This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/3133312e37322e3233352e302f32342d3234203d3e20323633373238.roa
File: 3133312e37322e3233352e302f32342d3234203d3e20323633373238.roa (raw, json)
Hash identifier: K8cQnjwqA3jerlTGF54eW1N2PMwABVkQBNwRLhoHTS8=
Subject key identifier: DD:95:7B:EE:35:19:64:AE:C5:BD:57:01:8C:CF:DC:E7:DE:FB:D5:DB
Certificate issuer: /CN=A046A17FBDC23F220B11EE08ACA1DECE39FE81D8
Certificate serial: 0E4C9D58E60709495331A4F6F57EBC0B8222945D
Authority key identifier: A0:46:A1:7F:BD:C2:3F:22:0B:11:EE:08:AC:A1:DE:CE:39:FE:81:D8
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/3133312e37322e3233352e302f32342d3234203d3e20323633373238.roa
Signing time: Tue 06 Jan 2026 19:25:12 +0000
ROA not before: Tue 06 Jan 2026 19:20:12 +0000
ROA not after: Tue 05 Jan 2027 19:25:12 +0000
asID: 263728
IP address blocks: 131.72.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.crl
rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 25 Jan 2026 09:45:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4c:9d:58:e6:07:09:49:53:31:a4:f6:f5:7e:bc:0b:82:22:94:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A046A17FBDC23F220B11EE08ACA1DECE39FE81D8
Validity
Not Before: Jan 6 19:20:12 2026 GMT
Not After : Jan 5 19:25:12 2027 GMT
Subject: CN=DD957BEE351964AEC5BD57018CCFDCE7DEFBD5DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:68:df:6a:71:10:49:6c:57:8b:75:1c:7f:45:
2e:89:a5:98:a7:94:f0:47:40:98:46:f1:15:48:c6:
4b:d9:69:83:30:b3:d0:f4:93:cd:d7:c9:6b:bf:f8:
48:bd:ad:e9:ce:ec:73:66:50:4c:2f:66:67:f4:29:
9a:b1:47:fa:4e:7f:46:46:c9:6e:83:c2:31:30:7a:
1e:ea:af:44:65:6b:1b:22:01:d0:e5:af:4d:6b:fc:
39:3f:34:4a:f9:b6:8f:08:87:88:f4:25:ae:e3:f1:
dc:98:6e:35:54:8c:1a:aa:6a:fe:0b:43:91:da:0f:
1b:43:88:70:00:0e:0d:6e:3c:ae:97:9d:03:1d:f9:
70:cf:d7:4f:44:ca:2c:0d:ec:03:53:cd:5e:e0:c4:
08:48:08:e0:4a:75:7c:8f:19:c2:f3:c8:d9:88:b4:
e7:99:ba:da:c9:69:ff:66:b0:55:22:bf:f9:d9:cd:
5f:86:a5:f3:e0:49:70:76:ac:b7:ba:2d:3b:dc:d5:
e6:9a:6e:41:93:46:79:85:88:b8:70:b4:65:38:03:
03:45:79:b9:0a:f4:02:81:06:55:55:bc:10:40:c3:
e2:d2:8c:01:a4:69:cd:63:4b:34:a7:46:28:74:ec:
53:20:08:80:7a:25:bd:c7:15:37:45:a0:8e:de:e2:
56:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:95:7B:EE:35:19:64:AE:C5:BD:57:01:8C:CF:DC:E7:DE:FB:D5:DB
X509v3 Authority Key Identifier:
keyid:A0:46:A1:7F:BD:C2:3F:22:0B:11:EE:08:AC:A1:DE:CE:39:FE:81:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A046A17FBDC23F220B11EE08ACA1DECE39FE81D8.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/035AE87F0F53727F69EE2BDF44AAE7E4E8A1498D3032349D39B8FA70E245663E/0/3133312e37322e3233352e302f32342d3234203d3e20323633373238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.72.235.0/24
Signature Algorithm: sha256WithRSAEncryption
81:98:73:b2:75:8f:26:22:41:e2:b4:7d:ea:03:f5:87:2f:a6:
ab:f9:b8:1c:d5:b7:6c:37:5e:ae:c0:c1:fd:a1:ce:8e:bf:55:
49:30:11:bb:42:bf:02:66:15:65:11:87:52:39:94:81:44:9f:
f4:1b:7d:14:a5:6d:82:c8:c2:df:33:25:f0:af:af:06:76:35:
20:ee:5e:da:cf:4f:61:d9:27:f1:1a:48:1a:95:3e:a0:6c:fb:
35:75:a7:8e:f2:9b:3c:5a:08:27:8e:63:f1:5d:08:d5:c2:bb:
dc:33:c5:9e:69:7f:6c:9d:2d:f5:a5:59:fa:b6:30:95:f2:bc:
03:ce:e4:25:6f:6b:49:9b:91:4e:da:ff:f5:d7:e3:70:9e:d4:
e7:9c:ba:77:6d:e4:6c:03:1b:de:7e:f9:80:9e:c4:37:4c:21:
1f:85:38:ab:e3:f4:f8:59:88:ed:14:b3:d8:52:e1:3f:65:47:
68:a0:79:59:9f:4b:c9:a2:f7:83:dc:5c:bd:71:02:74:a1:a0:
90:bb:7e:bc:f6:58:d0:96:35:6f:e7:d2:17:95:55:c7:d8:c5:
7b:f1:4b:d5:f0:25:14:8c:72:16:bc:a1:54:dd:a5:bc:50:56:
33:d7:f6:e2:82:b9:ea:81:23:42:02:d3:7d:f3:c5:44:e7:c7:
5d:10:5c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 16:00:49 2026 by rpki-client