This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/3230312e3232322e34332e302f32342d3234203d3e20323731393733.roa
File: 3230312e3232322e34332e302f32342d3234203d3e20323731393733.roa (raw, json)
Hash identifier: NPILBmJP66QV29kyCW0hdNHZTDdg4x86pMPZGfQMNNg=
Subject key identifier: 49:D7:31:AA:A9:7D:EE:BB:38:FB:8A:FD:A5:08:C4:1B:3A:BC:D6:7D
Certificate issuer: /CN=D64A11A9A77E5298D696728C6796EF7B7B2DE7D0
Certificate serial: 32E9C2498F293ED53306C6ABB1DB0CAD06F6AC00
Authority key identifier: D6:4A:11:A9:A7:7E:52:98:D6:96:72:8C:67:96:EF:7B:7B:2D:E7:D0
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/3230312e3232322e34332e302f32342d3234203d3e20323731393733.roa
Signing time: Tue 06 Jan 2026 20:51:08 +0000
ROA not before: Tue 06 Jan 2026 20:46:08 +0000
ROA not after: Tue 05 Jan 2027 20:51:08 +0000
asID: 271973
IP address blocks: 201.222.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.crl
rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 06:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:e9:c2:49:8f:29:3e:d5:33:06:c6:ab:b1:db:0c:ad:06:f6:ac:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D64A11A9A77E5298D696728C6796EF7B7B2DE7D0
Validity
Not Before: Jan 6 20:46:08 2026 GMT
Not After : Jan 5 20:51:08 2027 GMT
Subject: CN=49D731AAA97DEEBB38FB8AFDA508C41B3ABCD67D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:42:d5:a5:1d:6d:dc:f5:83:55:eb:04:20:
a3:21:1b:fe:66:32:ec:bb:4d:75:c8:cb:cc:15:5e:
53:79:0d:7e:79:d0:bf:7d:f6:12:a1:d1:6e:23:05:
25:4e:fc:90:12:b3:02:ff:a6:8c:c1:48:c7:a7:3f:
0b:2d:52:ff:e1:0f:8c:8a:b4:96:08:06:4c:bf:12:
29:b3:76:ae:c9:d5:7e:3e:41:64:fd:fe:d2:e5:db:
e1:a9:00:70:9b:29:c2:bf:83:cb:9e:7e:82:8d:4d:
0a:38:5b:aa:7d:fc:fc:c2:a0:61:62:cf:e6:d4:ce:
2e:09:b3:48:14:23:5b:86:82:a8:24:0e:74:47:82:
d7:a1:a6:f9:11:4d:a4:e1:ce:b0:a6:4f:43:d8:4b:
8a:cf:93:ef:48:e2:88:d3:55:65:0f:0d:80:a7:65:
3a:93:f3:e0:33:2e:f8:d0:49:a1:ae:93:98:0d:4a:
86:b2:80:e2:d3:d4:de:fd:67:02:5f:a5:5e:00:31:
6e:c6:43:6a:3d:22:69:67:90:9e:69:a1:25:f0:85:
5f:15:35:37:7b:c0:9f:a0:72:64:ad:3d:cd:66:16:
be:7e:7a:50:17:46:52:d0:df:f5:51:38:f0:17:be:
1f:d6:8f:97:57:e4:54:db:60:e0:58:5d:27:12:b9:
72:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D7:31:AA:A9:7D:EE:BB:38:FB:8A:FD:A5:08:C4:1B:3A:BC:D6:7D
X509v3 Authority Key Identifier:
keyid:D6:4A:11:A9:A7:7E:52:98:D6:96:72:8C:67:96:EF:7B:7B:2D:E7:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D64A11A9A77E5298D696728C6796EF7B7B2DE7D0.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CE44675593FCB5620100439CC864F19C4086343D21B20C9EF4279C8CB5059060/0/3230312e3232322e34332e302f32342d3234203d3e20323731393733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.222.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:dd:b2:1f:9e:68:9f:fa:18:df:23:c3:31:99:81:fc:53:15:
8a:b9:92:d2:04:95:b3:41:08:99:60:53:81:f9:38:d5:d7:dc:
12:ca:0a:cc:bd:b5:7a:34:ee:4c:7f:68:fc:1f:78:bb:31:4f:
08:92:ad:6d:37:cb:20:57:2e:9d:fb:bf:a3:63:c6:7c:fd:fa:
80:51:2a:76:4b:7a:26:13:0d:07:d8:00:4e:23:3c:7e:90:b7:
e7:43:ec:42:dc:58:d6:22:ae:74:3b:b8:6e:9a:da:69:22:d8:
ed:28:3a:21:14:b8:e4:bd:48:6e:38:c5:cc:ac:a8:4f:9a:c9:
41:70:65:54:b3:61:d8:26:c0:b5:a8:bf:26:73:15:50:ae:dd:
de:96:62:3f:07:22:9e:18:ed:bb:58:9b:cb:b6:c6:b2:78:46:
95:25:4e:38:f5:f1:a9:41:c3:69:84:b1:44:00:48:7a:d9:07:
54:55:e4:d4:48:a5:fa:05:75:5d:11:e7:6e:36:c6:44:35:7e:
f1:3a:3f:e7:43:14:9a:2e:0e:e0:ca:34:33:c7:cb:e2:47:70:
07:d8:79:0d:33:dc:50:ed:47:a1:93:6b:bb:64:56:55:a6:63:
3d:00:4e:2e:0e:5f:59:e1:94:05:4d:40:ec:a4:ab:d3:e4:fe:
9f:f4:63:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:40:43 2026 by rpki-client