This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35322e302f32332d3234203d3e203237373638.roa
File: 3230312e3231372e35322e302f32332d3234203d3e203237373638.roa (raw, json)
Hash identifier: nHjXO/SzdUBgifKP4PiZn/XzbHgBTjYkgf6sHuc4Mbs=
Subject key identifier: D5:D0:CA:D0:E0:D1:11:53:C1:2E:EC:37:0E:44:84:13:E8:A9:88:30
Certificate issuer: /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial: 6F12FCDD6FDC24ECF91AC3E847B69171B83259E5
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35322e302f32332d3234203d3e203237373638.roa
Signing time: Tue 06 Jan 2026 19:26:00 +0000
ROA not before: Tue 06 Jan 2026 19:21:00 +0000
ROA not after: Tue 05 Jan 2027 19:26:00 +0000
asID: 27768
IP address blocks: 201.217.52.0/23 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:12:fc:dd:6f:dc:24:ec:f9:1a:c3:e8:47:b6:91:71:b8:32:59:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Validity
Not Before: Jan 6 19:21:00 2026 GMT
Not After : Jan 5 19:26:00 2027 GMT
Subject: CN=D5D0CAD0E0D11153C12EEC370E448413E8A98830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:a4:e8:1a:8f:85:34:56:02:1a:af:be:af:
50:35:8d:c5:0a:a6:36:5d:61:08:14:eb:fa:db:90:
86:ec:fb:0d:f0:16:a9:35:f8:e8:d0:67:14:c9:9f:
fa:53:e6:81:0c:9b:6b:9f:81:d3:a6:c4:cd:e2:4b:
67:f5:6d:d2:95:a8:5b:7e:09:d4:19:6c:86:5a:34:
4a:c3:6c:47:ea:13:3f:76:b0:55:ac:65:ca:28:c7:
72:bc:04:a0:4d:1e:db:49:96:35:20:5c:fa:18:39:
ff:8d:d4:47:c5:b7:d6:07:13:db:fb:bb:43:59:2f:
4b:08:a3:f2:b2:2d:78:ab:dd:7b:da:8f:51:16:1e:
a3:68:54:38:ec:b2:83:b4:42:e2:f5:e3:0b:dd:1d:
32:0e:81:f9:f3:1a:0d:49:5b:da:d2:a5:57:d9:9a:
74:f9:1f:6d:47:2c:1c:62:e1:32:3d:e6:ca:08:db:
7d:3c:47:43:6c:af:24:a5:2a:84:12:3b:80:a4:40:
89:8d:8f:83:b0:b7:84:83:f4:88:b7:f8:6d:65:45:
37:3a:59:67:94:e9:47:6e:d8:c6:36:af:a0:73:7a:
c2:43:ec:f2:38:19:71:80:e2:00:ec:da:b0:db:7c:
c1:2a:2d:0f:d3:17:a7:37:71:b8:49:44:0c:76:fa:
f4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D0:CA:D0:E0:D1:11:53:C1:2E:EC:37:0E:44:84:13:E8:A9:88:30
X509v3 Authority Key Identifier:
keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e35322e302f32332d3234203d3e203237373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.217.52.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:cd:05:6b:f9:40:95:66:a6:bf:bf:e7:93:d7:26:ce:1d:4a:
64:81:36:3c:fa:d3:d8:7c:e5:8e:b3:a0:eb:95:57:63:f8:39:
b6:ab:1e:43:99:06:1f:06:f9:3e:66:e3:f0:c0:ce:c8:a3:52:
8a:8a:dd:d2:70:ad:cf:67:c1:29:c7:79:26:03:a2:a6:cb:78:
3f:cd:3f:d0:ff:e7:8f:00:4e:d1:b0:12:82:b3:5c:e4:01:5c:
17:be:08:4d:82:fe:b1:4f:8a:93:19:57:26:56:19:31:df:d7:
6e:10:e0:b7:ff:58:94:0b:7d:f0:ed:53:a4:00:17:ba:c2:37:
e8:fd:a6:3f:55:67:85:9e:69:83:b6:be:ad:21:f2:a0:4e:a7:
e5:aa:2f:74:38:33:fc:f5:55:a6:16:a1:91:46:f0:67:4b:89:
18:1f:b2:92:ff:90:9e:bb:fa:16:f6:53:c1:cd:b2:76:dd:3c:
be:f9:c4:3b:b5:e1:bc:bc:13:c1:a1:a4:ab:10:59:49:39:e0:
af:db:aa:fb:31:f9:b5:19:be:b3:31:d1:95:d2:69:38:8e:c0:
b1:7e:1a:b9:b3:10:2d:d5:43:47:db:35:12:d4:18:3c:a0:9e:
2f:63:ea:ae:d7:b3:9d:e3:b1:fb:08:ee:b3:de:cc:c8:8d:53:
9d:97:73:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:06:28 2026 by rpki-client