This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3133362e302f32322d3234203d3e203232333638.roa
File: 3230312e3232312e3133362e302f32322d3234203d3e203232333638.roa (raw, json)
Hash identifier: iYn4hwzVDuZHeES/kxQbUyuEDquxjjecMPWd10Ch0Zk=
Subject key identifier: C2:E9:60:8A:03:72:C1:E6:5E:BF:47:70:6F:A0:64:9C:C8:20:A1:44
Certificate issuer: /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial: 7F2F7FE6343634C30CF85B3F4D8340C6BC7DD483
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3133362e302f32322d3234203d3e203232333638.roa
Signing time: Tue 06 Jan 2026 19:17:56 +0000
ROA not before: Tue 06 Jan 2026 19:12:56 +0000
ROA not after: Tue 05 Jan 2027 19:17:56 +0000
asID: 22368
IP address blocks: 201.221.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:2f:7f:e6:34:36:34:c3:0c:f8:5b:3f:4d:83:40:c6:bc:7d:d4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Validity
Not Before: Jan 6 19:12:56 2026 GMT
Not After : Jan 5 19:17:56 2027 GMT
Subject: CN=C2E9608A0372C1E65EBF47706FA0649CC820A144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:05:e8:14:4b:75:9b:33:d4:ec:8b:84:e5:
e5:47:a2:11:d8:91:3e:d4:01:e2:65:81:7b:8e:22:
01:8e:b1:af:a8:ef:33:13:51:13:fc:3c:50:be:03:
5e:6f:5c:21:fc:b9:be:61:cb:03:55:d7:bd:35:85:
57:1f:a2:fb:5a:18:ba:ea:8c:63:0e:34:d2:de:fe:
fb:5c:09:75:02:fa:30:25:19:7e:d8:49:cc:a1:b6:
fd:a4:8f:c7:78:23:dc:1c:da:2d:8e:73:92:2d:18:
24:33:02:f5:37:dc:86:d3:8e:30:1c:62:ed:fa:f8:
a3:20:7e:74:f6:0e:0d:8b:97:91:5f:5e:2d:6e:ce:
58:2a:e6:b4:07:12:16:49:86:d7:5a:fa:00:b4:ee:
d8:26:8c:ea:e8:84:2d:a7:4b:6f:8e:3d:60:84:19:
fa:dd:a5:bd:52:08:c4:f6:8a:04:33:83:9b:06:b0:
72:37:34:37:17:65:42:2d:51:cf:12:41:ad:79:08:
32:ef:ed:47:65:f1:e1:2e:1b:98:80:6c:a7:dd:60:
1b:53:63:19:3e:a3:ed:37:d9:7a:3d:fd:40:e4:37:
bf:45:3d:1b:ce:d4:25:cd:7f:25:73:6c:d2:e4:83:
f6:5c:0c:49:85:82:52:42:68:0c:ea:d1:e3:1b:67:
5c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E9:60:8A:03:72:C1:E6:5E:BF:47:70:6F:A0:64:9C:C8:20:A1:44
X509v3 Authority Key Identifier:
keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3133362e302f32322d3234203d3e203232333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.221.136.0/22
Signature Algorithm: sha256WithRSAEncryption
83:70:92:4f:3f:03:39:bf:6e:a5:22:ea:1a:1b:c9:79:b6:4b:
9c:97:cc:80:ce:5f:05:c9:8b:bc:3d:71:f8:05:35:90:b2:36:
a0:fe:65:67:b9:35:45:b3:3d:39:9f:88:51:ed:f2:89:04:ad:
bd:e0:0b:a5:05:45:51:1d:a7:82:8a:a7:03:d5:0f:11:8c:8f:
61:3b:3d:f9:c2:69:b6:d8:0f:39:2e:48:a7:b8:34:ad:03:06:
27:49:14:a1:00:85:eb:20:88:c7:7d:04:22:9b:bd:0b:39:9f:
dc:3a:5b:24:4d:ec:eb:ea:d9:8c:c6:96:a4:ff:43:58:e0:4a:
e4:a8:77:fc:f1:5e:34:c5:de:72:d3:91:8b:3a:4a:76:d0:d1:
d3:5c:e1:90:f4:72:1d:37:ed:4f:05:e1:25:fa:3f:24:db:7a:
04:e8:11:f0:e1:79:2c:16:95:4b:8d:fc:3d:65:89:18:2a:60:
14:0f:32:f8:00:1a:2c:08:63:5b:55:20:29:c3:bd:77:7e:14:
93:71:95:f2:9c:d1:03:b3:6e:c8:a3:74:9b:75:65:fd:1d:07:
6d:26:a9:ba:4d:c2:89:c4:0d:79:49:16:b2:34:ca:3d:0d:c6:
09:ee:e8:30:7a:20:36:d5:46:e3:c7:e7:25:56:b6:c6:a0:f1:
64:3e:51:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:55:14 2026 by rpki-client