This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134332e3230322e3135362e302f32322d3234203d3e203131313732.roa
File: 3134332e3230322e3135362e302f32322d3234203d3e203131313732.roa (raw, json)
Hash identifier: AT7OlZqIp76gMzT3cwObsIwhXYdvK+v1GN1BgsYL1gM=
Subject key identifier: EE:BE:A2:6D:DD:46:9B:03:25:01:10:F1:6D:29:1C:33:84:CF:DE:57
Certificate issuer: /CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Certificate serial: 3424321434E0F5AB049DDD0FFCCA3D2BD178B248
Authority key identifier: E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134332e3230322e3135362e302f32322d3234203d3e203131313732.roa
Signing time: Tue 06 Jan 2026 19:45:01 +0000
ROA not before: Tue 06 Jan 2026 19:40:01 +0000
ROA not after: Tue 05 Jan 2027 19:45:01 +0000
asID: 11172
IP address blocks: 143.202.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:24:32:14:34:e0:f5:ab:04:9d:dd:0f:fc:ca:3d:2b:d1:78:b2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15
Validity
Not Before: Jan 6 19:40:01 2026 GMT
Not After : Jan 5 19:45:01 2027 GMT
Subject: CN=EEBEA26DDD469B03250110F16D291C3384CFDE57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:a8:45:6b:d2:97:5f:50:50:71:6f:b4:2c:
c9:ac:fd:d3:3b:59:a9:72:3d:a1:fe:62:44:bb:d3:
be:15:66:db:9e:42:2e:90:b4:c2:b1:e3:eb:86:03:
55:f0:6e:20:b1:41:0f:d3:66:57:eb:97:5a:a4:0b:
6e:5f:11:7e:e0:c0:b8:ff:5f:14:f9:4b:67:0d:ea:
d9:8d:bd:65:57:38:e3:60:7f:12:b1:0e:6f:16:d0:
e1:40:df:56:f8:bc:b4:c5:1c:35:dd:d2:55:23:f3:
8b:15:e6:5b:5e:cf:fe:dd:55:16:b4:97:3c:57:42:
3d:5a:b4:16:9d:de:c7:9a:04:b6:cb:02:ab:6e:6b:
7c:fa:45:6e:a7:93:b7:db:21:42:96:d3:b3:32:a3:
ce:99:43:9e:9d:7e:91:d9:bb:8f:88:46:08:85:ed:
65:14:d7:e3:a7:69:12:fc:42:df:80:00:8e:56:54:
3c:79:7a:c9:29:c1:15:bf:6c:a9:4f:60:e9:c7:06:
f3:b2:6b:e4:69:3e:23:3d:23:30:f7:3e:ed:c1:d1:
c5:96:a6:6c:64:8c:17:e0:04:8c:5d:47:79:4a:36:
d8:90:22:b6:4d:86:bd:e1:c5:53:43:72:7b:e6:26:
3b:07:b5:b5:8a:82:46:ec:f6:0b:df:63:8c:af:ee:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BE:A2:6D:DD:46:9B:03:25:01:10:F1:6D:29:1C:33:84:CF:DE:57
X509v3 Authority Key Identifier:
keyid:E3:5D:D2:93:E1:C3:BC:5F:4D:E1:53:18:FA:C5:96:7E:7D:55:BF:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E35DD293E1C3BC5F4DE15318FAC5967E7D55BF15.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DF6495DFE557A9656AFD934637E96634D3D2739D5072D17F108058F0A9CA9938/0/3134332e3230322e3135362e302f32322d3234203d3e203131313732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.156.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:15:43:01:df:b2:52:5b:81:5a:c5:6d:b6:c3:47:c6:62:ad:
36:f4:c3:d6:14:f0:92:97:22:8d:c4:94:eb:21:b3:70:28:07:
03:f0:db:45:f0:3f:37:4d:67:33:1c:5c:7b:dc:4a:a5:da:bb:
bd:c0:da:cd:0e:44:dc:d9:4f:ba:a2:0b:51:33:8f:f5:7a:a1:
a0:5d:b2:b9:2f:63:c2:f1:be:cd:de:5b:b5:ff:5d:4e:d5:54:
68:96:11:9f:33:d7:75:cc:30:c9:1d:8e:f0:e5:73:01:ba:94:
03:fd:68:cc:ec:49:a9:bd:06:db:ab:76:5e:ef:76:2f:d8:a6:
a5:38:4b:68:3d:26:cf:a9:ab:7b:e6:f3:0a:ee:c3:86:88:fe:
f0:a6:ad:cc:fd:d2:b2:92:81:23:b9:20:dc:26:92:65:28:24:
5b:be:49:e3:a6:00:26:4a:36:47:15:8d:95:b3:44:db:05:4d:
f1:63:02:8d:76:59:7f:5c:54:8b:4f:86:23:49:1a:51:ff:84:
43:89:fc:3f:9c:c8:3a:69:a2:9f:2d:a3:86:32:ae:6e:d8:f9:
b6:75:1c:13:ff:ae:43:4b:75:56:68:35:53:d1:f2:da:24:5c:
a7:9d:e1:4b:2d:f5:c7:73:4d:26:b5:47:9e:45:10:49:ca:6b:
19:b1:0b:ea
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUNCQyFDTg9asEnd0P/Mo9K9F4skgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTM1REQyOTNFMUMzQkM1RjRERTE1MzE4RkFDNTk2N0U3
RDU1QkYxNTAeFw0yNjAxMDYxOTQwMDFaFw0yNzAxMDUxOTQ1MDFaMDMxMTAvBgNV
BAMTKEVFQkVBMjZEREQ0NjlCMDMyNTAxMTBGMTZEMjkxQzMzODRDRkRFNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIMahFa9KXX1BQcW+0LMms/dM7
WalyPaH+YkS7074VZtueQi6QtMKx4+uGA1XwbiCxQQ/TZlfrl1qkC25fEX7gwLj/
XxT5S2cN6tmNvWVXOONgfxKxDm8W0OFA31b4vLTFHDXd0lUj84sV5ltez/7dVRa0
lzxXQj1atBad3seaBLbLAqtua3z6RW6nk7fbIUKW07Myo86ZQ56dfpHZu4+IRgiF
7WUU1+OnaRL8Qt+AAI5WVDx5eskpwRW/bKlPYOnHBvOya+RpPiM9IzD3Pu3B0cWW
pmxkjBfgBIxdR3lKNtiQIrZNhr3hxVNDcnvmJjsHtbWKgkbs9gvfY4yv7i1pAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQU7r6ibd1GmwMlARDxbSkcM4TP3lcwHwYDVR0j
BBgwFoAU413Sk+HDvF9N4VMY+sWWfn1VvxUwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ERjY0OTVERkU1NTdBOTY1NkFGRDkzNDYzN0U5NjYzNEQz
RDI3MzlENTA3MkQxN0YxMDgwNThGMEE5Q0E5OTM4LzAvRTM1REQyOTNFMUMzQkM1
RjRERTE1MzE4RkFDNTk2N0U3RDU1QkYxNS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9FMzVERDI5M0UxQzNCQzVGNERF
MTUzMThGQUM1OTY3RTdENTVCRjE1LmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvREY2NDk1REZFNTU3QTk2NTZBRkQ5MzQ2MzdFOTY2MzREM0QyNzM5RDUw
NzJEMTdGMTA4MDU4RjBBOUNBOTkzOC8wLzMxMzQzMzJlMzIzMDMyMmUzMTM1MzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMTMxMzEzNzMyLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCj8qc
MA0GCSqGSIb3DQEBCwUAA4IBAQANFUMB37JSW4FaxW22w0fGYq029MPWFPCSlyKN
xJTrIbNwKAcD8NtF8D83TWczHFx73Eql2ru9wNrNDkTc2U+6ogtRM4/1eqGgXbK5
L2PC8b7N3lu1/11O1VRolhGfM9d1zDDJHY7w5XMBupQD/WjM7EmpvQbbq3Ze73Yv
2KalOEtoPSbPqat75vMK7sOGiP7wpq3M/dKykoEjuSDcJpJlKCRbvknjpgAmSjZH
FY2Vs0TbBU3xYwKNdll/XFSLT4YjSRpR/4RDifw/nMg6aaKfLaOGMq5u2Pm2dRwT
/65DS3VWaDVT0fLaJFynneFLLfXHc00mtUeeRRBJymsZsQvq
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:19:35 2026 by rpki-client