This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230342e3139342e3131322e302f32312d3234203d3e20323635353430.roa
File: 3230342e3139342e3131322e302f32312d3234203d3e20323635353430.roa (raw, json)
Hash identifier: F/4y5VgqHu+VBGr6OiwPK4RMElCzS6da2M1AKxi0uW4=
Subject key identifier: 48:DA:5E:BB:59:1D:2E:ED:FB:64:6D:64:5C:28:3A:16:F4:E5:00:54
Certificate issuer: /CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Certificate serial: 49B02B5C726FFA6120D05EAC18F96A403241C6F2
Authority key identifier: FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230342e3139342e3131322e302f32312d3234203d3e20323635353430.roa
Signing time: Tue 09 Dec 2025 05:54:19 +0000
ROA not before: Tue 09 Dec 2025 05:49:19 +0000
ROA not after: Tue 08 Dec 2026 05:54:19 +0000
asID: 265540
IP address blocks: 204.194.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Tue 23 Dec 2025 15:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:b0:2b:5c:72:6f:fa:61:20:d0:5e:ac:18:f9:6a:40:32:41:c6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC
Validity
Not Before: Dec 9 05:49:19 2025 GMT
Not After : Dec 8 05:54:19 2026 GMT
Subject: CN=48DA5EBB591D2EEDFB646D645C283A16F4E50054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dc:13:3a:55:d2:8a:ad:4c:05:8e:78:99:f2:
4f:3e:ac:bd:e1:75:c8:ee:71:03:14:b1:d3:53:a8:
2d:43:a2:6b:99:dc:3d:bb:e6:cf:6a:46:ae:b2:b2:
ac:24:73:de:c9:40:4e:ee:95:58:ff:9b:59:72:60:
f4:5f:c1:89:73:c5:57:04:3b:1b:7b:ac:4b:de:24:
88:2b:3e:2c:d7:75:76:49:de:a4:85:fe:2c:dc:4f:
48:a2:f1:a7:2f:0e:78:1e:f5:65:59:fb:52:b5:23:
b9:98:61:18:1d:34:d1:1a:ca:23:60:e4:7d:ae:d5:
e7:03:61:94:de:99:c6:e7:a8:04:5e:a4:1f:0d:94:
f0:9a:b0:ae:26:26:c9:12:2d:d5:dc:0c:0e:9d:2f:
d1:ff:74:5c:43:e7:52:9e:32:ed:89:3c:f8:4e:59:
35:04:24:b9:8b:1f:e7:77:bc:1f:3b:8f:20:0e:e7:
d3:8b:50:8b:8a:d1:d2:8b:92:a5:ec:eb:4f:c6:5d:
68:c6:12:33:97:1b:3f:26:93:09:96:d5:7a:da:00:
1d:af:5e:9a:1d:95:cd:9b:3f:6d:23:7f:a5:b5:58:
d4:e8:0d:28:c3:d5:1f:de:e5:0f:b5:0a:43:0c:ca:
82:d6:4e:00:f3:df:94:df:98:f2:2d:63:38:43:fa:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DA:5E:BB:59:1D:2E:ED:FB:64:6D:64:5C:28:3A:16:F4:E5:00:54
X509v3 Authority Key Identifier:
keyid:FA:D9:0A:03:B0:BB:49:A3:4C:7B:F9:A5:C8:8C:CC:4C:61:A7:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FAD90A03B0BB49A34C7BF9A5C88CCC4C61A7B3EC.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DD35F68E9227CCEAAEA800CE80E70C92F4CEC522E4CD6BA43623E4D22907423E/0/3230342e3139342e3131322e302f32312d3234203d3e20323635353430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.194.112.0/21
Signature Algorithm: sha256WithRSAEncryption
2f:77:aa:4f:be:d0:2c:a8:bc:db:52:e8:e7:da:6c:27:b1:65:
cf:ac:8c:53:38:a1:aa:a1:0d:b0:e1:5b:9c:53:09:f0:27:2d:
2f:6a:44:1a:95:82:50:94:53:d0:bc:b0:a5:4f:e3:63:71:2a:
8d:8b:f6:d8:6b:44:90:40:34:40:db:2f:7a:28:3d:fb:54:c6:
59:80:0e:37:76:4c:d7:71:02:45:74:a6:5a:2a:d2:b3:9a:98:
98:3b:5e:9b:24:81:8f:28:af:c4:d5:60:a4:8a:99:d8:60:c6:
7f:65:ef:a3:c6:07:e1:08:73:18:ec:35:ea:a0:24:2e:98:09:
c9:10:47:33:58:63:f0:5c:cb:ba:2f:d0:6b:6f:7f:c3:69:7c:
de:e6:b4:f5:81:93:16:92:d5:75:82:86:c1:89:9c:c2:60:ff:
9a:53:96:10:81:e0:f9:67:4c:fc:87:6a:e2:2c:7a:d6:02:38:
82:5f:bd:c4:3d:bf:44:b8:eb:2e:e2:d7:f9:bd:f5:6c:fc:cd:
de:f4:57:24:1c:c0:f9:ef:8e:b2:20:6e:c5:6e:00:56:68:36:
dd:eb:76:55:28:80:ed:61:94:fd:04:1e:85:10:84:ee:c8:53:
25:c1:b2:8c:d7:01:c1:12:ac:4e:30:4e:23:8d:99:59:80:0c:
6a:a2:64:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 16:21:50 2025 by rpki-client