This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/3230312e3231392e3132392e302f32342d3234203d3e20323635353534.roa
File: 3230312e3231392e3132392e302f32342d3234203d3e20323635353534.roa (raw, json)
Hash identifier: BN1ZzA+S+4pz5It0bIjnSIuvxbzxmYx/ZdEcReMe3Gw=
Subject key identifier: 32:83:15:37:11:2E:87:72:DE:63:E4:B2:4E:DE:B8:BF:89:E5:CE:76
Certificate issuer: /CN=BA56744DBF20010C478D63405BC3FD8408043C5B
Certificate serial: 014FAF464D6BBCA9DFF4981EA7603494CE6215E8
Authority key identifier: BA:56:74:4D:BF:20:01:0C:47:8D:63:40:5B:C3:FD:84:08:04:3C:5B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/3230312e3231392e3132392e302f32342d3234203d3e20323635353534.roa
Signing time: Tue 06 Jan 2026 19:27:03 +0000
ROA not before: Tue 06 Jan 2026 19:22:03 +0000
ROA not after: Tue 05 Jan 2027 19:27:03 +0000
asID: 265554
IP address blocks: 201.219.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.crl
rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:4f:af:46:4d:6b:bc:a9:df:f4:98:1e:a7:60:34:94:ce:62:15:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA56744DBF20010C478D63405BC3FD8408043C5B
Validity
Not Before: Jan 6 19:22:03 2026 GMT
Not After : Jan 5 19:27:03 2027 GMT
Subject: CN=32831537112E8772DE63E4B24EDEB8BF89E5CE76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:eb:ae:53:c8:39:27:f0:cf:b2:13:c6:51:
90:bd:89:6f:57:9b:41:48:19:50:2d:48:38:20:53:
d0:64:a7:c3:2d:e4:1e:64:e0:ec:eb:59:a5:1b:35:
95:60:6c:2a:47:68:0a:2b:12:ef:ab:d1:d7:7f:f4:
57:bf:bd:74:1b:c9:8e:e7:64:45:1d:06:4f:18:4e:
39:be:46:98:63:3f:5f:15:cf:8d:e0:42:95:57:76:
fb:09:b6:4a:3c:3b:56:f1:a6:16:29:de:5c:f9:3f:
0c:c2:74:b3:92:e0:1e:8a:85:c0:e2:61:21:f3:2e:
a6:6d:54:c7:23:45:90:8c:6e:5c:12:ef:e7:3d:90:
ac:db:d1:ef:7e:7b:bf:a7:4b:b3:a7:c8:5d:d5:20:
f3:05:d3:ee:3b:41:e0:b6:92:a5:f8:a8:20:01:7d:
02:09:7d:33:50:88:6c:5f:69:3d:15:86:82:3b:14:
bd:40:1e:b9:b9:3b:1a:23:cf:13:b6:5d:53:d3:ba:
35:bf:3e:50:c3:d5:c8:eb:bd:39:fc:d5:ce:f8:f2:
ed:75:6c:a3:eb:a2:d2:f4:20:d4:87:a5:b0:90:b2:
27:c5:63:00:5f:59:11:10:35:71:d8:43:11:93:83:
d9:b9:27:8d:b1:e6:78:d7:ec:8a:1c:40:a0:06:f8:
c6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:83:15:37:11:2E:87:72:DE:63:E4:B2:4E:DE:B8:BF:89:E5:CE:76
X509v3 Authority Key Identifier:
keyid:BA:56:74:4D:BF:20:01:0C:47:8D:63:40:5B:C3:FD:84:08:04:3C:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/BA56744DBF20010C478D63405BC3FD8408043C5B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BA56744DBF20010C478D63405BC3FD8408043C5B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04BB42195A3038A81C1F1200E30F8D51F752801E722B954EE7A5705D70C72CB0/0/3230312e3231392e3132392e302f32342d3234203d3e20323635353534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.219.129.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ca:cf:7b:f6:87:23:c4:43:01:6f:5a:a0:2d:75:f1:fa:2e:
7d:7d:0b:af:b4:c8:ec:bc:95:8e:d2:33:49:e4:3b:6a:b4:11:
15:9d:d7:62:69:bc:22:15:f5:ed:48:18:1a:d0:1b:fc:26:b8:
77:e9:be:ac:86:7f:2e:bd:7a:b4:fb:eb:d2:0e:41:d8:86:f5:
5f:c3:5e:c4:33:87:1b:3c:ef:4b:68:06:c6:95:f6:12:02:23:
2c:b6:80:ba:fc:60:69:e5:ff:ab:b3:9d:d0:e1:9b:0c:2c:70:
6e:1a:54:e9:12:3c:93:0a:f4:2e:f5:3f:47:02:24:9a:fe:1c:
9b:93:8a:06:c6:43:f6:21:14:f6:40:7e:86:29:03:e9:1a:a5:
e8:75:41:29:43:c1:ab:80:52:0c:6c:cb:7b:dc:e1:2f:9f:bd:
75:a9:61:6c:2d:dd:32:c5:74:52:38:18:d2:86:31:46:e6:b0:
af:01:b4:15:d5:98:2e:6f:b3:65:44:1e:b4:a3:54:6d:c2:8a:
4d:93:01:7e:3b:3c:2d:03:08:3c:9c:ac:61:68:e9:6f:2d:58:
8e:e6:e3:df:b9:ff:67:c6:51:69:29:c7:2c:be:ce:94:93:ea:
e8:98:fc:e7:26:57:5c:61:f2:70:e4:f5:7e:ec:c1:5d:36:aa:
8c:d0:2f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 02:56:58 2026 by rpki-client