This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3138312e3232352e3133362e302f32322d3232203d3e203437383639.roa
File: 3138312e3232352e3133362e302f32322d3232203d3e203437383639.roa (raw, json)
Hash identifier: X0F5rMa2PW+Pn/sjhzHZGF9USMQDIhdzFjp34YCnID8=
Subject key identifier: 00:CD:7F:57:77:B5:26:36:1E:B4:6D:DB:4C:C8:19:EF:7C:E6:77:12
Certificate issuer: /CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
Certificate serial: 2975897E2397D4A04023C343F9B1D00FD8AE135E
Authority key identifier: BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3138312e3232352e3133362e302f32322d3232203d3e203437383639.roa
Signing time: Tue 06 Jan 2026 20:57:20 +0000
ROA not before: Tue 06 Jan 2026 20:52:20 +0000
ROA not after: Tue 05 Jan 2027 20:57:20 +0000
asID: 47869
IP address blocks: 181.225.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl
rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:75:89:7e:23:97:d4:a0:40:23:c3:43:f9:b1:d0:0f:d8:ae:13:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E
Validity
Not Before: Jan 6 20:52:20 2026 GMT
Not After : Jan 5 20:57:20 2027 GMT
Subject: CN=00CD7F5777B526361EB46DDB4CC819EF7CE67712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:18:4a:42:96:25:f6:22:d6:33:94:2d:79:a4:
53:f0:29:15:a8:0b:42:e1:34:3a:a0:3f:91:7c:56:
ed:44:d2:fe:38:c2:05:65:8a:6a:f2:79:1a:8b:a6:
37:2e:4d:f7:b5:0a:13:12:0f:ad:d6:42:3c:14:ca:
cb:ec:b5:6d:2f:57:e2:b6:a2:69:74:5f:fd:c9:a8:
67:86:1a:8d:7b:ed:7c:9d:af:1e:fd:30:af:ba:bf:
78:40:d3:b6:d4:4a:3d:a7:d9:14:c9:53:a8:24:56:
d9:c6:a2:bc:a6:53:18:7c:30:46:fd:93:1c:6e:ec:
4a:f6:3e:e6:9f:38:36:cd:87:8f:35:0c:2d:9b:59:
34:ba:1b:e3:b3:b7:3b:55:88:a5:75:a0:95:fc:79:
5c:3f:96:08:f1:c2:25:c7:6e:0a:d1:85:21:8a:3a:
14:ca:05:cc:5d:67:86:09:74:8d:e0:1a:32:7c:b2:
45:c8:61:79:ef:05:c6:0c:5c:54:88:d0:d0:bf:b0:
e4:be:9b:d1:4e:85:24:03:fa:3e:61:91:b0:07:17:
54:3e:d4:70:ea:dc:ed:d6:4b:b8:e9:88:88:46:91:
4b:23:89:b2:d2:d6:d0:4e:52:14:bc:12:9e:e6:8a:
3c:20:ce:ba:25:0e:64:3f:cc:ac:f2:25:67:df:fd:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CD:7F:57:77:B5:26:36:1E:B4:6D:DB:4C:C8:19:EF:7C:E6:77:12
X509v3 Authority Key Identifier:
keyid:BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/3138312e3232352e3133362e302f32322d3232203d3e203437383639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.225.136.0/22
Signature Algorithm: sha256WithRSAEncryption
c5:3d:0f:62:a4:ca:01:e7:4d:85:70:33:03:42:5c:c8:34:c1:
bc:50:25:11:55:b3:11:71:0e:13:ab:3f:b4:6d:29:04:b5:0e:
48:a2:da:d0:e6:5b:7a:74:4d:bc:fc:ca:19:6d:51:73:38:03:
e5:a8:0b:bc:da:46:48:fb:85:77:52:c8:b8:aa:f5:53:cc:6e:
dd:c0:a0:c4:ba:7b:b0:c4:e8:6f:d8:c0:01:70:9d:d1:96:07:
d9:13:8e:e1:1a:b8:29:27:8f:83:d0:06:6e:09:26:80:60:65:
80:a9:93:b0:fc:ee:6b:4c:d4:14:59:10:3e:50:94:ff:19:d1:
2b:2d:ef:d6:82:0c:ab:dc:a7:87:17:d1:ca:a5:c0:57:37:20:
f6:bf:37:2b:78:99:f5:06:a0:e1:2a:07:bc:9f:ea:8c:c7:b9:
ab:b1:45:cf:11:e6:15:05:15:a8:0c:bc:cf:27:ef:7f:2d:a2:
58:5e:b1:0f:d9:74:b0:42:34:1f:73:c4:3d:f9:5a:68:4e:a8:
0a:54:e9:67:4e:5c:d5:40:e0:67:e5:bb:10:ca:cc:9e:cc:54:
39:c6:c4:25:cf:b5:f3:6c:a6:d7:cf:d9:61:8b:44:11:ea:d3:
6c:fc:c0:1a:5e:f3:95:a1:19:fc:5c:25:60:b2:ca:58:76:19:
4f:38:05:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:02:42 2026 by rpki-client