This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/3132382e3230312e3232342e302f32322d3234203d3e20323731383732.roa
File: 3132382e3230312e3232342e302f32322d3234203d3e20323731383732.roa (raw, json)
Hash identifier: lSsE/jfYPdvaVqGD1pqJLFYYlOrqZ3BDu9vFQmFldFc=
Subject key identifier: 5D:F5:A7:0E:BC:98:BA:7F:39:E0:B0:B0:D4:75:A9:1F:83:7C:0F:12
Certificate issuer: /CN=5CD3515583757EA0B20F8D85166821CBE4204EE9
Certificate serial: 32810063432052740E54950E900388461203DA5B
Authority key identifier: 5C:D3:51:55:83:75:7E:A0:B2:0F:8D:85:16:68:21:CB:E4:20:4E:E9
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/3132382e3230312e3232342e302f32322d3234203d3e20323731383732.roa
Signing time: Tue 06 Jan 2026 19:22:56 +0000
ROA not before: Tue 06 Jan 2026 19:17:56 +0000
ROA not after: Tue 05 Jan 2027 19:22:56 +0000
asID: 271872
IP address blocks: 128.201.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.crl
rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 04:50:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:81:00:63:43:20:52:74:0e:54:95:0e:90:03:88:46:12:03:da:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CD3515583757EA0B20F8D85166821CBE4204EE9
Validity
Not Before: Jan 6 19:17:56 2026 GMT
Not After : Jan 5 19:22:56 2027 GMT
Subject: CN=5DF5A70EBC98BA7F39E0B0B0D475A91F837C0F12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:eb:26:2e:e7:05:c8:31:c2:01:bd:ab:62:a7:
fd:84:bf:3c:97:60:98:14:13:62:b7:12:84:15:fe:
8f:46:7e:65:ca:c9:e8:da:6e:31:d4:39:36:26:48:
70:51:9f:ed:f0:ae:a7:6e:de:ad:73:f2:c4:1a:a0:
27:1f:cb:1d:3b:6e:98:ff:5d:3c:b5:31:3c:27:76:
da:d3:bc:69:5e:b8:cb:f7:db:8e:94:10:54:74:41:
16:fe:d6:63:b2:88:81:66:61:e9:39:c0:48:2d:6d:
dc:6e:ca:4a:57:d6:38:cc:61:de:2f:42:56:7c:97:
ce:e1:ac:f2:7b:d0:60:5c:ee:d5:13:f3:cd:d8:de:
92:70:0c:fc:3e:63:30:ec:c8:31:20:48:4e:69:37:
05:c7:b8:01:b7:1b:ed:b4:fa:88:5c:24:79:92:ce:
6d:92:bf:25:97:38:f1:e1:56:81:e1:9f:b8:e7:25:
99:7d:4d:f5:bb:67:df:75:17:4b:f4:40:8d:f4:95:
85:dd:98:bb:48:ab:3b:cd:f4:6d:56:bd:1b:a0:4c:
b0:f0:00:b1:19:cc:5b:15:8c:48:cd:fc:dd:50:c0:
3e:98:b9:9d:f8:2e:b3:4d:4c:27:ab:fa:cc:95:5d:
bd:6a:14:40:5a:26:45:c6:c4:10:21:2c:2f:76:bb:
b4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F5:A7:0E:BC:98:BA:7F:39:E0:B0:B0:D4:75:A9:1F:83:7C:0F:12
X509v3 Authority Key Identifier:
keyid:5C:D3:51:55:83:75:7E:A0:B2:0F:8D:85:16:68:21:CB:E4:20:4E:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5CD3515583757EA0B20F8D85166821CBE4204EE9.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CDA601F614D8CCE0383FFDA4B3641F165E35EF8F41D8CC6C9BB9C7283F015D54/0/3132382e3230312e3232342e302f32322d3234203d3e20323731383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.224.0/22
Signature Algorithm: sha256WithRSAEncryption
48:fa:20:1b:57:b5:80:6f:4a:83:2f:4f:83:fa:38:c4:bd:5e:
89:db:7a:bc:85:52:5a:9e:a0:d0:8e:d5:a2:64:33:14:6c:3c:
c0:8f:80:cf:5d:06:fd:c0:bc:75:18:01:c9:35:13:68:8f:ff:
ae:05:dd:0d:8d:32:d2:69:6f:cb:65:a5:e9:77:4d:69:19:5a:
71:72:d0:a7:15:25:77:dc:3e:cd:20:34:25:e7:c2:9a:23:21:
7c:94:5e:5e:10:b5:5a:ed:37:5d:27:4a:21:52:b6:0b:7b:df:
0b:44:51:ac:24:3b:6a:a3:55:81:c1:92:f4:48:2f:7e:6e:f5:
1d:ac:81:55:39:34:39:5a:16:ec:a0:fb:9b:c0:30:ee:4b:f8:
bf:bc:dd:ec:ac:96:be:15:fc:06:27:e9:20:c2:6e:bb:2f:5c:
5a:50:2b:7a:98:a5:69:7a:3c:1c:76:1c:33:6c:d8:22:a0:90:
78:77:d3:bd:a1:d7:74:1d:4b:b9:da:bc:97:51:3b:41:50:65:
3b:03:81:75:57:04:64:b9:10:03:4b:fd:78:cd:77:fb:df:88:
75:a4:6a:f3:9f:40:f9:43:97:9b:b9:de:45:f0:68:ca:03:e8:
38:d1:f9:b5:63:a4:c2:25:ef:76:62:8c:d1:f1:45:d1:48:9d:
7c:d6:cb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:58:35 2026 by rpki-client