This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e382e302f32322d3234203d3e203237373638.roa
File: 3230312e3231372e382e302f32322d3234203d3e203237373638.roa (raw, json)
Hash identifier: jhty6t5C+k2ROHThdtiZVxT8a6qM+iYh06t+rLitDf8=
Subject key identifier: 15:67:D1:F8:85:C6:C5:32:23:00:F4:EF:D5:FA:80:9C:1E:9E:E9:67
Certificate issuer: /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial: 63654E5290B5D70D273AC87FEC77C670F6BBC2F9
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e382e302f32322d3234203d3e203237373638.roa
Signing time: Tue 06 Jan 2026 19:25:58 +0000
ROA not before: Tue 06 Jan 2026 19:20:58 +0000
ROA not after: Tue 05 Jan 2027 19:25:58 +0000
asID: 27768
IP address blocks: 201.217.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.mft
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/F25A1B7D8F7ADF94C0DEBE8FEAC1C3BCD6058678.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 01 Feb 2026 15:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:65:4e:52:90:b5:d7:0d:27:3a:c8:7f:ec:77:c6:70:f6:bb:c2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Validity
Not Before: Jan 6 19:20:58 2026 GMT
Not After : Jan 5 19:25:58 2027 GMT
Subject: CN=1567D1F885C6C5322300F4EFD5FA809C1E9EE967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:0a:3f:7d:49:f1:34:dd:26:01:5c:7a:b1:
07:35:87:dd:eb:fa:2c:9c:e3:f9:d4:f4:c3:2d:53:
39:b5:76:e1:82:6c:9e:77:84:fa:70:b8:19:71:c8:
5a:fa:67:f1:c1:a7:4a:e2:39:f7:ed:25:d3:9c:8f:
3e:da:e8:55:ac:2d:0a:78:79:ae:b9:d5:a4:ca:6b:
81:80:f4:86:8e:9c:c6:5d:b5:2d:25:46:34:5f:a7:
a1:83:aa:e9:0b:d6:67:2a:5c:4c:cf:7c:fd:ce:86:
ce:d6:7d:a2:69:5a:6d:77:d1:bd:63:98:8f:d9:5c:
29:fa:03:93:62:d6:67:90:87:8c:c3:3a:ad:2a:7e:
c8:25:cc:39:93:6f:10:60:ea:92:f2:92:83:d2:41:
9e:23:4b:21:10:12:b3:f1:1c:6e:6e:9c:f4:4e:5c:
11:eb:f1:85:e4:5f:75:a1:52:7c:aa:16:8e:cc:e6:
37:b8:57:42:a3:b2:78:83:b4:47:70:a6:4f:43:b6:
ec:d5:f6:f5:3e:d4:e5:75:58:11:6d:26:66:e2:c5:
48:c9:46:a2:e3:60:f9:76:85:48:f2:f0:6d:13:01:
23:bc:e5:ab:30:48:45:31:6d:c8:31:82:8b:cb:70:
49:5c:f6:62:f3:5d:2d:3b:d0:53:e0:8c:93:21:b3:
bd:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:67:D1:F8:85:C6:C5:32:23:00:F4:EF:D5:FA:80:9C:1E:9E:E9:67
X509v3 Authority Key Identifier:
keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/3230312e3231372e382e302f32322d3234203d3e203237373638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.217.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:cf:53:cf:1a:ad:1c:9e:2a:e5:b3:66:85:d2:96:60:73:51:
aa:a3:ae:5e:91:f0:4e:26:8f:18:01:2e:77:c6:b4:d9:8c:5e:
94:72:22:b6:b8:f9:6e:b8:fd:a1:eb:11:2c:45:71:a2:5b:2f:
1e:26:7c:a1:2a:de:ff:46:7c:ba:ed:1d:27:e3:5a:fd:df:3b:
33:1a:c4:bb:7e:87:a8:71:2d:a4:ea:53:a3:9e:78:d1:d8:76:
ae:7b:23:36:b7:f7:66:cb:ed:e6:9f:57:d7:89:6a:c4:83:2d:
88:46:51:9d:99:01:26:c6:89:d4:a8:5d:fd:ac:de:bb:ca:c2:
99:cd:a8:34:ff:9e:3e:84:ff:5f:3d:cb:91:f6:ed:17:15:c4:
e0:2d:e0:5e:d9:67:de:c9:17:6a:1f:df:e2:70:aa:b3:94:35:
bd:0c:9a:ab:1d:4d:8c:58:7f:ab:3b:4a:c5:71:2f:c1:21:3e:
03:c4:61:28:38:b4:5b:22:99:ae:bb:af:41:eb:07:8b:d7:62:
97:81:92:7c:53:b4:d1:87:68:9c:8f:58:d0:1b:8c:2c:75:32:
10:77:f1:88:84:6c:0f:45:a5:a4:aa:01:2e:18:ae:c7:b6:fc:
56:7e:5c:56:8f:8b:f7:ce:06:99:b0:6f:51:9b:7d:01:59:29:
47:16:22:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:06:29 2026 by rpki-client