This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3134302e302f32332d3234203d3e203232333638.roa
File: 3230312e3232312e3134302e302f32332d3234203d3e203232333638.roa (raw, json)
Hash identifier: ityaAMnXm2ueCnAyXri4QSzjCcedmbnSggiD734BXzg=
Subject key identifier: 08:A0:A1:55:BE:3F:14:E5:A6:A8:FF:16:76:7C:9E:ED:94:F2:F7:30
Certificate issuer: /CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Certificate serial: 3ADD61D79E06994CE6BE4D478C7CF4BDCFD16D2C
Authority key identifier: DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3134302e302f32332d3234203d3e203232333638.roa
Signing time: Tue 06 Jan 2026 19:18:03 +0000
ROA not before: Tue 06 Jan 2026 19:13:03 +0000
ROA not after: Tue 05 Jan 2027 19:18:03 +0000
asID: 22368
IP address blocks: 201.221.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Thu 29 Jan 2026 16:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:dd:61:d7:9e:06:99:4c:e6:be:4d:47:8c:7c:f4:bd:cf:d1:6d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B
Validity
Not Before: Jan 6 19:13:03 2026 GMT
Not After : Jan 5 19:18:03 2027 GMT
Subject: CN=08A0A155BE3F14E5A6A8FF16767C9EED94F2F730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b0:04:d9:94:50:f5:2b:85:3d:fe:83:e6:da:
e9:b2:25:c5:fb:7c:55:4d:50:a5:84:d2:70:c3:ce:
48:91:57:92:0c:7e:81:ab:e7:d5:09:c5:e5:23:ea:
8c:54:6d:e8:97:90:aa:94:60:a1:b3:32:b2:81:2b:
40:77:61:17:40:3b:69:ef:54:4b:97:77:6e:5b:f2:
ce:59:fb:0b:27:0a:92:80:61:41:03:d7:6f:35:d1:
e4:71:01:a7:39:21:c7:3b:7b:59:e1:21:61:6d:70:
a8:8d:12:0e:85:c1:39:5d:95:ad:0a:0b:f5:2e:ae:
dc:02:07:d0:5c:86:fa:cf:32:6c:64:00:eb:e7:14:
b8:7d:4a:6f:77:27:d8:4e:c4:31:68:60:bd:c9:ea:
c4:d9:8a:ac:cd:1a:e4:53:60:d2:90:21:f8:56:bb:
86:fb:71:7a:4e:28:72:fe:12:68:ad:da:ae:b1:ce:
a4:8c:df:78:8f:06:37:73:80:59:06:74:2e:d5:b1:
eb:2e:12:99:ae:54:b2:d1:a4:6d:d0:b3:f0:c4:57:
b4:0d:13:00:2a:54:af:ab:7e:7e:d9:fa:ef:83:51:
20:d7:12:86:2f:11:54:76:c1:6d:73:b3:9e:d0:62:
5f:e9:20:52:cd:52:00:2f:dc:82:12:ba:05:33:f0:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A0:A1:55:BE:3F:14:E5:A6:A8:FF:16:76:7C:9E:ED:94:F2:F7:30
X509v3 Authority Key Identifier:
keyid:DA:5A:37:1F:C0:19:89:AA:59:6F:E2:68:CE:70:A3:C4:DC:AA:7A:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DA5A371FC01989AA596FE268CE70A3C4DCAA7A9B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F060645F94748832A65DAB54A01A729A0208E4446C8232A17BA6FE073CD465C5/0/3230312e3232312e3134302e302f32332d3234203d3e203232333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.221.140.0/23
Signature Algorithm: sha256WithRSAEncryption
69:a2:97:88:29:79:00:15:ab:05:1f:9f:1a:07:5c:df:d5:35:
ae:07:a6:73:c5:9e:c8:bf:66:0e:0d:7f:41:5b:8a:38:28:cc:
d1:7f:d7:61:cd:b2:66:5c:2f:3c:38:b5:b2:b8:58:5b:4d:e1:
b9:55:8d:be:4e:65:f4:0f:35:72:84:a2:39:94:6a:9c:9a:84:
d1:42:ce:56:a1:b8:ef:1a:c2:ad:37:ed:93:20:4e:4e:5a:c3:
e5:14:24:f0:8b:69:4e:5a:ac:44:02:af:ec:77:0d:05:88:1f:
2b:9b:80:e5:f9:fd:50:93:0d:e8:ef:07:4e:71:44:8e:ec:18:
ad:0e:7a:d6:9b:90:37:e5:8b:03:71:2b:fe:22:35:86:42:72:
d2:fa:74:e1:36:40:55:bf:6b:75:42:7e:e2:ab:7c:38:96:55:
3d:df:34:3e:7d:f2:0f:88:42:d7:d7:13:b7:7e:a8:85:82:0e:
03:e0:2f:04:58:6c:64:e0:a9:c6:e6:6e:65:fa:0a:86:c2:c9:
70:fc:73:00:3c:8f:1c:0c:38:16:7f:32:31:63:87:89:28:67:
11:11:bb:54:ec:46:32:d5:56:23:11:67:d5:d8:96:73:87:05:
75:be:63:04:68:93:3f:4f:8a:2e:29:93:20:1f:6b:8e:4c:ff:
e0:cb:95:1f
-----BEGIN CERTIFICATE-----
MIIFwDCCBKigAwIBAgIUOt1h154GmUzmvk1HjHz0vc/RbSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE1QTM3MUZDMDE5ODlBQTU5NkZFMjY4Q0U3MEEzQzRE
Q0FBN0E5QjAeFw0yNjAxMDYxOTEzMDNaFw0yNzAxMDUxOTE4MDNaMDMxMTAvBgNV
BAMTKDA4QTBBMTU1QkUzRjE0RTVBNkE4RkYxNjc2N0M5RUVEOTRGMkY3MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQsATZlFD1K4U9/oPm2umyJcX7
fFVNUKWE0nDDzkiRV5IMfoGr59UJxeUj6oxUbeiXkKqUYKGzMrKBK0B3YRdAO2nv
VEuXd25b8s5Z+wsnCpKAYUED12810eRxAac5Icc7e1nhIWFtcKiNEg6FwTldla0K
C/UurtwCB9BchvrPMmxkAOvnFLh9Sm93J9hOxDFoYL3J6sTZiqzNGuRTYNKQIfhW
u4b7cXpOKHL+Emit2q6xzqSM33iPBjdzgFkGdC7VsesuEpmuVLLRpG3Qs/DEV7QN
EwAqVK+rfn7Z+u+DUSDXEoYvEVR2wW1zs57QYl/pIFLNUgAv3IISugUz8IfnAgMB
AAGjggLKMIICxjAdBgNVHQ4EFgQUCKChVb4/FOWmqP8Wdnye7ZTy9zAwHwYDVR0j
BBgwFoAU2lo3H8AZiapZb+JoznCjxNyqepswDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9GMDYwNjQ1Rjk0NzQ4ODMyQTY1REFCNTRBMDFBNzI5QTAy
MDhFNDQ0NkM4MjMyQTE3QkE2RkUwNzNDRDQ2NUM1LzAvREE1QTM3MUZDMDE5ODlB
QTU5NkZFMjY4Q0U3MEEzQzREQ0FBN0E5Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9EQTVBMzcxRkMwMTk4OUFBNTk2
RkUyNjhDRTcwQTNDNERDQUE3QTlCLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRjA2MDY0NUY5NDc0ODgzMkE2NURBQjU0QTAxQTcyOUEwMjA4RTQ0NDZD
ODIzMkExN0JBNkZFMDczQ0Q0NjVDNS8wLzMyMzAzMTJlMzIzMjMxMmUzMTM0MzAy
ZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjMyMzMzNjM4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQByd2M
MA0GCSqGSIb3DQEBCwUAA4IBAQBpopeIKXkAFasFH58aB1zf1TWuB6ZzxZ7Iv2YO
DX9BW4o4KMzRf9dhzbJmXC88OLWyuFhbTeG5VY2+TmX0DzVyhKI5lGqcmoTRQs5W
objvGsKtN+2TIE5OWsPlFCTwi2lOWqxEAq/sdw0FiB8rm4Dl+f1Qkw3o7wdOcUSO
7BitDnrWm5A35YsDcSv+IjWGQnLS+nThNkBVv2t1Qn7iq3w4llU93zQ+ffIPiELX
1xO3fqiFgg4D4C8EWGxk4KnG5m5l+gqGwslw/HMAPI8cDDgWfzIxY4eJKGcREbtU
7EYy1VYjEWfV2JZzhwV1vmMEaJM/T4ouKZMgH2uOTP/gy5Uf
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:17:37 2026 by rpki-client