This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e37352e302f32342d3234203d3e203238303336.roa
File: 3136352e39382e37352e302f32342d3234203d3e203238303336.roa (raw, json)
Hash identifier: O4Ws545y9moisC9MmT0CjvxnS4LQL0/QCMxX/8s/014=
Subject key identifier: BB:76:C9:71:25:83:B5:A4:9B:56:75:E6:54:C4:8B:9D:79:09:0F:CB
Certificate issuer: /CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Certificate serial: 2D1F8E2870A7EC73877DDB37DEC8018137573109
Authority key identifier: 1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e37352e302f32342d3234203d3e203238303336.roa
Signing time: Fri 28 Nov 2025 17:35:02 +0000
ROA not before: Fri 28 Nov 2025 17:30:02 +0000
ROA not after: Fri 27 Nov 2026 17:35:02 +0000
asID: 28036
IP address blocks: 165.98.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 10 Dec 2025 22:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:1f:8e:28:70:a7:ec:73:87:7d:db:37:de:c8:01:81:37:57:31:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B3FB06809362D90ED82F4A360BDEE3FB303C03D
Validity
Not Before: Nov 28 17:30:02 2025 GMT
Not After : Nov 27 17:35:02 2026 GMT
Subject: CN=BB76C9712583B5A49B5675E654C48B9D79090FCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:fc:56:40:79:9e:aa:59:47:bf:1d:b9:19:
1a:3b:8c:92:c3:f5:67:4d:1f:ab:21:ca:cb:e0:de:
e3:c9:5a:4c:a5:cf:56:3e:f7:5a:18:7f:2c:a1:4f:
12:00:6c:b2:84:43:4e:a3:d6:a7:9c:a4:b7:c2:23:
a3:f4:a9:c4:cb:26:87:33:6e:40:b9:57:dd:5a:c3:
2e:d1:38:9b:38:66:a1:aa:66:de:40:f7:68:a1:57:
ad:7f:ea:44:ed:59:27:27:3e:54:b2:e1:c7:8d:94:
c8:67:e9:14:e1:53:ee:d5:97:fd:81:ef:cc:36:0e:
2b:10:90:5f:3e:d8:c9:2a:b8:5c:b2:be:b7:5b:07:
76:bd:33:ea:ff:85:eb:cb:2b:3a:e3:d0:64:b6:bf:
7e:18:26:32:a8:9b:90:0b:03:b4:27:06:39:23:86:
87:de:98:91:aa:52:0d:53:91:b4:6b:c1:a6:45:b2:
2a:b3:a8:59:4a:46:63:76:b7:74:25:a8:74:39:d5:
43:86:cb:22:f0:30:a7:a5:c2:93:19:95:c1:dc:b7:
b8:51:3e:7c:c2:9b:57:28:e9:b5:2a:31:56:ee:dd:
f8:58:d7:2c:7f:ce:b6:ab:17:f0:15:64:16:49:66:
bb:bb:75:27:60:de:10:a9:fa:6f:a9:a3:4a:10:82:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:76:C9:71:25:83:B5:A4:9B:56:75:E6:54:C4:8B:9D:79:09:0F:CB
X509v3 Authority Key Identifier:
keyid:1B:3F:B0:68:09:36:2D:90:ED:82:F4:A3:60:BD:EE:3F:B3:03:C0:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1B3FB06809362D90ED82F4A360BDEE3FB303C03D.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A685CFE43360D3C05D1A1107E7DFA532C9B2F6825BF12BAA12235DD15842ACDF/0/3136352e39382e37352e302f32342d3234203d3e203238303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.98.75.0/24
Signature Algorithm: sha256WithRSAEncryption
43:e1:84:bd:b1:23:8d:72:1e:b2:03:65:37:03:4d:30:ee:b7:
21:f1:9d:b1:fe:83:a1:b9:7d:ed:65:fc:c2:7a:c6:e7:e6:10:
0f:a5:43:96:12:27:97:eb:c6:6f:cf:71:8a:0e:f1:56:8e:4d:
d4:28:4b:7b:9c:e9:01:b0:26:ea:9b:23:de:d4:9e:89:6d:75:
76:03:f5:70:c3:63:98:76:85:d9:8d:2e:30:e0:e3:2a:26:2c:
8d:7b:c0:cb:b3:0c:b6:24:2b:8a:8e:2c:89:5b:1a:9b:1c:61:
92:b4:37:9e:14:96:58:f7:ac:7a:3a:d2:5c:4a:87:93:9a:ef:
c8:87:1b:dc:80:11:3a:34:c8:18:68:27:42:4f:67:6d:b3:db:
9b:83:31:67:dc:88:1b:19:71:81:04:88:d5:57:66:8d:c9:f4:
10:49:e9:3b:62:c0:f4:2f:f3:20:a1:95:45:aa:d4:bb:d2:e3:
e7:b5:1c:f1:69:14:06:39:55:6e:af:53:5b:b8:63:cd:6b:2b:
96:ba:0b:1f:83:e6:6d:cf:3e:2e:38:8b:58:7d:30:a1:e2:8d:
c2:83:99:95:ee:dc:38:71:e5:96:3d:b2:b6:87:0d:da:ce:dd:
83:a8:d8:25:e6:79:ca:a5:23:0f:04:f3:a4:6a:66:8a:3a:db:
0a:ba:da:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 07:20:21 2025 by rpki-client