:82:
9a:0b:fc:3f:28:43:d7:a4:08:0f:71:44:b8:cd:94:
ee:f9:69:c0:cc:23:47:76:38:c6:ae:ea:97:3b:b1:
9c:a3:ff:0b:53:93:e7:2c:88:27:39:be:7f:ec:37:
82:c5:e1:39:b0:05:15:51:9d:bd:a5:a5:fa:e7:05:
2b:82:c0:82:e4:e8:95:72:d4:72:66:19:ca:cd:e8:
84:e7:dd:9d:f2:43:d8:8f:be:b0:a3:46:39:0a:26:
70:71:2d:de:21:a4:cf:7d:0a:f6:4c:30:57:b0:55:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7C:9A:F1:5A:0D:E6:95:A0:4B:A4:86:B1:64:DF:17:AB:10:13:3A
X509v3 Authority Key Identifier:
keyid:54:A6:28:63:B5:EB:DF:6C:27:B5:67:41:C3:B8:B2:62:4E:37:91:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/54A62863B5EBDF6C27B56741C3B8B2624E379119.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A60D86490460B7D631338F7091E660B337F9CD112F25BD90E0F31EEDA22835DB/0/3230312e3136312e3132302e302f32312d3234203d3e203139333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.161.120.0/21
Signature Algorithm: sha256WithRSAEncryption
85:f8:5f:b8:63:38:53:46:cc:32:42:a4:b8:ef:35:5d:ed:f6:
67:e8:ff:07:38:d9:59:b4:62:37:da:60:34:31:2d:02:20:40:
a4:46:7a:2c:f0:8c:43:33:36:8a:42:fb:29:1c:a9:fb:fb:f4:
4e:04:28:69:9a:c5:f4:fc:64:54:4c:30:2d:29:8e:f3:5b:a1:
85:82:e8:1c:80:c4:6b:8d:f6:1f:2f:f0:09:88:ed:94:7d:2d:
a2:6a:1c:16:af:e2:e2:35:2f:31:c2:08:35:4a:d5:44:ec:88:
53:b1:85:e6:32:9a:62:3f:df:a0:58:54:9c:77:6a:87:11:ef:
44:db:2e:15:cd:bf:0d:e4:62:6d:9c:83:93:74:6a:c9:e7:5d:
20:a3:8c:c4:00:ba:67:1c:05:ef:12:3a:fc:6b:a2:c8:bd:b7:
ad:df:c0:ef:27:cc:82:ec:63:3d:14:83:ec:f9:bd:a2:10:70:
81:43:55:32:b7:f5:f8:10:71:1c:66:dc:68:f0:74:78:08:19:
e2:14:dc:7a:37:b5:2c:68:c0:45:e6:37:d7:1a:11:f9:7f:5e:
ca:5a:9f:0c:65:40:68:7d:c3:53:d9:77:e1:30:d6:a8:d3:4e:
67:3f:00:72:91:84:20:b1:0a:89:69:7b:79:32:52:0a:11:4b:
99:71:f1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:12 2026 by rpki-client