This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3133322e3235352e36382e302f32322d3232203d3e20323633373030.roa
File: 3133322e3235352e36382e302f32322d3232203d3e20323633373030.roa (raw, json)
Hash identifier: VkDLdPVHCx6jDmdqOOe1v784r7CO6/kPbuVmbL5uEys=
Subject key identifier: D7:DC:E1:5B:BC:18:09:A3:71:AB:A0:59:52:6D:B6:9C:D6:0A:88:75
Certificate issuer: /CN=B57B438CFF3F02CD31FFA267CFD03FC2140E1C17
Certificate serial: 5C6780E6D06CD6050A2794471C0B5718BEF35F31
Authority key identifier: B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3133322e3235352e36382e302f32322d3232203d3e20323633373030.roa
Signing time: Tue 06 Jan 2026 19:17:36 +0000
ROA not before: Tue 06 Jan 2026 19:12:36 +0000
ROA not after: Tue 05 Jan 2027 19:17:36 +0000
asID: 263700
IP address blocks: 132.255.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.crl
rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Wed 28 Jan 2026 23:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:67:80:e6:d0:6c:d6:05:0a:27:94:47:1c:0b:57:18:be:f3:5f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B57B438CFF3F02CD31FFA267CFD03FC2140E1C17
Validity
Not Before: Jan 6 19:12:36 2026 GMT
Not After : Jan 5 19:17:36 2027 GMT
Subject: CN=D7DCE15BBC1809A371ABA059526DB69CD60A8875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:fb:91:b5:d2:2b:00:27:ca:e6:25:9b:65:
37:38:90:25:42:37:65:6a:15:2c:1f:44:a5:65:01:
b4:6e:8e:30:ef:fc:ed:7e:6a:c7:d5:11:05:f2:c8:
c9:0f:46:76:74:0a:94:18:d0:31:d2:db:fa:04:e5:
0c:b1:b0:5d:44:c3:82:4b:90:c5:93:0b:9d:dd:ac:
c9:4c:ce:c0:61:81:c5:1f:4a:18:e9:ad:ca:04:57:
73:94:14:ba:56:2f:a8:c5:b9:6d:f7:79:03:56:c4:
ed:5e:db:52:b0:1e:72:7f:d3:0f:17:0b:bb:0c:d1:
5d:d3:b9:ac:d4:35:e1:7e:68:34:ea:c0:ee:7a:21:
07:51:23:46:dd:27:2e:08:92:a3:ed:ee:1b:22:db:
89:78:c4:8d:c8:84:67:04:23:73:0e:c2:03:07:38:
7d:65:6f:3b:10:ca:c4:69:92:b4:f4:93:d9:bd:1c:
c5:d6:18:fd:8a:e1:05:15:ab:81:b5:fa:c3:4c:04:
17:88:35:a2:b4:5f:13:28:48:5c:d0:53:7b:70:9a:
96:91:5d:ac:27:12:5d:ba:2f:5a:9d:11:cd:34:37:
03:66:42:7e:3c:b4:59:9a:6b:cb:f2:3d:db:9e:2a:
70:6e:42:67:14:71:dd:c6:37:15:e5:b3:09:9a:ac:
0b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DC:E1:5B:BC:18:09:A3:71:AB:A0:59:52:6D:B6:9C:D6:0A:88:75
X509v3 Authority Key Identifier:
keyid:B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/3133322e3235352e36382e302f32322d3232203d3e20323633373030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.68.0/22
Signature Algorithm: sha256WithRSAEncryption
07:8f:a2:36:0a:ef:c4:6d:19:3d:d6:0d:c1:eb:94:22:89:40:
e0:3a:19:fb:4b:b6:91:e1:33:a5:ea:53:bf:6c:93:93:68:fc:
69:fa:50:30:e1:1e:37:b6:88:f9:4e:be:f2:96:9d:64:ea:b6:
76:38:ea:d4:0a:89:42:72:89:5b:b6:f2:72:dd:97:0a:05:1f:
15:0e:53:c6:5b:aa:f3:73:16:8d:99:dd:34:07:ed:dc:ea:4b:
b6:af:2a:03:e1:5d:9b:56:b3:19:bb:7c:50:4f:47:54:0e:51:
f7:ec:58:04:9b:3a:af:08:f4:53:e8:52:c0:f7:fe:35:c2:04:
58:8f:d3:0c:c5:9b:37:00:1f:c8:3f:d1:09:f1:d9:4e:e7:65:
3d:f3:24:53:d8:d1:18:9a:e0:38:5e:67:53:a6:d5:95:ef:fa:
e0:08:e8:40:34:bf:1c:1a:f7:aa:3a:94:06:af:5b:8d:93:15:
f5:73:e8:de:b6:48:9b:68:b0:3c:53:8f:cd:c9:3b:1f:0a:b4:
c7:21:f4:92:b1:6e:a4:10:9c:8e:00:ef:23:b7:4d:46:34:b3:
9e:ac:e4:d6:1a:9e:ae:8b:d3:4a:bb:74:4a:27:55:59:d7:bd:
07:f7:ce:76:37:61:51:4a:bd:bf:b4:87:86:47:5b:e0:d2:ef:
82:af:f3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:29:37 2026 by rpki-client