This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3133322e302f32322d3234203d3e203232333638.roa
File: 3230312e3232312e3133322e302f32322d3234203d3e203232333638.roa (raw, json)
Hash identifier: a1bX+GwyKQKk4RLjrncH/grA4GNvKBI6wYkRr1buGlg=
Subject key identifier: 90:91:D2:D4:EB:38:B7:35:51:44:F4:D0:FE:C2:CC:D8:A0:F3:89:E0
Certificate issuer: /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial: 75B43EEF700D0BAE8BD0A976E6A311D3C999750B
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3133322e302f32322d3234203d3e203232333638.roa
Signing time: Tue 06 Jan 2026 19:18:02 +0000
ROA not before: Tue 06 Jan 2026 19:13:02 +0000
ROA not after: Tue 05 Jan 2027 19:18:02 +0000
asID: 22368
IP address blocks: 201.221.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:b4:3e:ef:70:0d:0b:ae:8b:d0:a9:76:e6:a3:11:d3:c9:99:75:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Validity
Not Before: Jan 6 19:13:02 2026 GMT
Not After : Jan 5 19:18:02 2027 GMT
Subject: CN=9091D2D4EB38B7355144F4D0FEC2CCD8A0F389E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:33:68:5e:bf:57:58:c4:be:df:a3:45:28:
19:ab:bf:78:9e:c5:a7:92:47:e2:5d:af:84:00:b9:
8a:7b:c8:b5:87:39:43:8c:b0:9b:08:2b:cb:72:75:
0b:51:d9:64:6b:3b:ce:17:53:d5:fb:f4:eb:81:58:
93:24:f9:6d:a7:1e:e5:cf:de:5b:19:92:76:12:eb:
df:ff:a4:2b:3b:56:e8:10:65:6a:dc:33:e5:b3:d3:
ac:b1:aa:3b:b9:94:bc:f2:01:9b:00:7c:1a:c3:7d:
11:ca:ae:0f:6a:08:6f:8d:36:f6:5b:86:5b:31:e9:
11:27:93:55:06:73:2a:9f:91:84:df:69:2c:b2:e1:
0c:fe:dc:35:2e:59:99:fe:68:12:f3:92:0d:bf:65:
06:28:5c:22:38:01:54:8a:f8:9f:10:ee:d7:68:01:
f8:17:0b:8e:e0:55:3e:78:2d:5c:75:65:9b:a6:bc:
c3:35:e5:43:67:fb:a8:6f:a1:e9:3a:16:e2:b9:d4:
a5:8f:93:8c:c6:a8:25:ad:6d:a3:30:ae:4a:99:61:
a6:af:f1:a2:04:bd:d0:3a:e7:9b:6b:4c:1e:6d:57:
32:ed:e7:24:46:90:fd:95:4a:77:16:b3:64:e3:24:
d2:7b:1e:b3:52:79:7c:5b:85:c6:89:b2:22:19:cf:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:91:D2:D4:EB:38:B7:35:51:44:F4:D0:FE:C2:CC:D8:A0:F3:89:E0
X509v3 Authority Key Identifier:
keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3133322e302f32322d3234203d3e203232333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.221.132.0/22
Signature Algorithm: sha256WithRSAEncryption
89:a9:be:e8:07:9d:89:ed:67:2d:e9:0b:0f:4b:4f:3c:e3:31:
f5:69:83:14:36:35:84:9f:1a:7b:15:21:5e:ea:b8:c0:39:45:
e3:e6:59:c6:c5:7a:3f:bf:51:5c:be:8c:3f:ad:52:62:53:53:
ae:93:d6:fe:06:04:1f:4c:14:86:19:57:80:2b:16:7c:e7:18:
13:7e:b0:4e:f2:7e:f5:01:15:d1:63:6a:a9:48:69:27:09:1d:
05:96:0e:2d:bb:07:13:b5:0a:02:87:2d:e2:c2:6e:d8:05:ae:
c1:11:7a:16:e4:70:fa:95:e6:fd:00:c7:e8:9c:3f:71:a8:c5:
39:65:c1:71:85:ab:ac:da:aa:e7:9a:aa:77:e3:2d:1e:f5:78:
13:11:3d:7c:1e:d3:f1:56:42:7d:d0:38:54:97:c7:70:d2:34:
8c:e6:cd:20:9d:de:cd:65:1b:29:7a:d9:93:f6:76:2e:9a:a5:
ac:ab:14:5a:1e:f4:98:32:12:88:6b:42:58:d1:47:67:17:3d:
5b:8c:7d:29:f6:f6:69:d4:c9:d0:9a:19:2b:f5:55:ab:d2:cb:
e2:32:e3:1d:1c:66:6f:6e:c9:50:df:7b:d7:e5:77:92:19:ce:
46:a1:b0:ea:5e:30:d0:5c:6f:0b:c7:de:e7:45:5d:6a:ef:d7:
72:4e:37:c9
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUdbQ+73ANC66L0Kl25qMR08mZdQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNjAxMDYxOTEzMDJaFw0yNzAxMDUxOTE4MDJaMDMxMTAvBgNV
BAMTKDkwOTFEMkQ0RUIzOEI3MzU1MTQ0RjREMEZFQzJDQ0Q4QTBGMzg5RTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8PjNoXr9XWMS+36NFKBmrv3ie
xaeSR+Jdr4QAuYp7yLWHOUOMsJsIK8tydQtR2WRrO84XU9X79OuBWJMk+W2nHuXP
3lsZknYS69//pCs7VugQZWrcM+Wz06yxqju5lLzyAZsAfBrDfRHKrg9qCG+NNvZb
hlsx6REnk1UGcyqfkYTfaSyy4Qz+3DUuWZn+aBLzkg2/ZQYoXCI4AVSK+J8Q7tdo
AfgXC47gVT54LVx1ZZumvMM15UNn+6hvoek6FuK51KWPk4zGqCWtbaMwrkqZYaav
8aIEvdA655trTB5tVzLt5yRGkP2VSncWs2TjJNJ7HrNSeXxbhcaJsiIZz0MVAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUkJHS1Os4tzVRRPTQ/sLM2KDzieAwHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMyMzAzMTJlMzIzMjMxMmUzMTMzMzIy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjMyMzMzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyd2E
MA0GCSqGSIb3DQEBCwUAA4IBAQCJqb7oB52J7Wct6QsPS0884zH1aYMUNjWEnxp7
FSFe6rjAOUXj5lnGxXo/v1Fcvow/rVJiU1Ouk9b+BgQfTBSGGVeAKxZ85xgTfrBO
8n71ARXRY2qpSGknCR0Flg4tuwcTtQoChy3iwm7YBa7BEXoW5HD6leb9AMfonD9x
qMU5ZcFxhaus2qrnmqp34y0e9XgTET18HtPxVkJ90DhUl8dw0jSM5s0gnd7NZRsp
etmT9nYumqWsqxRaHvSYMhKIa0JY0UdnFz1bjH0p9vZp1MnQmhkr9VWr0sviMuMd
HGZvbslQ33vX5XeSGc5GobDqXjDQXG8Lx97nRV1q79dyTjfJ
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:15 2026 by rpki-client