This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232382e302f32322d3234203d3e203532343638.roa
File: 3230302e3131322e3232382e302f32322d3234203d3e203532343638.roa (raw, json)
Hash identifier: Y5QS4UzYeGVsSi+vYVF2DIAFUOk6kV3WPI4PyAOARKA=
Subject key identifier: 38:8C:A6:45:A9:27:E3:60:40:A2:11:D8:CE:73:CF:07:A0:E9:85:00
Certificate issuer: /CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Certificate serial: 4ED3492EF35668BAE54F341B1431B2BC43FA0955
Authority key identifier: A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232382e302f32322d3234203d3e203532343638.roa
Signing time: Thu 27 Nov 2025 21:15:01 +0000
ROA not before: Thu 27 Nov 2025 21:10:01 +0000
ROA not after: Thu 26 Nov 2026 21:15:01 +0000
asID: 52468
IP address blocks: 200.112.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 06:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d3:49:2e:f3:56:68:ba:e5:4f:34:1b:14:31:b2:bc:43:fa:09:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A35E57ED97246E8C02997E4FCF0C3ED13E10074A
Validity
Not Before: Nov 27 21:10:01 2025 GMT
Not After : Nov 26 21:15:01 2026 GMT
Subject: CN=388CA645A927E36040A211D8CE73CF07A0E98500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d0:41:22:5e:c2:ad:33:c3:6a:84:90:61:34:
70:79:47:06:e9:71:0d:1e:16:00:d7:22:42:cd:fb:
71:65:4d:b8:53:39:00:85:66:42:9c:71:26:6c:5c:
22:4e:20:7b:89:74:7d:cd:8e:df:00:64:35:81:57:
b9:80:9c:04:e0:9f:e5:51:55:18:65:34:9e:41:6a:
90:cb:9d:8f:d0:89:7f:b6:89:3d:fd:1e:28:b4:5e:
12:e2:92:17:c1:a5:04:81:da:51:7c:f9:cb:52:6e:
50:78:09:ed:39:28:79:24:fb:f7:81:a3:4d:31:e0:
c3:19:92:b5:5e:e1:e9:8f:3f:aa:8f:52:60:bc:49:
94:c7:8e:96:8e:a3:64:05:e6:07:31:b2:77:b4:f3:
48:8d:59:1e:3d:30:16:a5:db:10:23:16:7e:79:4f:
77:f9:80:3f:8f:41:ba:35:93:55:70:cc:1d:67:1d:
b1:86:cd:0d:7a:0b:03:f1:f3:4f:a1:69:a7:98:96:
be:64:46:e9:df:e6:01:2b:78:58:2a:c5:47:ae:6f:
68:62:bd:d8:d1:5a:9a:cb:e9:e2:b6:21:84:13:01:
ef:47:d1:5c:19:e7:02:04:91:ab:27:27:8b:0d:31:
87:0d:10:ce:7e:25:90:02:e4:a0:2f:d3:37:ed:c6:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8C:A6:45:A9:27:E3:60:40:A2:11:D8:CE:73:CF:07:A0:E9:85:00
X509v3 Authority Key Identifier:
keyid:A3:5E:57:ED:97:24:6E:8C:02:99:7E:4F:CF:0C:3E:D1:3E:10:07:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A35E57ED97246E8C02997E4FCF0C3ED13E10074A.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CD18697CCD6A0801504102AE175C164A8EF049BEC02E6650B76FB41E227D9A9/0/3230302e3131322e3232382e302f32322d3234203d3e203532343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.112.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:90:c4:cc:09:12:09:01:2b:41:21:37:b6:89:9f:c1:73:db:
10:a2:af:f5:6b:f3:63:09:f6:2f:a8:14:65:25:57:ab:92:b5:
70:2f:fd:21:db:39:bb:61:2a:21:2e:a7:f2:4d:7c:77:ef:9f:
0f:d0:80:bd:27:5c:9d:0a:b6:2f:a8:26:11:52:a5:79:bf:e9:
dd:6c:fa:fa:c7:71:27:40:d1:c2:c5:22:a0:2d:3c:44:67:84:
c7:35:86:42:b0:11:de:12:98:8a:f1:10:2f:11:3f:23:1a:b3:
03:4a:58:be:8c:5d:8f:71:17:ab:5c:5c:9f:21:67:aa:7a:78:
dc:7f:53:96:d6:23:b7:55:75:c0:f8:cd:b3:d2:67:27:f7:60:
0e:2f:ad:34:15:5a:b4:7c:86:91:ec:fa:e5:97:bb:8f:84:bd:
8f:09:2d:71:6c:b3:90:cb:0f:04:c4:29:b5:62:a0:6c:e3:97:
00:99:6d:e3:7b:cf:45:d3:e6:22:1f:9d:9b:42:5c:42:ca:c2:
cc:5b:84:c2:93:26:b2:8f:86:1c:cc:c6:6b:6f:97:fa:72:e7:
28:e6:e4:b2:46:95:42:fc:ea:c0:f2:43:67:7a:8f:5e:78:ba:
84:94:6d:5c:86:8a:8e:20:c2:d9:9b:db:e2:b3:44:12:a9:81:
c9:2e:36:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 3 08:31:07 2025 by rpki-client