This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa
File: 56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa (raw, json)
Hash identifier: 9nyP7+JJv9dsQVSDnGOqt4X7mFIy70A6ElsR/8TWEnM=
Subject key identifier: 14:46:3E:38:BE:F6:E8:9E:6F:96:EA:07:BA:58:4A:B2:E1:4E:F4:37
Certificate issuer: /CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Certificate serial: 276382AF3E0FEB9D635AD06ACB2285C476B68E3B
Authority key identifier: A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa
Signing time: Fri 05 Dec 2025 00:00:12 +0000
ROA not before: Fri 05 Dec 2025 00:00:12 +0000
ROA not after: Thu 05 Mar 2026 23:59:59 +0000
asID: 16509
IP address blocks: 191.166.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 09 Dec 2025 19:36:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:63:82:af:3e:0f:eb:9d:63:5a:d0:6a:cb:22:85:c4:76:b6:8e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798
Validity
Not Before: Dec 5 00:00:12 2025 GMT
Not After : Mar 5 23:59:59 2026 GMT
Subject: serialNumber=fdf353ac308c8702e93f80fa658666ecfa4de399bad667fedc873665a3368b47, CN=7b7e81e4-c981-4cca-be35-ec61f732415c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:b9:95:41:32:36:f3:2a:85:fd:6d:c2:84:
2d:3d:49:3c:e5:01:00:35:6b:71:c2:f3:a5:33:f8:
38:1b:a5:6c:9a:a4:9a:04:39:c6:a6:30:7c:bb:6d:
02:49:85:55:86:e7:4c:60:96:f8:6f:9c:c6:43:27:
51:41:5a:9e:44:fd:82:02:25:6f:bd:17:5e:ab:73:
37:73:73:e5:33:8b:74:6a:2b:12:66:88:11:a3:3f:
20:64:4f:6e:dd:7e:8e:c8:e1:ae:70:d8:7a:be:3c:
08:de:a2:e1:e7:f0:77:8c:17:76:3b:94:dc:f4:3c:
36:30:72:5a:27:01:1c:7a:6a:8f:d6:36:bc:94:34:
66:e7:6c:d1:4c:10:c0:55:c6:61:61:47:54:85:9d:
88:4e:03:96:dc:0c:70:0f:52:01:51:77:0a:f0:09:
8e:b8:45:1a:1a:ec:3f:94:03:e8:a3:64:b3:93:a6:
98:aa:a0:53:8a:9c:1d:e9:24:bb:4c:7d:cc:be:ab:
49:9a:84:1b:34:bb:67:fe:e9:d7:0f:68:33:7f:a2:
02:88:ef:f1:31:7a:92:67:37:28:b8:49:ee:9d:4c:
33:79:b8:04:cc:79:5d:ae:56:e9:f7:b6:ec:f3:0a:
d7:7f:1f:04:e8:ab:16:56:57:57:b5:2f:7b:11:6c:
c8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:46:3E:38:BE:F6:E8:9E:6F:96:EA:07:BA:58:4A:B2:E1:4E:F4:37
X509v3 Authority Key Identifier:
keyid:A2:E7:6E:96:CF:04:A7:A0:B9:2B:21:9E:6E:C3:BB:1E:FF:9F:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/A2E76E96CF04A7A0B92B219E6EC3BB1EFF9F1798.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/56ce7cd0-084e-4ed6-aae7-073a56f74f28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/c474d778-43cb-4c30-ad6a-39968cbc94bc/cWy3LOXsPpjy6-p4jlVQRRDMd-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.166.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:e1:66:94:d8:9b:ce:2e:4d:04:2d:f6:3a:da:d7:6a:0b:aa:
08:9a:e7:16:d8:d0:8c:03:a3:f6:19:9c:a3:1e:7f:cd:5c:b7:
94:4c:17:0d:75:3c:00:8c:98:07:eb:e5:f7:31:d4:61:4e:9e:
20:3c:98:4d:8b:a0:9a:68:7c:9a:9c:87:4e:80:42:50:b9:23:
f3:53:ad:80:42:50:e6:e1:e5:09:53:12:4d:48:95:0c:8d:eb:
6a:41:ea:53:78:08:6a:90:6f:53:f7:fc:b9:25:38:32:8c:86:
9a:d3:9e:ce:24:53:59:1b:95:95:e0:9e:40:12:9d:6c:67:44:
94:21:2f:5d:b0:d6:97:4f:c9:32:96:70:7e:67:eb:69:ed:6b:
29:97:36:90:8a:27:8e:8a:52:b8:6b:b7:5a:71:c4:91:22:6e:
ac:94:95:88:57:80:61:c3:7f:24:b8:92:f7:91:ff:b9:fa:81:
c9:b0:15:b4:76:52:ea:a3:79:08:32:d5:9c:6b:5f:06:00:21:
0a:f9:61:54:f1:54:9d:83:08:57:76:eb:7e:1f:79:88:8d:bc:
94:87:fc:bf:c6:b0:59:b1:b3:0e:53:7f:d5:de:c0:10:aa:94:
34:0f:54:b5:db:85:b3:4f:c6:13:08:7a:d7:df:14:0e:72:c8:
d7:e7:71:c2
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIUJ2OCrz4P651jWtBqyyKFxHa2jjswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTJFNzZFOTZDRjA0QTdBMEI5MkIyMTlFNkVDM0JCMUVG
RjlGMTc5ODAeFw0yNTEyMDUwMDAwMTJaFw0yNjAzMDUyMzU5NTlaMHoxSTBHBgNV
BAUTQGZkZjM1M2FjMzA4Yzg3MDJlOTNmODBmYTY1ODY2NmVjZmE0ZGUzOTliYWQ2
NjdmZWRjODczNjY1YTMzNjhiNDcxLTArBgNVBAMTJDdiN2U4MWU0LWM5ODEtNGNj
YS1iZTM1LWVjNjFmNzMyNDE1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMzwuZVBMjbzKoX9bcKELT1JPOUBADVrccLzpTP4OBulbJqkmgQ5xqYwfLtt
AkmFVYbnTGCW+G+cxkMnUUFankT9ggIlb70XXqtzN3Nz5TOLdGorEmaIEaM/IGRP
bt1+jsjhrnDYer48CN6i4efwd4wXdjuU3PQ8NjByWicBHHpqj9Y2vJQ0Zuds0UwQ
wFXGYWFHVIWdiE4DltwMcA9SAVF3CvAJjrhFGhrsP5QD6KNks5OmmKqgU4qcHekk
u0x9zL6rSZqEGzS7Z/7p1w9oM3+iAojv8TF6kmc3KLhJ7p1MM3m4BMx5Xa5W6fe2
7PMK138fBOirFlZXV7UvexFsyIkCAwEAAaOCAnYwggJyMB0GA1UdDgQWBBQURj44
vvbonm+W6ge6WEqy4U70NzAfBgNVHSMEGDAWgBSi526WzwSnoLkrIZ5uw7se/58X
mDAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwEBBIGsMIGpMIGmBggrBgEFBQcw
AoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0Ex
NTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFBQTEwMDc1RjY3
MTY1Qjk4QzRGNEVGQzMvMC9BMkU3NkU5NkNGMDRBN0EwQjkyQjIxOUU2RUMzQkIx
RUZGOUYxNzk4LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUFBzALhn9y
c3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpvbmF3cy5jb20vdm9sdW1l
L2M0NzRkNzc4LTQzY2ItNGMzMC1hZDZhLTM5OTY4Y2JjOTRiYy81NmNlN2NkMC0w
ODRlLTRlZDYtYWFlNy0wNzNhNTZmNzRmMjgucm9hMIGIBgNVHR8EgYAwfjB8oHqg
eIZ2cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3MuY29tL3Zv
bHVtZS9jNDc0ZDc3OC00M2NiLTRjMzAtYWQ2YS0zOTk2OGNiYzk0YmMvY1d5M0xP
WHNQcGp5Ni1wNGpsVlFSUkRNZC1jLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAv6YwDQYJKoZIhvcNAQEL
BQADggEBAD7hZpTYm84uTQQt9jra12oLqgia5xbY0IwDo/YZnKMef81ct5RMFw11
PACMmAfr5fcx1GFOniA8mE2LoJpofJqch06AQlC5I/NTrYBCUObh5QlTEk1IlQyN
62pB6lN4CGqQb1P3/LklODKMhprTns4kU1kblZXgnkASnWxnRJQhL12w1pdPyTKW
cH5n62ntaymXNpCKJ46KUrhrt1pxxJEibqyUlYhXgGHDfyS4kveR/7n6gcmwFbR2
UuqjeQgy1ZxrXwYAIQr5YVTxVJ2DCFd2634feYiNvJSH/L/GsFmxsw5Tf9XewBCq
lDQPVLXbhbNPxhMIetffFA5yyNfnccI=
-----END CERTIFICATE-----
Generated at Sat Dec 6 12:44:28 2025 by rpki-client