This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa
File: 3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa (raw, json)
Hash identifier: PBLaMVSKpAeS+l0vIKmtM2omSi0up4GGuP3iwTFSVNY=
Subject key identifier: C7:C4:55:08:31:09:C6:46:43:C3:22:A3:F4:97:A8:F7:82:89:E0:26
Certificate issuer: /CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Certificate serial: 10E359188450E8455B574ACD182DA1D54EE5DDAF
Authority key identifier: 20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa
Signing time: Tue 06 Jan 2026 19:10:06 +0000
ROA not before: Tue 06 Jan 2026 19:05:06 +0000
ROA not after: Tue 05 Jan 2027 19:10:06 +0000
asID: 273006
IP address blocks: 201.131.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl
rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 18:17:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:e3:59:18:84:50:e8:45:5b:57:4a:cd:18:2d:a1:d5:4e:e5:dd:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45
Validity
Not Before: Jan 6 19:05:06 2026 GMT
Not After : Jan 5 19:10:06 2027 GMT
Subject: CN=C7C455083109C64643C322A3F497A8F78289E026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6e:bc:29:58:29:9e:12:f4:36:f5:d7:85:24:
31:93:ba:90:62:d8:41:d3:58:59:6c:f8:5e:a1:7f:
55:97:b9:79:e6:c1:e4:53:ae:90:24:dc:60:21:ae:
e0:69:c6:7c:15:76:a5:d7:e1:ed:a7:32:69:1c:cc:
67:52:54:e9:c2:73:cd:b2:d7:bd:cc:24:74:e8:41:
d3:bc:52:2a:ab:b5:3a:03:7a:99:40:a6:07:af:86:
86:e5:f2:3d:9b:0d:b3:e9:5b:77:b1:f1:1c:43:d7:
8f:85:f8:c0:a4:2f:d2:86:73:3d:4e:e7:1d:4f:66:
4d:b4:3b:29:e7:d7:4f:00:d9:f5:59:7c:38:b6:b4:
df:01:b0:03:03:40:19:17:1b:df:17:80:03:5c:da:
23:28:23:42:fe:b3:a1:50:4a:ec:35:0a:e7:db:d6:
27:9c:8f:fa:75:9b:66:2c:22:30:1e:1a:d8:97:2d:
18:5f:7d:40:7b:d6:6c:24:76:ba:8a:26:8f:b3:b1:
46:e3:0a:1d:41:4c:0d:c0:9e:2e:3c:0f:5a:65:40:
88:e5:b3:9a:aa:f1:2f:45:48:c8:0b:23:1f:88:4f:
1e:0f:e8:2c:a9:f2:42:c3:79:25:c3:ae:a8:b0:6e:
8c:68:a3:47:98:50:39:47:12:95:52:d9:7d:32:1c:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C4:55:08:31:09:C6:46:43:C3:22:A3:F4:97:A8:F7:82:89:E0:26
X509v3 Authority Key Identifier:
keyid:20:AF:1F:FA:81:5C:6E:3F:3B:90:68:AD:D3:D3:AF:B1:10:DA:7D:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20AF1FFA815C6E3F3B9068ADD3D3AFB110DA7D45.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AEB3B37556A8DA2E706A4A7337F7DBBC47ABBACD713229B54CACD670EBC05E51/0/3230312e3133312e38392e302f32342d3234203d3e20323733303036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.131.89.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:a7:34:4d:f8:2b:ab:b0:cc:7b:b0:61:9c:bb:31:f2:af:c3:
df:54:8b:73:43:8a:62:d9:74:81:07:29:e6:5b:cd:dc:df:3c:
cd:56:8f:17:9b:19:14:6e:15:87:26:3e:9c:86:21:e0:82:4d:
6d:2a:8e:9d:36:81:a2:92:8c:85:34:44:8f:7b:0f:73:3c:ce:
dd:6f:2e:d3:3d:1b:e5:5b:ad:a3:37:12:0d:fe:6f:11:df:a7:
21:0b:16:da:b0:61:8b:0e:67:8d:ac:c2:c0:f5:bc:53:08:16:
38:0d:e7:ca:10:c5:57:29:36:6e:a8:21:7a:8a:16:06:9e:a5:
f0:47:bf:bc:26:48:55:b5:2e:47:91:23:a8:84:bb:84:ae:5f:
dc:5a:37:50:ef:2d:73:ab:04:09:40:38:8e:06:75:87:47:74:
80:d2:f3:12:f7:de:07:63:17:fa:df:64:8f:0b:bc:fa:60:b3:
d6:da:42:80:31:00:b0:fc:da:b9:eb:ba:64:df:5a:f9:5f:a5:
e4:90:50:83:d4:05:c2:25:7e:42:2a:2f:51:15:2d:6a:e4:33:
cf:e8:06:0b:3c:37:72:49:45:ba:31:89:ef:2a:8f:e7:18:30:
4b:30:a4:98:27:3e:f1:fe:8b:30:ad:2e:32:79:f1:bc:3d:74:
f2:f2:5d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:02:08 2026 by rpki-client