This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e33382e302f32342d3234203d3e203231373536.roa
File: 3230312e3233342e33382e302f32342d3234203d3e203231373536.roa (raw, json)
Hash identifier: LA7bu5G6Z+Bxkz/nv0aVJP8AYS5Jz83R9AjmmuL8moI=
Subject key identifier: 9D:17:11:D4:93:F8:A6:36:78:99:5D:FC:62:C0:FE:F9:72:87:32:D5
Certificate issuer: /CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Certificate serial: 757E13FE1B703EFC70731E37ED188A7423AB1D1E
Authority key identifier: C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e33382e302f32342d3234203d3e203231373536.roa
Signing time: Tue 06 Jan 2026 19:35:05 +0000
ROA not before: Tue 06 Jan 2026 19:30:05 +0000
ROA not after: Tue 05 Jan 2027 19:35:05 +0000
asID: 21756
IP address blocks: 201.234.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 24 Jan 2026 15:20:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:7e:13:fe:1b:70:3e:fc:70:73:1e:37:ed:18:8a:74:23:ab:1d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C87C55A4481F19C9B6184944B187B3813B7CEC56
Validity
Not Before: Jan 6 19:30:05 2026 GMT
Not After : Jan 5 19:35:05 2027 GMT
Subject: CN=9D1711D493F8A63678995DFC62C0FEF9728732D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:56:fb:c0:ef:6a:08:bc:eb:17:4a:ed:e1:
81:7e:b6:c8:92:10:f1:0b:2e:a2:02:53:ee:7d:a0:
94:67:95:44:43:53:f8:fb:b7:c2:57:1c:47:fd:30:
70:8f:c2:9b:b1:dc:f6:f4:5d:fd:6d:c7:c1:c1:7c:
58:e5:85:38:45:8d:3c:3a:13:25:86:e9:ae:5f:b9:
0a:61:9d:38:ce:e7:e9:95:11:a0:ce:75:08:ff:59:
f7:5a:bd:c7:dd:11:5a:c0:e5:97:70:13:05:19:63:
33:f2:06:51:07:75:12:54:f0:03:bd:fa:37:c8:32:
4b:5a:21:2c:79:a5:91:69:d8:2c:0d:88:3d:e6:93:
33:06:96:04:4c:d2:ec:a4:c7:cc:32:d9:cb:f2:90:
14:d5:29:44:5a:e0:1f:5d:fe:03:74:41:8c:3b:94:
4c:0a:94:57:e4:38:c1:b3:2c:08:08:b7:eb:89:65:
f9:19:b0:e1:ce:d2:ef:70:03:c8:21:78:ce:7c:15:
2e:d0:a7:96:69:fb:21:3f:67:26:22:7d:96:5c:a9:
e2:0b:6c:14:65:96:ea:0c:7c:86:5f:84:61:c2:ed:
4c:cd:99:43:3e:13:00:97:da:04:d1:83:dc:f2:31:
cd:ed:83:cc:d7:05:b6:9b:43:13:1f:1f:cf:a0:79:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:17:11:D4:93:F8:A6:36:78:99:5D:FC:62:C0:FE:F9:72:87:32:D5
X509v3 Authority Key Identifier:
keyid:C8:7C:55:A4:48:1F:19:C9:B6:18:49:44:B1:87:B3:81:3B:7C:EC:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C87C55A4481F19C9B6184944B187B3813B7CEC56.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00A66A6A2A6CFE93C0F6E3DFC20DD331B580FB20383B62FE4B26C0294B4687C7/0/3230312e3233342e33382e302f32342d3234203d3e203231373536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.234.38.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:22:0c:ea:57:cf:d0:37:8f:b1:ee:2a:9f:71:90:37:d9:d3:
3c:0f:2b:db:3c:94:36:c4:47:3a:3d:cc:91:22:68:75:c4:71:
c3:9f:0f:5f:cb:41:1a:85:f5:a6:a6:bc:bd:21:52:28:94:2e:
cb:f0:e2:da:ba:32:9c:16:ca:86:9e:84:49:52:25:28:29:06:
7f:0b:a7:b0:57:57:f7:59:03:1d:01:e7:1b:4d:d7:fc:59:33:
fb:3c:73:0a:0b:03:2e:60:0b:3c:41:40:37:6b:5c:55:1b:64:
28:7f:75:2d:44:a7:6d:e7:2c:27:df:e2:5d:09:5f:9e:9e:11:
ba:e0:68:d1:cd:d9:93:b7:88:64:3d:54:c9:8c:57:5d:23:a5:
d8:e7:36:b7:30:51:8c:36:7f:86:8c:92:bb:63:b1:8b:1a:a8:
28:98:37:7f:c8:03:4c:9b:84:c1:0c:ca:7a:bb:9a:21:22:52:
8b:bd:6f:28:3e:b3:b6:a4:7e:1e:c8:53:f5:f3:b9:bb:41:ac:
d7:ca:ca:fc:ab:15:bd:06:5e:fb:a1:03:38:6a:1d:0c:ae:56:
d5:42:19:39:49:9e:3d:73:d5:36:0f:ee:8d:95:a5:1b:c9:66:
1c:30:0f:13:35:51:b6:d1:8b:fc:44:ed:02:1b:24:62:a1:a7:
64:31:17:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 05:41:09 2026 by rpki-client