This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/3133322e3235352e3232342e302f32322d3233203d3e20323633373136.roa
File: 3133322e3235352e3232342e302f32322d3233203d3e20323633373136.roa (raw, json)
Hash identifier: +Md2XsPx4/V5TihKBe5CE+ISIz29rfXN/ugqBTW8ZyE=
Subject key identifier: F0:A7:52:B6:DB:21:29:04:4E:6E:7D:2A:5B:D2:A7:91:39:2B:32:FA
Certificate issuer: /CN=48A2AE510C2812263732FA2A9F0AF189D1B73B04
Certificate serial: 45F854CDD92A4EE20B2588C15CF20A06D6E49344
Authority key identifier: 48:A2:AE:51:0C:28:12:26:37:32:FA:2A:9F:0A:F1:89:D1:B7:3B:04
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/3133322e3235352e3232342e302f32322d3233203d3e20323633373136.roa
Signing time: Tue 06 Jan 2026 19:07:03 +0000
ROA not before: Tue 06 Jan 2026 19:02:03 +0000
ROA not after: Tue 05 Jan 2027 19:07:03 +0000
asID: 263716
IP address blocks: 132.255.224.0/22 maxlen: 23
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.crl
rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 12:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:f8:54:cd:d9:2a:4e:e2:0b:25:88:c1:5c:f2:0a:06:d6:e4:93:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48A2AE510C2812263732FA2A9F0AF189D1B73B04
Validity
Not Before: Jan 6 19:02:03 2026 GMT
Not After : Jan 5 19:07:03 2027 GMT
Subject: CN=F0A752B6DB2129044E6E7D2A5BD2A791392B32FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:d4:31:ee:fb:d4:c1:61:c7:b2:96:d4:e9:
1d:86:64:92:8a:58:2e:56:07:0c:a5:3b:2f:37:d8:
c3:1a:f4:18:9c:a0:67:f3:db:52:73:a1:c0:8b:ba:
e5:42:18:cf:b9:c0:a9:fb:96:dc:0a:a6:b9:c3:22:
57:e6:c7:8b:11:99:d4:a6:e1:0d:24:2b:de:d0:44:
0c:a4:bf:87:e4:e2:75:f9:68:dd:71:9e:f4:fd:55:
00:a6:83:fb:d0:d1:f9:cd:0c:ae:14:2f:f1:41:53:
ec:00:e8:5c:d6:e2:ea:d2:f8:5f:d6:6a:f0:ed:46:
4e:f1:8d:af:13:99:91:c8:e2:8c:80:d4:a0:a1:23:
16:69:c5:68:18:12:11:0b:42:db:75:5b:a2:05:d2:
ca:a0:07:06:73:9b:e1:d1:3d:84:21:1e:93:25:dc:
f3:83:f9:93:a6:4a:f8:ef:24:75:8e:7b:fa:cf:4c:
61:ce:3a:4f:2f:9d:45:d1:38:df:e1:34:cb:75:65:
55:9a:fc:65:53:a9:56:8b:62:a2:e1:bc:95:43:e0:
28:48:dc:35:20:e5:3b:5f:68:d5:63:87:8c:69:bb:
3d:ee:e4:b0:07:f4:bc:5a:68:9d:1b:df:75:d6:de:
94:3d:61:84:ec:e7:1f:4a:34:a7:0f:a1:f2:45:2d:
01:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A7:52:B6:DB:21:29:04:4E:6E:7D:2A:5B:D2:A7:91:39:2B:32:FA
X509v3 Authority Key Identifier:
keyid:48:A2:AE:51:0C:28:12:26:37:32:FA:2A:9F:0A:F1:89:D1:B7:3B:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/48A2AE510C2812263732FA2A9F0AF189D1B73B04.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C291AEB17BDEFACD0867A60AEAD307AD6A1C0E1628F3EF8D1EDBE2DF84DFC5AD/0/3133322e3235352e3232342e302f32322d3233203d3e20323633373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.224.0/22
Signature Algorithm: sha256WithRSAEncryption
64:f9:1e:c5:b2:ad:89:98:da:8b:14:15:f6:fa:5f:14:e2:31:
72:03:78:06:80:bd:08:a5:85:ce:a3:7e:81:1a:6b:28:aa:56:
17:b4:4e:97:5e:b5:0d:03:d1:5d:b6:f7:8b:8a:6e:3d:dc:06:
96:ff:61:aa:32:23:80:30:6a:14:cb:af:4d:74:a3:8e:3a:5c:
fe:96:0d:53:21:47:20:74:38:cf:8a:22:1f:9c:89:fe:3a:69:
72:2d:7d:af:aa:83:94:3d:9e:ad:a9:d3:16:e8:2c:b8:c0:fd:
08:fa:0b:85:60:c0:bf:89:32:66:e2:7e:b4:63:b0:de:7a:ea:
ce:df:68:c9:96:92:c1:2e:a1:17:44:b7:34:d1:c7:ba:7a:8c:
08:16:8f:f9:53:5e:c0:02:77:93:6c:e0:e4:36:30:e5:c7:98:
85:d5:05:34:1a:c0:ae:e1:6c:5f:ee:a2:10:e8:ba:c6:8f:6d:
44:d9:62:1c:84:fd:e0:42:fb:eb:71:ee:8d:2c:b8:71:ff:72:
0c:7c:66:35:f4:ee:8c:0f:f2:fe:f5:b6:63:cb:5e:f4:c7:44:
2b:04:cd:15:08:d5:d7:c3:d3:9d:36:06:6c:ab:a2:6f:fb:32:
62:90:7e:ab:3e:d0:a7:63:e4:e9:9b:e4:70:dd:c1:85:60:aa:
c8:da:97:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:06:17 2026 by rpki-client